Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e362e302f32332d3234203d3e203137363730.roa
File:                     3130332e3136332e362e302f32332d3234203d3e203137363730.roa (raw, json)
Hash identifier:          KH1tMBiGc6/Tp48mcDkEqN1YD0NQTIeyCTkbKrhTrVg=
Subject key identifier:   D8:B5:6E:84:E7:0A:06:88:36:BD:4A:1F:71:F5:D0:57:90:03:7E:D0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3CB5E7CE8AEEEBFF5254AB1DBE106F154963A35D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e362e302f32332d3234203d3e203137363730.roa
Signing time:             Thu 20 Jan 2022 06:00:01 +0000
ROA not before:           Thu 20 Jan 2022 05:55:01 +0000
ROA not after:            Fri 20 Jan 2023 06:00:01 +0000
asID:                     17670
IP address blocks:        103.163.6.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b5:e7:ce:8a:ee:eb:ff:52:54:ab:1d:be:10:6f:15:49:63:a3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 20 05:55:01 2022 GMT
            Not After : Jan 20 06:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:84:47:42:eb:bb:59:bf:48:59:f6:02:ad:
                    b0:07:09:3a:bb:31:9c:42:10:8f:76:22:99:d3:00:
                    00:94:95:4a:46:ec:c5:4b:b1:b7:43:2b:2e:12:a5:
                    ed:f7:89:5e:b3:f8:9f:f3:ee:8f:f3:67:c1:3e:5c:
                    40:b2:7f:9e:5a:a4:a7:56:ec:70:df:59:a5:06:a4:
                    08:05:4d:ac:7b:96:7a:f0:ff:bf:1e:d8:36:d7:64:
                    a3:76:d6:e7:c4:6c:11:c7:81:27:38:f7:ae:2f:a8:
                    21:a6:b0:88:2d:48:20:89:ed:50:c1:a6:2b:37:1c:
                    4b:cc:73:33:1c:a4:64:f0:ad:67:a9:b9:6b:e5:2e:
                    29:df:a9:ca:69:a2:f0:bf:1c:54:44:75:27:40:2b:
                    30:90:e9:3d:5a:bc:03:c8:28:39:25:87:e5:5a:7f:
                    18:19:a1:4e:00:88:93:30:22:d6:8b:43:23:67:58:
                    42:22:4d:8d:d9:93:fe:cc:d2:5e:c5:70:1c:e7:f4:
                    ee:fd:23:ff:09:59:a6:26:45:ac:91:ac:b8:34:bc:
                    9d:b4:c5:d0:e2:7e:74:58:82:4d:e7:3b:76:aa:a2:
                    96:5a:d3:cb:2d:51:d7:25:c5:e2:56:33:c3:f3:2a:
                    48:c0:ec:e1:4f:67:5c:83:51:5f:45:75:9c:26:9b:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B5:6E:84:E7:0A:06:88:36:BD:4A:1F:71:F5:D0:57:90:03:7E:D0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e362e302f32332d3234203d3e203137363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:22:43:f6:4b:58:8d:6b:17:de:c9:53:a7:79:12:b9:2e:90:
         da:a7:1a:d6:27:7d:06:dd:86:16:a5:77:bd:0e:9e:5f:80:4b:
         ab:c8:a4:3e:e1:1e:aa:48:0e:ad:84:55:4f:08:bd:77:bf:f6:
         57:e9:08:aa:e0:2a:a3:cf:58:36:63:d9:bb:ab:90:fe:ad:3d:
