Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31362e3232332e302f32342d3234203d3e20313331373736.roa
File:                     3130332e31362e3232332e302f32342d3234203d3e20313331373736.roa (raw, json)
Hash identifier:          dVzhgfzsjXMbkQb1jt4tPH9x2Ml+DPoNfiQ+JOwEzj4=
Subject key identifier:   6E:7A:D9:F6:F5:63:3E:DB:59:50:D0:74:B1:42:A7:66:F7:BD:96:0C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       484804B57D2FE118D9A7D8D21191C359A2B26107
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31362e3232332e302f32342d3234203d3e20313331373736.roa
Signing time:             Thu 02 Sep 2021 06:52:07 +0000
ROA not before:           Thu 02 Sep 2021 06:47:07 +0000
ROA not after:            Fri 02 Sep 2022 06:52:07 +0000
asID:                     131776
IP address blocks:        103.16.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:48:04:b5:7d:2f:e1:18:d9:a7:d8:d2:11:91:c3:59:a2:b2:61:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  2 06:47:07 2021 GMT
            Not After : Sep  2 06:52:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:8b:2f:f9:b0:e4:89:6f:18:af:20:35:f7:
                    68:80:33:fe:8d:e0:6c:1e:4d:6c:bc:fe:c7:fa:28:
                    86:d6:bb:e1:e2:9e:35:d7:5b:89:2e:79:ab:8f:c7:
                    49:b9:24:75:b5:50:1a:b6:f3:cf:4a:8f:57:9d:5d:
                    cf:85:0c:79:f3:9d:c7:4c:39:5c:62:44:92:fd:4f:
                    7c:a1:40:2f:fe:f8:0b:ee:1a:77:11:c2:32:66:75:
                    1c:bc:f7:b7:27:db:6d:f1:19:e1:e2:ff:29:d8:37:
                    92:a2:ec:4a:97:14:43:96:35:80:3e:c6:7b:9f:8e:
                    e4:7a:52:8a:4b:33:2a:c1:8b:21:71:ee:98:ef:96:
                    4c:48:3b:c0:8f:87:d6:f0:0f:61:bd:9c:ff:27:16:
                    a7:6f:80:0a:98:38:9e:50:19:37:20:a8:09:8a:4f:
                    1e:3c:08:3b:9d:c6:56:f9:e9:0c:d4:42:4e:dd:0b:
                    93:9d:0a:da:06:2f:ec:91:58:32:04:19:74:61:da:
                    b2:7c:9b:de:ab:da:00:6a:ac:7d:87:f1:32:24:8e:
                    fe:57:54:5f:8b:51:d7:07:ef:61:73:48:bf:cf:d1:
                    a5:f4:53:0b:92:e1:51:92:44:c1:8f:a0:f6:66:d9:
                    df:bf:21:d3:5e:e2:c8:a7:f1:72:2c:a4:75:38:84:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7A:D9:F6:F5:63:3E:DB:59:50:D0:74:B1:42:A7:66:F7:BD:96:0C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31362e3232332e302f32342d3234203d3e20313331373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:7b:17:ea:76:02:66:ae:3c:ed:49:a6:3e:77:e6:be:31:7d:
         14:bf:b4:89:e5:dc:aa:11:0e:d8:25:b2:c3:67:88:e1:c6:35:
         05:6c:fb:68:4e:6d:b7:47:46:24:c7:29:c6:9b:63:71:f5:3c:
         a4:0f:8a:ed:a7:9c:5e:2f:41:ed:98:b4:f8:8f:16:2f:07:5c:
         5e:8c:1e:12:9a:b9:fe:03:c6:b7:f0:93:39:6b:3f:80:2a:10:
         0b:db:b2:68:b8:1a:2e:92:64:79:3c:95:dd:56:49:0b:0b:bd:
         6e:21:7e:98:4e:e9:c2:87:fa:77:a6:15:23:ac:cf:0f:96:b8:
         45:b4:2e:42:64:2e:d5:10:9c:91:9e:fa:08:0d:6d:0e:99:ac:
         93:4f:dd:d4:d9:62:a0:65:f9:22:bd:1d:a5:6c:25:00:db:78:
         2b:57:e8:bd:21:37:11:7a:82:ae:47:6b:eb:0f:ef:f7:74:ff:
         7d:f3:c0:12:43:b2:80:cc:29:18:21:bb:87:06:57:f2:8d:ec:
         7e:13:f7:a6:74:b4:d6:34:f4:a9:de:5e:55:52:c3:16:27:8d:
         11:37:63:74:6c:8b:75:59:1a:ea:b4:80:5f:99:e9:eb:6e:c8:
         e6:02:74:fd:b7:7c:21:84:49:a6:a5:26:aa:73:68:87:d9:c4:
         90:7d:c6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----