Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e3131342e302f32332d3234203d3e20313431383933.roa
File:                     3130332e3136322e3131342e302f32332d3234203d3e20313431383933.roa (raw, json)
Hash identifier:          YiP+izB8FYCGSw0lx991ecqASF1pxuUM2AaysvVywY4=
Subject key identifier:   B1:3C:04:8E:1A:9C:7C:73:3D:BE:DD:68:B1:A2:69:73:FC:EB:A0:14
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       796D995FCA0CC27AF674B7692685896E15EF559C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e3131342e302f32332d3234203d3e20313431383933.roa
Signing time:             Thu 23 Sep 2021 06:49:47 +0000
ROA not before:           Thu 23 Sep 2021 06:44:47 +0000
ROA not after:            Fri 23 Sep 2022 06:49:47 +0000
asID:                     141893
IP address blocks:        103.162.114.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6d:99:5f:ca:0c:c2:7a:f6:74:b7:69:26:85:89:6e:15:ef:55:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 23 06:44:47 2021 GMT
            Not After : Sep 23 06:49:47 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:58:ed:25:6d:86:ec:c3:4b:7a:9a:25:1b:
                    7c:c6:d9:56:20:eb:79:13:a4:b8:f7:3d:d4:9c:70:
                    01:84:91:a0:b5:2d:10:d7:b4:45:f4:da:60:39:c9:
                    e0:18:fb:1e:dd:7e:49:71:f3:14:20:01:4e:a9:6e:
                    67:d3:c5:12:22:77:e5:db:fa:ec:9d:16:80:1c:77:
                    db:28:b0:34:e4:36:a8:f7:e0:69:c9:08:2d:87:94:
                    49:96:96:4a:7a:37:f8:5b:7b:15:91:36:8e:38:9e:
                    29:ea:bb:b7:70:a5:6a:76:5a:d6:5b:b4:c6:b6:e7:
                    89:1a:f1:cf:a8:5a:9e:dc:65:82:fa:c7:1d:49:0f:
                    30:20:87:c2:02:5e:18:38:20:48:b0:e5:c7:49:a7:
                    32:45:59:7f:2f:2a:fb:f2:8c:f9:30:e6:b0:19:52:
                    82:40:06:e3:93:f1:b6:58:71:4a:1c:e9:00:31:9d:
                    c5:7c:81:d7:44:2f:bb:72:2a:db:05:9b:d4:51:fe:
                    8c:bd:91:66:4b:4e:e4:af:e8:1e:9b:09:74:1f:42:
                    e5:02:04:2a:ed:af:e2:25:df:d0:a5:65:37:c1:08:
                    26:6e:60:78:3d:54:1f:d7:c6:a8:fd:e9:a1:c6:3b:
                    67:e7:2f:12:4b:9f:e5:c0:96:c6:5b:46:e0:d9:ea:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3C:04:8E:1A:9C:7C:73:3D:BE:DD:68:B1:A2:69:73:FC:EB:A0:14
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e3131342e302f32332d3234203d3e20313431383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:a0:89:27:29:b8:72:25:c1:ab:41:cf:ea:84:8e:1a:8c:be:
         6a:e8:f2:94:b5:43:7c:9e:a2:54:cb:08:b2:b3:95:db:7e:ac:
         67:93:fd:18:a6:98:f7:42:4a:2b:5c:e4:09:4c:56:66:ca:ab:
         34:c3:b0:98:64:be:f5:07:68:4b:29:ec:e1:f4:4f:91:2b:76:
