Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e36362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3135382e36362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          V7ltY1ocH7UKI5NkytYyQAl5egmcmI+CcrBgoc6XgAg=
Subject key identifier:   7E:8E:0A:2A:63:C6:89:88:C2:83:08:77:B9:A7:65:A2:BE:3A:32:2A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       684E0F5C0067440E09DF38D5A9EAC0FF30D09854
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e36362e302f32332d3234203d3e203137393935.roa
Signing time:             Wed 27 Oct 2021 21:00:02 +0000
ROA not before:           Wed 27 Oct 2021 20:55:02 +0000
ROA not after:            Thu 27 Oct 2022 21:00:02 +0000
asID:                     17995
IP address blocks:        103.158.66.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4e:0f:5c:00:67:44:0e:09:df:38:d5:a9:ea:c0:ff:30:d0:98:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 20:55:02 2021 GMT
            Not After : Oct 27 21:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:59:e6:ba:c3:e0:88:36:45:8c:6e:26:29:
                    bc:ae:ed:c9:ad:d9:64:19:af:7b:ee:bc:b5:2b:d8:
                    f1:af:9d:9b:1f:21:49:69:f6:4d:2d:d4:0f:4a:ec:
                    eb:fc:52:e0:23:b7:55:b8:1c:da:5f:54:51:57:7a:
                    30:6d:3a:99:7a:b0:e4:aa:06:4e:2e:1c:94:6f:87:
                    5b:25:7c:97:53:f4:ff:4b:08:ce:52:d8:aa:0e:09:
                    92:bc:c5:17:ba:d2:39:31:ea:6f:fc:e7:e2:7b:cb:
                    70:fc:f7:20:9a:e2:b0:df:e4:4c:71:da:47:4b:3a:
                    26:3a:96:f4:c8:4c:bb:92:ef:bf:68:dd:d1:62:4b:
                    fb:fe:31:5f:b3:77:6e:04:3c:db:23:66:f9:2e:de:
                    c4:68:ca:c0:b2:b3:1d:65:bf:ab:58:4b:6b:3c:ab:
                    cb:1c:ec:8e:e4:99:e8:bf:49:d1:48:df:9a:08:78:
                    36:ad:3a:a8:dd:b6:f3:77:c4:54:95:d0:77:80:72:
                    0b:72:72:6e:54:25:6c:a2:f7:f1:6f:78:df:c2:e8:
                    ea:10:4a:63:e5:a3:f1:5e:96:72:d2:0a:0f:0b:bb:
                    ed:59:a7:3b:ed:8d:61:e9:dc:b0:72:be:c9:48:9a:
                    45:18:4c:15:6a:75:a6:57:8b:a8:2f:73:a3:8a:b7:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8E:0A:2A:63:C6:89:88:C2:83:08:77:B9:A7:65:A2:BE:3A:32:2A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e36362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:37:33:b9:1f:66:23:cf:fd:36:dd:4d:06:58:da:8b:cd:
         16:e8:6f:d4:62:30:09:6e:34:7c:cb:64:67:03:e3:0d:23:94:
         da:e4:39:2f:f9:2c:02:2b:c6:fe:7d:6f:09:42:4a:0f:1f:27:
         85:b3:b9:f1:60:5a:75:7a:d2:fa:f3:41:2d:8a:d4:90:a8:16:
