Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3234382e302f32342d3234203d3e203435373332.roa
File:                     3130332e3136352e3234382e302f32342d3234203d3e203435373332.roa (raw, json)
Hash identifier:          1FppfXOXQ3YS2N6ZzHuGJHcAzwXI5E6vAxu7Yl/V+9A=
Subject key identifier:   E9:58:C3:D5:40:83:41:55:3C:3D:A4:4A:15:0B:F7:D8:58:A5:20:34
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       10945A2A5A3BD1062D086A2E96C8511AB4B559A1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3234382e302f32342d3234203d3e203435373332.roa
Signing time:             Fri 23 Apr 2021 02:16:21 +0000
ROA not before:           Fri 23 Apr 2021 02:11:21 +0000
ROA not after:            Sat 23 Apr 2022 02:16:21 +0000
asID:                     45732
IP address blocks:        103.165.248.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:94:5a:2a:5a:3b:d1:06:2d:08:6a:2e:96:c8:51:1a:b4:b5:59:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 23 02:11:21 2021 GMT
            Not After : Apr 23 02:16:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:dd:80:8d:5f:2f:c4:83:d7:b5:03:96:83:
                    99:11:87:64:b0:3f:6a:aa:64:75:4f:b1:74:f9:89:
                    91:33:55:0d:2e:51:8b:d9:29:6d:bb:ff:74:db:28:
                    7d:26:11:9a:f6:4a:c9:3f:e8:9e:88:55:52:72:59:
                    e6:13:b3:da:82:8f:a2:94:c6:54:02:f4:e9:17:d0:
                    75:4f:0b:6f:a0:2a:e1:79:18:f2:44:30:d4:7e:d7:
                    aa:5c:4c:3a:a5:d0:b5:eb:1a:27:0d:f2:51:6b:a6:
                    98:96:c2:69:e2:72:6c:2b:47:4c:75:7e:47:5d:a2:
                    31:9d:54:a6:76:fc:84:6d:80:b7:4c:fe:5a:79:45:
                    e4:6c:ba:18:50:8e:8c:b2:6e:7f:11:cf:fb:b2:83:
                    c5:e8:19:08:54:0d:eb:61:15:92:b8:2f:2d:c9:6a:
                    f4:18:e3:7b:b8:f3:54:5d:be:df:9a:16:c9:50:e4:
                    16:80:6e:06:a7:06:4d:96:56:0c:82:08:4b:7f:3b:
                    ab:f1:6b:4b:a0:f5:6c:78:9a:5e:c2:c7:51:28:60:
                    36:d1:3a:06:20:f9:bd:34:a5:9c:a5:e1:d8:6b:a4:
                    eb:6d:d9:db:26:95:ea:1b:29:37:99:f4:31:37:05:
                    61:5f:77:77:c2:bc:e8:a9:77:f9:bb:7b:e3:70:dc:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:58:C3:D5:40:83:41:55:3C:3D:A4:4A:15:0B:F7:D8:58:A5:20:34
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3234382e302f32342d3234203d3e203435373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:3d:4f:66:f4:d9:88:93:96:44:b4:5f:59:9f:e5:da:64:42:
         3b:12:44:c4:22:94:fb:9d:5a:34:82:6a:62:18:aa:00:1c:eb:
         ad:87:13:ef:4c:98:a6:12:f4:14:0a:17:c4:83:1b:5b:48:ba:
         82:41:b4:be:52:e8:ae:bf:b2:f8:c1:c3:87:81:4a:96:c2:01:
         b8:a0:1a:6f:ee:a2:74:2d:27:f9:9e:af:93:5f:1f:5a:8e:a7:
         25:fc:d4:8a:66:1e:39:d4:cc:66:63:1c:f8:dd:db:be:b1:5e:
         aa:8a:e7:b0:37:63:b9:81:cb:0d:64:6f:d1:85:89:b0:87:5e:
         c1:4d:90:48:65:41:18:e1:a0:f7:00:42:e9:4a:bf:dd:b7:50:
         f1:bc:60:b9:d0:cc:5b:1f:4e:fb:80:f0:26:55:8a:ea:fc:0f:
         a5:65:1e:c6:bc:de:ae:92:b8:e6:dc:4e:1b:f9:81:f3:29:24:
         2a:34:7a:d3:aa:6d:e8:e1:79:2b:73:d4:d8:e8:f7:49:42:62:
         7e:6a:93:c1:3b:f6:ec:30:cc:2e:91:64:19:93:3e:c5:4e:72:
         61:6f:4e:dd:08:12:4d:bc:2e:7d:c1:3d:1c:2b:e4:2c:1c:ba:
         a0:fc:0c:51:6d:5e:ae:ea:c0:29:57:44:d0:a3:52:61:ea:9f:
         d0:3b:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----