Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31362e3133322e302f32332d3234203d3e20313331373639.roa
File:                     3130332e31362e3133322e302f32332d3234203d3e20313331373639.roa (raw, json)
Hash identifier:          rSjNwTBrp+MKUoNM65dXzp3xO9l7+SKxge01ZYvSwaM=
Subject key identifier:   E1:28:82:7E:DA:F0:8F:65:6E:22:4B:A4:BD:39:F6:24:63:A8:D9:BE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       26B60576E42B2876CF56867C1F06FD48B87E1085
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31362e3133322e302f32332d3234203d3e20313331373639.roa
Signing time:             Tue 13 Apr 2021 08:00:52 +0000
ROA not before:           Tue 13 Apr 2021 07:55:52 +0000
ROA not after:            Wed 13 Apr 2022 08:00:52 +0000
asID:                     131769
IP address blocks:        103.16.132.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b6:05:76:e4:2b:28:76:cf:56:86:7c:1f:06:fd:48:b8:7e:10:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 13 07:55:52 2021 GMT
            Not After : Apr 13 08:00:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f2:05:1f:ad:08:27:ae:80:cb:74:cd:92:73:
                    ca:88:7a:10:51:61:c3:f5:fe:f4:bf:a5:5b:fd:ab:
                    ca:c8:19:e9:f3:4c:49:71:7b:ae:0f:fe:e9:d8:a0:
                    9b:2d:2f:00:30:a8:6e:05:49:55:c8:e6:81:3f:82:
                    e9:6f:9e:69:70:7a:48:52:5c:6b:67:29:e9:fc:a3:
                    e9:1b:e8:30:0f:f3:fa:5d:ba:b1:d5:b1:0b:2a:f4:
                    c2:f9:95:84:e7:95:75:de:67:60:c7:1c:40:13:11:
                    d6:5e:7b:39:2f:76:a2:46:85:ad:54:7b:8f:38:eb:
                    fa:ad:8c:c8:e2:14:a4:3a:77:b6:2b:99:83:1b:ef:
                    7c:40:66:d9:f6:eb:31:44:58:b8:68:d1:33:58:6d:
                    46:cc:a1:48:55:0e:f8:69:bf:5f:22:71:49:ea:32:
                    65:89:39:4f:9c:7a:f7:04:07:91:73:ca:cc:f9:65:
                    29:b0:e3:c0:79:09:e4:e3:3b:2c:f3:e1:11:30:5a:
                    78:35:97:c4:f4:57:3c:ef:34:dd:1c:8f:74:64:d7:
                    02:88:93:0c:37:a2:fb:85:7b:5d:64:21:e6:0c:0c:
                    d7:32:4c:ee:3f:03:38:f2:48:e7:9c:a2:27:0c:11:
                    6b:ed:19:17:a6:4b:5c:8a:cd:3e:8c:24:31:2a:61:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:28:82:7E:DA:F0:8F:65:6E:22:4B:A4:BD:39:F6:24:63:A8:D9:BE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31362e3133322e302f32332d3234203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:60:64:33:b0:3a:ae:42:e3:8f:a8:e4:22:3a:91:fe:1f:cf:
         ae:db:e9:0a:33:f4:fc:d4:56:5a:46:7a:de:0e:db:ba:f2:92:
         46:58:5f:5f:a5:07:c4:1a:26:28:e9:ec:bb:bb:ee:3e:10:56:
         c9:0f:2b:34:68:86:53:30:cb:6e:cf:63:fd:6d:94:a3:83:35:
         1e:80:c1:ad:56:6f:8e:80:1b:b5:2f:fe:88:24:54:24:ba:06:
         ad:c8:91:4b:01:ab:17:9a:21:e4:90:5e:a0:85:8f:a2:27:cf:
         f8:67:5f:74:21:49:20:e9:72:6e:88:a4:c4:f3:bb:4a:90:26:
         70:54:9f:13:d7:ee:dc:ce:1f:65:2e:3a:d1:70:ff:9f:4f:88:
         e0:6d:ae:97:ea:84:c4:36:8e:22:75:62:3a:05:13:94:03:8f:
         b8:c6:76:ae:7b:f0:ee:78:5c:e1:49:e5:53:a8:99:a3:20:3b:
         83:ea:11:7d:f0:7c:b6:69:a6:03:b3:58:f8:dd:1f:0d:b8:48:
         a6:cb:26:bc:3d:8b:e7:b3:4e:3f:f0:9b:41:ea:54:56:e3:36:
         98:2c:f8:d9:6e:e9:c8:7e:2d:7e:f2:f4:22:4c:fa:df:99:5a:
         cd:67:ac:67:08:af:19:2d:b4:34:a6:96:6a:32:b4:4e:e5:d2:
         d8:7f:57:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----