         b6:1a:29:22:79:75:8b:1a:54:70:82:d4:1c:e3:6d:da:a5:65:
         af:af:f6:98:3c:be:4d:34:8d:f0:16:14:1d:c9:cb:ed:69:fd:
         95:bd:63:8f:ff:a8:14:a4:5f:7d:3f:bc:9a:d4:85:71:8b:5d:
         3d:05:f7:cb:5f:8b:06:a9:4b:e2:df:c0:31:77:d6:15:f4:97:
         bd:3d:77:0b:20:36:ef:b7:5c:12:14:38:9b:9e:e3:19:93:05:
         0d:92:09:f7:51:a0:e3:70:e2:b3:2c:29:05:7a:f5:dd:b1:05:
         ca:4e:3d:0c:64:e3:c1:58:9d:85:1c:73:b8:89:05:75:d2:ad:
         50:9c:f3:7f:63:cf:b9:a0:9c:f5:a5:24:76:41:a1:91:36:16:
         cb:d0:8d:b5:c6:e3:54:7a:f6:ea:9b:6d:50:20:39:eb:70:18:
         18:70:5e:1b:2a:2a:06:5a:5e:bc:58:44:3e:cd:19:07:ca:7e:
         9c:87:b8:8e
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUaE4PXABnRA4J3zjVqerA/zDQmFQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAyNzIwNTUwMloX
DTIyMTAyNzIxMDAwMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDOTE2NTlFNkJBQzNFMDg4MzY0NThDNkUyNjI5QkNBRUVEQzlBREQ5NjQx
OUFGN0JFRUJDQjUyQkQ4RjFBRjlEOUIxRjIxNDk2OUY2NEQyREQ0MEY0QUVDRUJG
QzUyRTAyM0I3NTVCODFDREE1RjU0NTE1NzdBMzA2RDNBOTk3QUIwRTRBQTA2NEUy
RTFDOTQ2Rjg3NUIyNTdDOTc1M0Y0RkY0QjA4Q0U1MkQ4QUEwRTA5OTJCQ0M1MTdC
QUQyMzkzMUVBNkZGQ0U3RTI3QkNCNzBGQ0Y3MjA5QUUyQjBERkU0NEM3MURBNDc0
QjNBMjYzQTk2RjRDODRDQkI5MkVGQkY2OERERDE2MjRCRkJGRTMxNUZCMzc3NkUw
NDNDREIyMzY2RjkyRURFQzQ2OENBQzBCMkIzMUQ2NUJGQUI1ODRCNkIzQ0FCQ0Ix
Q0VDOEVFNDk5RThCRjQ5RDE0OERGOUEwODc4MzZBRDNBQThEREI2RjM3N0M0NTQ5
NUQwNzc4MDcyMEI3MjcyNkU1NDI1NkNBMkY3RjE2Rjc4REZDMkU4RUExMDRBNjNF
NUEzRjE1RTk2NzJEMjBBMEYwQkJCRUQ1OUE3M0JFRDhENjFFOURDQjA3MkJFQzk0
ODlBNDUxODRDMTU2QTc1QTY1NzhCQTgyRjczQTM4QUI3QkU4RjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJFlnmusPgiDZFjG4mKbyu
7cmt2WQZr3vuvLUr2PGvnZsfIUlp9k0t1A9K7Ov8UuAjt1W4HNpfVFFXejBtOpl6
sOSqBk4uHJRvh1slfJdT9P9LCM5S2KoOCZK8xRe60jkx6m/85+J7y3D89yCa4rDf
5Exx2kdLOiY6lvTITLuS779o3dFiS/v+MV+zd24EPNsjZvku3sRoysCysx1lv6tY
S2s8q8sc7I7kmei/SdFI35oIeDatOqjdtvN3xFSV0HeAcgtycm5UJWyi9/FveN/C
6OoQSmPlo/FelnLSCg8Lu+1ZpzvtjWHp3LByvslImkUYTBVqdaZXi6gvc6OKt76P
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUfo4KKmPGiYjCgwh3uadlor46MiowHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM4MmUzNjM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeeQjANBgkqhkiG
9w0BAQsFAAOCAQEAS283M7kfZiPP/TbdTQZY2ovNFuhv1GIwCW40fMtkZwPjDSOU
2uQ5L/ksAivG/n1vCUJKDx8nhbO58WBadXrS+vNBLYrUkKgWthopInl1ixpUcILU
HONt2qVlr6/2mDy+TTSN8BYUHcnL7Wn9lb1jj/+oFKRffT+8mtSFcYtdPQX3y1+L
BqlL4t/AMXfWFfSXvT13CyA277dcEhQ4m57jGZMFDZIJ91Gg43DisywpBXr13bEF
yk49DGTjwVidhRxzuIkFddKtUJzzf2PPuaCc9aUkdkGhkTYWy9CNtcbjVHr26ptt
UCA563AYGHBeGyoqBlpevFhEPs0ZB8p+nIe4jg==
-----END CERTIFICATE-----