Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e36392e302f32342d3234203d3e20313431363434.roa
File:                     3130332e3136322e36392e302f32342d3234203d3e20313431363434.roa (raw, json)
Hash identifier:          Y8HbegRykbtHznTuUyj4ZC8e8Tt87mB0LwIkhNAW15o=
Subject key identifier:   FB:8A:19:59:DC:57:E5:3F:25:47:51:1D:39:60:26:73:B0:25:3E:C8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5BC123F2CC3D6FABE3EC7F6DA56B0B6C5D331E85
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e36392e302f32342d3234203d3e20313431363434.roa
Signing time:             Mon 06 Sep 2021 04:09:42 +0000
ROA not before:           Mon 06 Sep 2021 04:04:42 +0000
ROA not after:            Tue 06 Sep 2022 04:09:42 +0000
asID:                     141644
IP address blocks:        103.162.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c1:23:f2:cc:3d:6f:ab:e3:ec:7f:6d:a5:6b:0b:6c:5d:33:1e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  6 04:04:42 2021 GMT
            Not After : Sep  6 04:09:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2b:ed:a7:90:b2:6f:79:77:7f:c5:c8:b1:65:
                    60:49:13:fb:cd:3b:49:cf:d0:69:0c:b7:6c:c1:a1:
                    2b:ad:94:90:28:a7:21:84:03:ad:b9:40:43:8a:de:
                    8c:cc:a0:b1:cb:39:ca:97:b2:8e:4a:84:3b:ee:bd:
                    56:39:f3:40:95:77:db:ef:d3:b5:76:1e:e5:c1:9b:
                    cf:f3:70:38:ea:d9:e2:e5:ce:c4:1f:5c:2e:69:f6:
                    51:2d:5c:2c:e5:d9:90:a8:6a:0e:74:e1:9a:91:b1:
                    82:47:fd:71:1e:2e:62:d6:f4:a7:fe:6c:16:c6:07:
                    c7:97:53:31:1f:e0:bc:75:81:18:15:3d:fc:53:d8:
                    84:4b:73:ce:92:bd:91:55:b2:92:99:0e:f5:db:2d:
                    4f:0a:0f:f0:55:3d:61:a7:d8:ae:e4:05:48:ee:8f:
                    24:6d:9c:88:41:06:e5:0a:e2:78:20:9f:2b:1f:90:
                    97:0c:9f:11:50:ac:24:62:01:5a:c8:28:d5:fb:1c:
                    81:0c:fb:3f:b2:05:a9:19:c2:06:d9:dc:96:f7:7d:
                    9c:46:93:5a:85:be:9f:ac:47:b4:d8:10:41:36:28:
                    12:68:91:53:50:35:a1:2b:7d:95:21:15:0d:d7:2b:
                    e0:69:8b:ad:5f:a7:fd:6b:7b:1e:da:3c:36:5c:5f:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8A:19:59:DC:57:E5:3F:25:47:51:1D:39:60:26:73:B0:25:3E:C8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e36392e302f32342d3234203d3e20313431363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:35:7f:a4:db:33:ff:14:b2:2b:88:83:6f:bf:aa:01:6b:7f:
         98:37:ac:fd:b0:57:a0:44:93:77:e4:7f:4a:68:55:71:56:0b:
         96:c5:dc:8a:1f:52:ad:70:f7:44:c3:6f:d7:3f:9f:42:1b:37:
