Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e3131302e302f32332d3234203d3e20313431393330.roa
File:                     3130332e3136332e3131302e302f32332d3234203d3e20313431393330.roa (raw, json)
Hash identifier:          wDKxJom6vo+JTpBG/VRDJAoDghorODxY5eMssHP+Eas=
Subject key identifier:   52:94:83:2A:09:7E:81:B8:E5:6E:AB:4B:62:CB:34:8F:F9:FD:27:3D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3242940959C8F0EDD82D22142C08AB4B7BB5CFD9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e3131302e302f32332d3234203d3e20313431393330.roa
Signing time:             Wed 21 Apr 2021 02:54:35 +0000
ROA not before:           Wed 21 Apr 2021 02:49:35 +0000
ROA not after:            Thu 21 Apr 2022 02:54:35 +0000
asID:                     141930
IP address blocks:        103.163.110.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:42:94:09:59:c8:f0:ed:d8:2d:22:14:2c:08:ab:4b:7b:b5:cf:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 21 02:49:35 2021 GMT
            Not After : Apr 21 02:54:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:ce:b1:74:35:9b:04:ce:16:4e:b8:b0:5d:
                    09:49:58:b8:23:85:33:17:72:c2:90:c3:32:e1:5d:
                    26:8a:35:76:c6:c0:41:9c:8b:6e:73:96:ee:e0:0c:
                    1d:62:79:5d:4f:30:83:28:8c:82:bf:49:fd:af:f3:
                    e9:a1:85:cc:cd:bd:76:6c:d4:fd:74:2b:4c:fc:22:
                    af:89:e0:38:b9:3f:fc:80:4c:7b:56:aa:20:4d:2c:
                    fd:3a:86:b2:dc:07:7c:61:e3:13:8e:86:94:5e:a8:
                    1e:99:9d:02:4b:2b:45:3a:2e:9a:1f:b7:5e:a1:a8:
                    12:37:b4:9d:66:a0:6e:3b:ff:af:af:8e:29:66:3c:
                    a1:76:f7:b8:e4:66:26:63:69:af:fe:b6:3b:75:f5:
                    2f:31:02:75:9a:3e:75:20:a0:d3:90:9d:90:74:5b:
                    39:6d:b8:b5:b5:82:13:89:3f:e4:a6:7c:78:d9:c3:
                    a9:75:93:2c:b1:7c:d6:af:09:b5:e3:b3:96:c6:3a:
                    f7:7f:e6:a2:35:c3:60:80:03:dc:4b:93:9c:8a:70:
                    fa:80:d0:6e:75:78:fc:3f:1a:78:1f:ab:89:5b:56:
                    4d:f8:af:d1:3f:d5:2d:53:da:cc:02:1f:ab:21:76:
                    4a:0c:36:cc:f2:08:a0:54:66:55:1d:98:6a:a5:2d:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:94:83:2A:09:7E:81:B8:E5:6E:AB:4B:62:CB:34:8F:F9:FD:27:3D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e3131302e302f32332d3234203d3e20313431393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:71:43:71:4c:9c:4f:6d:a8:8c:b5:e9:fe:2d:6e:5f:ba:
         84:f7:ce:32:ec:46:d5:e2:0d:aa:44:e8:94:81:07:a1:fa:8d:
         55:83:f4:11:a4:8a:96:72:89:15:7b:97:88:47:23:8a:e2:30:
         0e:10:7b:2b:f2:e0:07:fb:e8:1e:26:61:f9:5c:99:4a:6f:6a:
         b0:10:bd:da:aa:8a:94:39:5b:57:41:d8:f3:43:31:03:a0:ea:
         74:26:4c:b2:97:a3:7b:a7:cd:bf:48:be:c5:b4:00:35:2d:09:
         af:21:0f:c2:cd:bf:c4:0e:fc:af:a7:20:44:d5:3b:f3:9e:68:
         bd:8c:64:d5:32:33:d5:48:17:81:56:fd:27:50:82:f0:3e:37:
         f2:8f:cc:9d:76:8d:5a:ac:77:ff:3d:b2:96:bb:48:33:fb:58:
         65:23:0d:a3:54:d0:ad:25:1f:2f:ef:88:e3:f5:06:65:17:f5:
         99:4a:13:c0:ed:93:0a:f6:ad:92:96:7a:5d:93:29:fb:7c:f7:
         c4:1d:8c:b2:37:4e:b3:3b:68:66:07:5b:12:b3:1f:ce:64:5f:
         e1:c2:29:48:0e:8f:af:5a:ad:ba:06:50:98:6a:5a:24:61:71:
         e6:ca:8c:5e:2e:32:9b:0b:81:fc:98:7e:2a:78:8d:98:59:58:
         38:46:42:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----