Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3130382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          wDdQ/dRPpoj6nBatoifgXlKwLkl4TlNuxW7ZZ6QIvOc=
Subject key identifier:   5F:69:30:87:12:C8:B4:0F:98:A4:25:7F:B0:FF:58:F6:76:43:1E:8E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       733A87F05A3F1A0AEE4421807880C3866A9E03EB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130382e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:03 +0000
ROA not before:           Sat 26 Feb 2022 23:55:03 +0000
ROA not after:            Mon 27 Feb 2023 00:00:03 +0000
asID:                     17995
IP address blocks:        103.164.108.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3a:87:f0:5a:3f:1a:0a:ee:44:21:80:78:80:c3:86:6a:9e:03:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:03 2022 GMT
            Not After : Feb 27 00:00:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:e6:5b:85:0b:d7:a4:02:2f:1f:e9:6e:da:
                    99:97:4d:6a:a4:2a:c9:7b:23:83:c1:88:2d:b1:e9:
                    7c:c3:d6:38:11:9b:81:fd:07:74:44:39:f0:af:33:
                    70:bd:02:c9:7c:0c:b3:e0:76:63:88:a9:ce:8c:4a:
                    64:de:1d:cd:f7:8b:f6:af:13:b4:d3:38:e6:93:d8:
                    93:a3:5d:e0:7a:64:17:4a:32:a5:1f:e8:8a:a9:bc:
                    41:a8:1f:8a:bd:59:23:63:88:f9:e9:b2:5c:2c:78:
                    95:25:56:d3:3c:f6:6f:51:b2:27:f6:de:d3:47:99:
                    7b:f6:c3:9d:1d:f0:14:de:17:45:76:1e:d3:63:3b:
                    a9:34:dc:8c:92:42:25:54:cb:98:9a:28:be:84:11:
                    27:e5:08:a3:f2:31:5c:25:e4:d6:3a:42:f1:8d:a9:
                    4a:f3:08:25:e6:cb:57:98:cb:2c:0b:53:2e:ea:52:
                    75:2f:0c:8f:f3:56:fe:71:42:16:c7:1b:af:4a:32:
                    43:e8:cc:89:a8:cb:84:ba:31:9c:55:4e:8e:67:19:
                    0b:b9:6f:2d:c0:21:6d:b0:e1:9d:e9:37:ab:37:cf:
                    22:be:9a:42:cf:82:9b:a7:3a:6d:38:4a:7a:78:fe:
                    d1:27:95:0a:ea:98:a1:a3:62:d9:ba:f3:06:ac:0f:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:69:30:87:12:C8:B4:0F:98:A4:25:7F:B0:FF:58:F6:76:43:1E:8E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:1d:a5:0a:91:f1:76:89:03:cf:60:ff:e0:f2:25:85:6c:e1:
         ed:45:41:6b:87:fe:39:7c:21:37:65:ce:8b:16:77:a6:88:1a:
         8a:2c:4d:c7:22:28:48:dd:ee:5e:60:e6:b8:c4:cd:98:40:5f:
         d7:18:dd:02:31:b0:27:ca:1b:66:0f:db:2b:4f:17:6a:2d:12:
         49:9c:f4:29:e1:60:1b:ba:01:6d:15:ea:8d:a7:8e:b9:65:d7:
         24:b5:ca:4c:6e:33:0e:5a:a3:2b:a0:8a:be:ed:9b:a4:6b:0e:
         4e:41:5f:92:65:84:63:14:bc:d1:5d:16:f7:b5:80:a6:f4:91:
         b9:9c:a3:5c:cd:ca:8d:65:9b:a6:9e:26:96:d8:35:b4:e2:23:
         bd:7e:d3:ae:58:6b:67:fc:20:d8:a9:5b:06:77:5d:96:4f:7d:
         e0:c5:fb:d2:c9:ac:17:47:a4:d2:aa:fc:04:66:0c:4d:31:92:
         36:b4:3a:2d:7e:2d:ec:de:c3:37:e6:84:be:cd:48:b8:29:2d:
         8d:8c:0b:28:c8:10:d8:58:15:73:ce:b7:fc:e7:0a:3f:b2:23:
         06:b6:9f:54:c0:3b:dc:ab:80:31:89:98:1d:72:03:66:63:2d:
         44:df:44:1e:a9:e6:bc:19:0a:31:e2:f7:56:eb:0f:17:d0:04:
         8a:d6:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----