Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3234342e302f32332d3234203d3e203538333639.roa
File:                     3130332e3136352e3234342e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          TUisj576TMA+a5qsRnOQcnDGI7KzZZYvbO1CgJxNlfY=
Subject key identifier:   DA:A9:B8:EE:06:53:FB:58:09:75:52:06:C2:73:98:59:CB:CC:BB:DD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6703F96AC0AA94422801C0820BC71EF10ED37ACF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3234342e302f32332d3234203d3e203538333639.roa
Signing time:             Thu 15 Apr 2021 06:34:01 +0000
ROA not before:           Thu 15 Apr 2021 06:29:01 +0000
ROA not after:            Fri 15 Apr 2022 06:34:01 +0000
asID:                     58369
IP address blocks:        103.165.244.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:03:f9:6a:c0:aa:94:42:28:01:c0:82:0b:c7:1e:f1:0e:d3:7a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 15 06:29:01 2021 GMT
            Not After : Apr 15 06:34:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:05:59:5e:7f:d3:b5:51:b7:28:cb:2f:60:
                    42:ac:d0:f6:ee:fc:3d:af:64:c7:2f:d2:d3:1a:51:
                    78:a6:69:90:ad:90:4d:c2:c2:d1:ff:db:92:ef:e9:
                    ae:b6:0d:9e:ce:8b:19:2f:3b:69:33:3a:ef:ed:73:
                    f5:c4:be:7c:e7:63:e9:69:8d:1e:92:e0:0c:31:b4:
                    08:3c:32:c7:84:1f:b5:36:6f:33:84:6c:86:d5:3f:
                    d4:8b:61:67:45:2c:c6:d3:3b:cd:ea:c3:43:fb:7e:
                    4f:18:e7:db:5f:7a:8a:64:db:36:e7:50:90:37:c8:
                    bc:4b:88:ae:c0:6c:ce:6c:ef:e2:d0:bd:8c:e6:ce:
                    ef:b3:6c:ff:5e:06:f3:0e:32:77:f5:9f:e4:d7:99:
                    98:8f:9f:65:f7:03:81:df:2c:49:9c:1f:d1:75:63:
                    56:b8:df:ad:57:33:de:fc:3b:41:a4:4e:09:75:06:
                    43:d0:ba:bd:8a:48:5e:96:b7:02:b6:2e:4f:73:48:
                    cd:1f:aa:9d:cf:89:d3:32:c3:95:f2:3c:e5:08:43:
                    93:23:8f:db:8d:8e:ff:6b:bc:50:c4:15:9e:4b:26:
                    16:da:b2:67:59:a1:7f:cc:d2:e9:09:98:30:c5:da:
                    00:37:c8:07:bd:d9:ac:a4:a6:54:5a:e1:65:bb:3d:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A9:B8:EE:06:53:FB:58:09:75:52:06:C2:73:98:59:CB:CC:BB:DD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3234342e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:0a:48:73:2d:8a:24:6c:b4:78:3a:15:17:a9:99:4c:e4:
         d6:9a:0f:a8:2b:4b:e3:de:20:4b:c5:2e:f5:a7:5b:93:8c:ba:
         c2:c6:1f:80:49:38:39:6d:ae:11:fd:a1:9a:92:38:15:65:47:
         6d:4e:d0:31:24:0d:68:4b:75:74:06:27:8d:b1:9f:b3:70:e4:
         d0:a4:9d:29:09:77:50:cc:e1:96:0a:f3:cb:54:c8:fe:59:bf:
         84:95:38:20:aa:69:94:cf:86:eb:91:89:88:c7:31:4d:38:cc:
         cc:69:fc:ca:08:e4:1f:8c:98:0e:e9:4e:18:06:70:9f:e4:4e:
         fa:55:7e:8e:98:91:18:64:4f:4c:d6:d8:4b:e2:42:65:5c:10:
         fd:96:58:73:ab:57:67:e0:42:4b:d0:b7:3d:6c:f6:ed:fb:a3:
         99:5c:b7:d9:93:ec:66:8e:85:da:ec:6e:37:81:c9:33:9e:f6:
         ed:23:02:3d:6a:f6:1a:61:ae:8d:57:b5:24:a4:8c:4d:7b:fa:
         31:10:e5:1a:0f:89:54:a7:ba:11:85:fd:6b:74:26:74:dd:ed:
         1f:4f:80:eb:ed:3f:18:d7:c1:03:4d:23:79:01:94:8b:17:71:
         52:f4:59:43:64:83:22:80:1a:56:f5:1a:9e:d5:56:bc:b7:37:
         16:ac:d5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----