Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e37322e302f32332d3234203d3e203137373639.roa
File:                     3130332e3135382e37322e302f32332d3234203d3e203137373639.roa (raw, json)
Hash identifier:          9nSA/PslVLAeowbe6iyDqxDK/UltjnY+A8uVapliWlg=
Subject key identifier:   67:EF:96:0F:6E:76:4D:FB:6D:1F:B8:BC:8E:50:C2:4A:68:6D:11:EE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       151DB16C82330EA753E839057B5B4712C456B2CC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e37322e302f32332d3234203d3e203137373639.roa
Signing time:             Sat 23 Oct 2021 11:00:00 +0000
ROA not before:           Sat 23 Oct 2021 10:55:00 +0000
ROA not after:            Sun 23 Oct 2022 11:00:00 +0000
asID:                     17769
IP address blocks:        103.158.72.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1d:b1:6c:82:33:0e:a7:53:e8:39:05:7b:5b:47:12:c4:56:b2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 10:55:00 2021 GMT
            Not After : Oct 23 11:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:ae:88:3b:01:a9:56:88:a6:36:a3:81:87:
                    8e:eb:44:80:ec:f8:e7:16:72:70:15:d6:db:0f:5a:
                    b1:45:8e:e8:12:48:54:69:10:ee:3a:75:5f:82:85:
                    98:51:16:fd:12:28:68:c8:22:7f:6d:a4:25:f4:2d:
                    b4:ca:85:a8:80:b6:c7:ae:8e:83:1b:3d:ee:b8:97:
                    27:07:ea:ae:8c:30:ad:0a:ca:bd:92:e7:89:ed:55:
                    64:eb:50:99:b0:3c:f2:5f:1b:e7:38:13:31:e6:65:
                    82:36:7f:b1:28:2b:2e:97:a8:42:40:46:48:ad:85:
                    8b:f6:2f:4d:56:ad:5d:75:81:ed:ed:cc:0e:95:dc:
                    39:60:f0:3a:7b:29:c2:28:da:ae:ba:b3:c1:e7:20:
                    21:39:e0:f5:76:b3:2b:e9:c7:82:c7:cf:7a:9b:52:
                    3f:4c:6b:a0:e1:0d:d5:40:e7:bc:63:13:bf:4f:88:
                    b2:a2:76:b0:3a:da:12:1f:fb:89:74:04:a6:5b:73:
                    e3:b7:97:df:93:d3:f6:fa:fe:f9:1f:2f:b9:28:6c:
                    a7:ef:ea:e8:33:ce:9b:23:25:f7:21:3a:b4:a4:34:
                    90:1d:f6:9a:d6:83:06:1d:46:c8:b3:17:ee:8b:ef:
                    4b:a7:2d:f3:fd:36:d0:32:0d:2f:70:35:64:23:e0:
                    fa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EF:96:0F:6E:76:4D:FB:6D:1F:B8:BC:8E:50:C2:4A:68:6D:11:EE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e37322e302f32332d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:cc:db:02:f3:8f:fa:b2:3d:39:c3:33:03:34:79:55:26:20:
         83:00:97:44:7b:95:a1:48:db:34:7d:fa:79:a7:a3:d1:85:05:
         3b:02:39:ba:c8:03:0b:22:ef:6a:0e:a7:ca:48:8e:f7:39:74:
         f9:ec:31:6c:0a:d8:20:9f:d5:4c:ac:b8:fd:a3:57:f9:20:7a:
         af:4b:77:7d:94:16:b7:0b:21:08:a8:bd:50:50:bf:6c:df:98:
         b6:38:8b:cd:6d:e9:7c:62:b6:a6:a9:c1:0e:42:06:5d:86:1f:
         56:62:b5:42:f5:b7:ac:6e:44:81:14:c8:58:18:08:e3:61:5d:
         72:57:0c:cc:ff:54:b6:dc:c1:5f:6a:3d:32:11:5e:90:b8:59:
         ff:cd:7a:b4:c3:6d:e5:a1:9b:cb:a5:54:67:89:2a:e1:df:5d:
         22:ce:f3:e9:1e:1e:64:e2:07:73:a7:cb:6e:d8:57:95:f1:f6:
         58:d8:26:c1:9a:9b:e5:72:c4:a4:d2:5f:54:22:0c:cd:32:b9:
         4f:b5:ce:c5:71:af:e4:50:d3:53:7c:53:8c:c0:75:24:fb:03:
         53:2a:32:aa:d7:fc:4d:3c:58:f5:13:e7:5b:21:e2:d5:6d:b2:
         69:c2:e1:45:88:6a:76:54:99:90:f2:54:d8:68:2d:bf:c2:91:
         60:5e:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----