Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3135302e302f32332d3234203d3e20313431393232.roa
File:                     3130332e3136352e3135302e302f32332d3234203d3e20313431393232.roa (raw, json)
Hash identifier:          IIEJGEl4AWzZ66ISll/BJqcLcJaXoyZKqlIZXTwPxmw=
Subject key identifier:   3E:A3:68:AC:80:D2:FA:CD:31:F4:24:D6:2C:2C:81:80:A5:75:4F:37
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4FC5A670E30C2F865CC7B4C5AC1C1AB17EF955B2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3135302e302f32332d3234203d3e20313431393232.roa
Signing time:             Mon 10 May 2021 03:15:15 +0000
ROA not before:           Mon 10 May 2021 03:10:15 +0000
ROA not after:            Tue 10 May 2022 03:15:15 +0000
asID:                     141922
IP address blocks:        103.165.150.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c5:a6:70:e3:0c:2f:86:5c:c7:b4:c5:ac:1c:1a:b1:7e:f9:55:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 10 03:10:15 2021 GMT
            Not After : May 10 03:15:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ee:06:21:79:d3:75:fd:13:87:b9:48:ad:be:
                    53:1f:0a:2d:ba:c5:1f:db:c6:d2:dd:05:48:74:d5:
                    8b:b9:62:bf:20:b6:8a:39:35:77:88:8a:71:51:25:
                    3b:79:7f:29:65:a5:42:5e:9c:c4:93:b3:46:3f:94:
                    19:3b:c5:27:51:d1:e7:9b:af:07:55:1c:b6:fc:04:
                    fc:b5:4c:ee:58:46:e8:8c:3e:f4:0d:c9:dd:8e:6b:
                    eb:0f:03:3e:b4:f4:4a:b0:98:4f:9e:cd:7d:7b:cc:
                    99:a7:66:8e:a1:19:d5:2d:ff:68:b8:05:69:ca:2d:
                    02:15:4d:af:ad:fd:26:93:98:ac:89:8e:b5:7d:50:
                    21:1e:4f:1d:4c:41:fc:ae:5f:87:2c:7e:bf:a2:87:
                    1a:42:15:c2:3b:e6:65:2a:2b:c6:cf:48:e3:81:59:
                    ce:e2:50:70:c4:e8:d0:d7:65:be:d7:b6:93:75:15:
                    6f:f7:f3:af:20:8b:3f:f2:29:f1:99:97:2e:f7:ca:
                    4e:dd:2b:57:c5:3c:9d:db:67:34:d6:7c:96:a0:25:
                    1d:16:f8:24:db:8a:5f:06:40:41:f0:d0:b1:22:95:
                    1e:24:6c:c2:7c:29:0a:36:9e:8c:fd:80:fe:0b:22:
                    9d:3a:1c:82:81:39:38:af:54:94:c4:01:ca:8c:29:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A3:68:AC:80:D2:FA:CD:31:F4:24:D6:2C:2C:81:80:A5:75:4F:37
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3135302e302f32332d3234203d3e20313431393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:c7:0f:5c:58:92:ee:77:4c:74:cc:a2:e3:d5:e2:ee:c1:63:
         47:bd:65:c4:99:a4:fd:99:b5:52:a7:c6:98:f2:43:e3:8e:88:
         4f:96:91:c3:0a:ac:c5:30:f5:30:c4:87:03:4c:e1:49:63:cd:
         8a:ae:a7:6c:38:77:2d:e3:83:bf:c8:87:68:b7:20:47:ca:65:
         bc:5e:14:78:04:ca:31:cc:75:bf:c2:b2:bd:5b:56:2c:ba:ac:
         16:d4:3b:d7:1d:13:76:cd:03:18:bd:36:88:66:2f:18:1e:fc:
         fc:3d:b5:0c:47:6e:52:b7:cc:54:ff:5f:15:37:53:84:66:21:
         0b:4e:ad:3c:66:fe:f7:f3:6e:c6:59:4c:a4:5f:34:c0:64:4a:
         da:f7:a1:71:d7:fc:e9:81:19:2a:98:16:3d:d0:28:88:f4:f1:
         d2:2e:fc:ad:52:4c:f7:dd:1c:13:68:d3:97:fc:37:dd:7e:fa:
         98:1b:d8:e1:96:1d:bb:36:76:97:73:db:a1:5e:c2:63:e2:dc:
         89:27:fa:a8:c3:de:e3:4e:2e:88:1c:6b:86:45:c6:38:a2:04:
         2b:52:cd:b2:07:61:9a:34:b9:31:62:e7:b1:02:6a:ce:d0:b0:
         52:44:91:92:0d:98:3e:09:8e:dc:fd:1e:41:83:b0:b2:84:c5:
         4c:a1:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----