         05:7d:a6:23:98:b2:6b:4b:16:24:b0:78:e2:2f:f2:af:10:7d:
         0d:35:19:0c:eb:20:f4:41:2f:cf:0e:c3:fd:76:f9:c7:67:07:
         d2:ba:27:8f:64:38:eb:05:3b:40:f9:0c:fe:f5:dc:8c:1f:85:
         2f:28:70:b7:db:db:2d:50:7c:57:84:66:2f:16:f9:61:d1:40:
         4b:c2:83:6a:c0:88:bf:df:c6:da:22:a9:20:ba:47:03:57:8c:
         73:20:c8:64:0b:db:87:bd:0d:04:b5:29:17:3c:5b:bb:2f:36:
         d6:14:02:4a:f3:ad:c2:59:25:5b:ce:d4:4c:e6:41:88:20:45:
         3c:0a:5d:15:5a:79:80:15:00:2e:7c:7d:bf:de:43:1b:6e:55:
         fb:d3:73:0a:69:13:c3:4c:37:87:9f:7c:29:33:b7:02:c0:b0:
         95:45:dd:dc:61:3c:d9:10:9f:d7:3c:bf:f7:e0:72:31:f5:67:
         f8:fe:79:00
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUPLXnzoru6/9SVKsdvhBvFUljo10wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDEyMDA1NTUwMVoX
DTIzMDEyMDA2MDAwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDMDRBODQ0NzQyRUJCQjU5QkY0ODU5RjYwMkFEQjAwNzA5M0FCQjMxOUM0
MjEwOEY3NjIyOTlEMzAwMDA5NDk1NEE0NkVDQzU0QkIxQjc0MzJCMkUxMkE1RURG
Nzg5NUVCM0Y4OUZGM0VFOEZGMzY3QzEzRTVDNDBCMjdGOUU1QUE0QTc1NkVDNzBE
RjU5QTUwNkE0MDgwNTREQUM3Qjk2N0FGMEZGQkYxRUQ4MzZENzY0QTM3NkQ2RTdD
NDZDMTFDNzgxMjczOEY3QUUyRkE4MjFBNkIwODgyRDQ4MjA4OUVENTBDMUE2MkIz
NzFDNEJDQzczMzMxQ0E0NjRGMEFENjdBOUI5NkJFNTJFMjlERkE5Q0E2OUEyRjBC
RjFDNTQ0NDc1Mjc0MDJCMzA5MEU5M0Q1QUJDMDNDODI4MzkyNTg3RTU1QTdGMTgx
OUExNEUwMDg4OTMzMDIyRDY4QjQzMjM2NzU4NDIyMjREOEREOTkzRkVDQ0QyNUVD
NTcwMUNFN0Y0RUVGRDIzRkYwOTU5QTYyNjQ1QUM5MUFDQjgzNEJDOURCNEM1RDBF
MjdFNzQ1ODgyNERFNzNCNzZBQUEyOTY1QUQzQ0IyRDUxRDcyNUM1RTI1NjMzQzNG
MzJBNDhDMEVDRTE0RjY3NUM4MzUxNUY0NTc1OUMyNjlCRTZCMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASoRHQuu7Wb9IWfYCrbAH
CTq7MZxCEI92IpnTAACUlUpG7MVLsbdDKy4Spe33iV6z+J/z7o/zZ8E+XECyf55a
pKdW7HDfWaUGpAgFTax7lnrw/78e2DbXZKN21ufEbBHHgSc4964vqCGmsIgtSCCJ
7VDBpis3HEvMczMcpGTwrWepuWvlLinfqcppovC/HFREdSdAKzCQ6T1avAPIKDkl
h+VafxgZoU4AiJMwItaLQyNnWEIiTY3Zk/7M0l7FcBzn9O79I/8JWaYmRayRrLg0
vJ20xdDifnRYgk3nO3aqopZa08stUdclxeJWM8PzKkjA7OFPZ1yDUV9FdZwmm+az
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQU2LVuhOcKBog2vUofcfXQV5ADftAwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjMzMmUzNjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnowYwDQYJKoZIhvcN
AQELBQADggEBAC0iQ/ZLWI1rF97JU6d5ErkukNqnGtYnfQbdhhald70Onl+AS6vI
pD7hHqpIDq2EVU8IvXe/9lfpCKrgKqPPWDZj2burkP6tPQV9piOYsmtLFiSweOIv
8q8QfQ01GQzrIPRBL88Ow/12+cdnB9K6J49kOOsFO0D5DP713IwfhS8ocLfb2y1Q
fFeEZi8W+WHRQEvCg2rAiL/fxtoiqSC6RwNXjHMgyGQL24e9DQS1KRc8W7svNtYU
AkrzrcJZJVvO1EzmQYggRTwKXRVaeYAVAC58fb/eQxtuVfvTcwppE8NMN4effCkz
twLAsJVF3dxhPNkQn9c8v/fgcjH1Z/j+eQA=
-----END CERTIFICATE-----