         ae:00:59:7d:66:66:ec:ce:36:fc:85:09:cf:55:d8:f6:42:6f:
         4e:81:f3:11:38:d5:20:ec:ac:6a:58:3d:38:3a:a2:bd:e1:e0:
         57:e1:33:4d:9f:c9:81:62:ca:b9:8f:58:97:3f:37:c5:f1:e0:
         58:f3:02:0c:66:62:72:bf:c0:97:18:a4:57:48:83:66:02:d5:
         9b:e1:3b:a6:6d:b2:b8:9f:16:76:51:36:b8:bd:8c:f2:8c:bf:
         05:c7:e1:d6:2b:a1:7b:8a:4d:cd:9f:e2:c0:9b:6d:17:33:b6:
         17:03:08:46:41:94:a6:1d:40:d0:0f:40:e6:5c:c0:2e:29:17:
         fb:a3:2f:88:63:60:66:ae:1c:21:96:ad:5c:56:46:1c:d1:59:
         32:4a:1b:2a:33:9d:ca:dc:e5:3b:4a:a1:d2:67:00:1b:91:f3:
         a5:44:c6:4b:b6:ef:12:92:c8:eb:97:4d:9e:4f:df:66:51:08:
         78:47:ba:29
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUeW2ZX8oMwnr2dLdpJoWJbhXvVZwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkyMzA2NDQ0N1oX
DTIyMDkyMzA2NDk0N1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDA5RDdCNThFRDI1NkQ4NkVDQzM0QjdBOUEyNTFCN0NDNkQ5NTYyMEVCNzkx
M0E0QjhGNzNERDQ5QzcwMDE4NDkxQTBCNTJEMTBEN0I0NDVGNERBNjAzOUM5RTAx
OEZCMUVERDdFNDk3MUYzMTQyMDAxNEVBOTZFNjdEM0M1MTIyMjc3RTVEQkZBRUM5
RDE2ODAxQzc3REIyOEIwMzRFNDM2QThGN0UwNjlDOTA4MkQ4Nzk0NDk5Njk2NEE3
QTM3Rjg1QjdCMTU5MTM2OEUzODlFMjlFQUJCQjc3MEE1NkE3NjVBRDY1QkI0QzZC
NkU3ODkxQUYxQ0ZBODVBOUVEQzY1ODJGQUM3MUQ0OTBGMzAyMDg3QzIwMjVFMTgz
ODIwNDhCMEU1Qzc0OUE3MzI0NTU5N0YyRjJBRkJGMjhDRjkzMEU2QjAxOTUyODI0
MDA2RTM5M0YxQjY1ODcxNEExQ0U5MDAzMTlEQzU3QzgxRDc0NDJGQkI3MjJBREIw
NTlCRDQ1MUZFOENCRDkxNjY0QjRFRTRBRkU4MUU5QjA5NzQxRjQyRTUwMjA0MkFF
REFGRTIyNURGRDBBNTY1MzdDMTA4MjY2RTYwNzgzRDU0MUZEN0M2QThGREU5QTFD
NjNCNjdFNzJGMTI0QjlGRTVDMDk2QzY1QjQ2RTBEOUVBNDVDMTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCde1jtJW2G7MNLepolG3zG
2VYg63kTpLj3PdSccAGEkaC1LRDXtEX02mA5yeAY+x7dfklx8xQgAU6pbmfTxRIi
d+Xb+uydFoAcd9sosDTkNqj34GnJCC2HlEmWlkp6N/hbexWRNo44ninqu7dwpWp2
WtZbtMa254ka8c+oWp7cZYL6xx1JDzAgh8ICXhg4IEiw5cdJpzJFWX8vKvvyjPkw
5rAZUoJABuOT8bZYcUoc6QAxncV8gddEL7tyKtsFm9RR/oy9kWZLTuSv6B6bCXQf
QuUCBCrtr+Il39ClZTfBCCZuYHg9VB/Xxqj96aHGO2fnLxJLn+XAlsZbRuDZ6kXB
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUsTwEjhqcfHM9vt1osaJpc/zroBQwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjMyMmUzMTMxMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzODM5MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnonIwDQYJ
KoZIhvcNAQELBQADggEBAGSgiScpuHIlwatBz+qEjhqMvmro8pS1Q3yeolTLCLKz
ldt+rGeT/RimmPdCSitc5AlMVmbKqzTDsJhkvvUHaEsp7OH0T5Erdq4AWX1mZuzO
NvyFCc9V2PZCb06B8xE41SDsrGpYPTg6or3h4FfhM02fyYFiyrmPWJc/N8Xx4Fjz
AgxmYnK/wJcYpFdIg2YC1ZvhO6ZtsrifFnZRNri9jPKMvwXH4dYroXuKTc2f4sCb
bRczthcDCEZBlKYdQNAPQOZcwC4pF/ujL4hjYGauHCGWrVxWRhzRWTJKGyozncrc
5TtKodJnABuR86VExku27xKSyOuXTZ5P32ZRCHhHuik=
-----END CERTIFICATE-----