Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3231302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3231302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          JP8VFWVIQgyskGFEAJhdN/Yv8kNsUKmKM3xwhWugMeY=
Subject key identifier:   D1:9C:C4:18:CF:35:62:DF:A8:64:F3:39:58:52:8B:CA:0B:31:C4:DD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       21C71B14F62FE03C38270FDB6F571D21D89F9F9A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3231302e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:18 +0000
ROA not before:           Tue 02 Nov 2021 00:38:18 +0000
ROA not after:            Wed 02 Nov 2022 00:43:18 +0000
asID:                     17995
IP address blocks:        103.165.210.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c7:1b:14:f6:2f:e0:3c:38:27:0f:db:6f:57:1d:21:d8:9f:9f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:18 2021 GMT
            Not After : Nov  2 00:43:18 2022 GMT
        Subject: CN=3082010A0282010100C8746EDB18BB73737486D10D7F218EEC08C6B511F11167D9B55DD10B5CB26CD863DA6A580737A21DA669B4A6705A1C7C64D90A49A9DCEC3C9E569B60C8398D6DAB300C614ED802BC49FAC43A45D94F95D7B4292528B812A2E6A1BC5003A12BCF4FDBE8CC36331DA29E49366F23F98D64C11579E3B1BF962D1630030F0A2B43BF626D18EDE63C4A8EAFB6862403B94BC3D70183D992BABECDB7A32C06D1493FA927905E1751257284A691D2EFDBA21238585ACBA7371CAF780400197E6225EA236CE0B3688140744B351C19679DE6EB513B5122AA6EC2CD5F4D9C31394D61A1D380B4583BFD2B68D65E4DCEA49C0673E46993ACE709B3208EA0DDF5BC1209B7CB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:6e:db:18:bb:73:73:74:86:d1:0d:7f:21:
                    8e:ec:08:c6:b5:11:f1:11:67:d9:b5:5d:d1:0b:5c:
                    b2:6c:d8:63:da:6a:58:07:37:a2:1d:a6:69:b4:a6:
                    70:5a:1c:7c:64:d9:0a:49:a9:dc:ec:3c:9e:56:9b:
                    60:c8:39:8d:6d:ab:30:0c:61:4e:d8:02:bc:49:fa:
                    c4:3a:45:d9:4f:95:d7:b4:29:25:28:b8:12:a2:e6:
                    a1:bc:50:03:a1:2b:cf:4f:db:e8:cc:36:33:1d:a2:
                    9e:49:36:6f:23:f9:8d:64:c1:15:79:e3:b1:bf:96:
                    2d:16:30:03:0f:0a:2b:43:bf:62:6d:18:ed:e6:3c:
                    4a:8e:af:b6:86:24:03:b9:4b:c3:d7:01:83:d9:92:
                    ba:be:cd:b7:a3:2c:06:d1:49:3f:a9:27:90:5e:17:
                    51:25:72:84:a6:91:d2:ef:db:a2:12:38:58:5a:cb:
                    a7:37:1c:af:78:04:00:19:7e:62:25:ea:23:6c:e0:
                    b3:68:81:40:74:4b:35:1c:19:67:9d:e6:eb:51:3b:
                    51:22:aa:6e:c2:cd:5f:4d:9c:31:39:4d:61:a1:d3:
                    80:b4:58:3b:fd:2b:68:d6:5e:4d:ce:a4:9c:06:73:
                    e4:69:93:ac:e7:09:b3:20:8e:a0:dd:f5:bc:12:09:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9C:C4:18:CF:35:62:DF:A8:64:F3:39:58:52:8B:CA:0B:31:C4:DD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3231302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:be:4b:1d:fb:91:f0:7a:6b:fa:20:2f:17:e2:3a:2a:ed:
         bf:c7:7b:5e:0b:b0:6c:70:20:f2:17:aa:f4:65:1e:34:7f:09:
         7f:99:28:55:48:7b:fa:f9:b6:bd:fe:78:ab:ee:ea:fa:a6:41:
         68:2d:29:42:3b:f7:a0:6e:b0:db:47:cd:c3:94:ac:d1:4d:e2:
         66:21:9f:0a:5a:d8:9a:9f:c0:2c:07:ea:55:d8:8f:43:2d:3e:
         b0:2e:34:4c:74:86:6e:73:e4:d3:09:81:b6:26:0e:69:7b:8a:
         47:b5:f8:2f:8a:dd:3d:9d:aa:34:21:40:81:18:39:b4:f1:1e:
         b6:af:f6:fe:07:a6:fc:4a:38:80:2e:75:d3:4b:1f:34:a4:92:
         1a:fb:58:9e:50:0e:ed:9d:30:cf:e0:37:05:3a:09:b4:67:d7:
         b2:ac:0c:43:14:af:4a:39:40:ce:10:1c:e7:08:e5:7f:77:35:
         03:b0:1f:80:ad:12:70:24:5a:9a:d9:c7:cd:f1:58:6a:a5:87:
         87:ea:8a:62:34:73:a3:82:83:6a:30:ef:5d:52:a4:17:a0:13:
         04:21:87:02:2e:ea:ad:60:bd:4a:71:02:09:12:36:1e:1c:a2:
         a3:79:9f:2c:9a:47:12:a0:bc:7e:cc:42:1c:72:3f:64:02:e4:
         e5:dc:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----