         4a:3b:17:a4:0a:74:8c:a7:93:8c:e5:2d:68:4b:ac:04:4c:f7:
         2d:57:c8:f2:fd:8e:a4:c5:b1:c3:a8:12:4f:22:4c:18:68:c0:
         e2:8d:3b:a9:56:a3:04:fb:82:1b:78:60:d5:87:d9:20:f0:63:
         3d:a1:bc:e5:5d:35:17:3c:32:4d:62:86:1f:d9:62:fa:3e:5b:
         0b:6c:40:18:01:55:ce:bf:7d:dc:7a:41:b5:37:c4:c5:cc:99:
         27:0c:b1:18:1f:41:fa:9d:da:cd:81:9c:60:10:8a:fe:cf:2e:
         70:a8:7c:6f:af:3a:89:4a:39:3d:49:1a:14:c2:00:22:87:fe:
         d1:13:55:0c:0b:62:24:58:ff:b5:89:38:d1:b7:50:4c:27:5e:
         68:32:27:9e:d3:ea:63:43:78:ce:25:1a:b2:f2:04:f9:68:c5:
         77:5d:2b:7c:b7:2c:91:79:ef:48:11:3c:d2:60:92:a4:1a:03:
         c6:7d:5f:85:ec:13:37:3a:d9:59:74:34:68:ba:c0:86:6d:9c:
         2b:f5:60:2d
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUW8Ej8sw9b6vj7H9tpWsLbF0zHoUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkwNjA0MDQ0MloX
DTIyMDkwNjA0MDk0MlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEQzJCRURBNzkwQjI2Rjc5Nzc3RkM1QzhCMTY1NjA0OTEzRkJDRDNCNDlD
RkQwNjkwQ0I3NkNDMUExMkJBRDk0OTAyOEE3MjE4NDAzQURCOTQwNDM4QURFOEND
Q0EwQjFDQjM5Q0E5N0IyOEU0QTg0M0JFRUJENTYzOUYzNDA5NTc3REJFRkQzQjU3
NjFFRTVDMTlCQ0ZGMzcwMzhFQUQ5RTJFNUNFQzQxRjVDMkU2OUY2NTEyRDVDMkNF
NUQ5OTBBODZBMEU3NEUxOUE5MUIxODI0N0ZENzExRTJFNjJENkY0QTdGRTZDMTZD
NjA3Qzc5NzUzMzExRkUwQkM3NTgxMTgxNTNERkM1M0Q4ODQ0QjczQ0U5MkJEOTE1
NUIyOTI5OTBFRjVEQjJENEYwQTBGRjA1NTNENjFBN0Q4QUVFNDA1NDhFRThGMjQ2
RDlDODg0MTA2RTUwQUUyNzgyMDlGMkIxRjkwOTcwQzlGMTE1MEFDMjQ2MjAxNUFD
ODI4RDVGQjFDODEwQ0ZCM0ZCMjA1QTkxOUMyMDZEOURDOTZGNzdEOUM0NjkzNUE4
NUJFOUZBQzQ3QjREODEwNDEzNjI4MTI2ODkxNTM1MDM1QTEyQjdEOTUyMTE1MERE
NzJCRTA2OThCQUQ1RkE3RkQ2QjdCMUVEQTNDMzY1QzVGNzdBRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcK+2nkLJveXd/xcixZWBJ
E/vNO0nP0GkMt2zBoSutlJAopyGEA625QEOK3ozMoLHLOcqXso5KhDvuvVY580CV
d9vv07V2HuXBm8/zcDjq2eLlzsQfXC5p9lEtXCzl2ZCoag504ZqRsYJH/XEeLmLW
9Kf+bBbGB8eXUzEf4Lx1gRgVPfxT2IRLc86SvZFVspKZDvXbLU8KD/BVPWGn2K7k
BUjujyRtnIhBBuUK4nggnysfkJcMnxFQrCRiAVrIKNX7HIEM+z+yBakZwgbZ3Jb3
fZxGk1qFvp+sR7TYEEE2KBJokVNQNaErfZUhFQ3XK+Bpi61fp/1rex7aPDZcX3et
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQU+4oZWdxX5T8lR1EdOWAmc7AlPsgwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjMyMmUzNjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6JFMA0GCSqG
SIb3DQEBCwUAA4IBAQA3NX+k2zP/FLIriINvv6oBa3+YN6z9sFegRJN35H9KaFVx
VguWxdyKH1KtcPdEw2/XP59CGzdKOxekCnSMp5OM5S1oS6wETPctV8jy/Y6kxbHD
qBJPIkwYaMDijTupVqME+4IbeGDVh9kg8GM9obzlXTUXPDJNYoYf2WL6PlsLbEAY
AVXOv33cekG1N8TFzJknDLEYH0H6ndrNgZxgEIr+zy5wqHxvrzqJSjk9SRoUwgAi
h/7RE1UMC2IkWP+1iTjRt1BMJ15oMiee0+pjQ3jOJRqy8gT5aMV3XSt8tyyRee9I
ETzSYJKkGgPGfV+F7BM3OtlZdDRousCGbZwr9WAt
-----END CERTIFICATE-----