Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e38362e302f32342d3234203d3e20313431303736.roa
File:                     3130332e3136352e38362e302f32342d3234203d3e20313431303736.roa (raw, json)
Hash identifier:          CL5JwMhKEUyJ+MkJHUnIlV3kdvfVbT6RX/QnSkeG5YM=
Subject key identifier:   7B:DE:0F:18:DE:E5:E9:FF:24:61:FF:9E:CB:89:4C:55:DC:D2:6E:FE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2520C028E262A9E5BFC3C3194B20A440407597E7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e38362e302f32342d3234203d3e20313431303736.roa
Signing time:             Tue 04 May 2021 07:02:37 +0000
ROA not before:           Tue 04 May 2021 06:57:37 +0000
ROA not after:            Wed 04 May 2022 07:02:37 +0000
asID:                     141076
IP address blocks:        103.165.86.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:20:c0:28:e2:62:a9:e5:bf:c3:c3:19:4b:20:a4:40:40:75:97:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  4 06:57:37 2021 GMT
            Not After : May  4 07:02:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:59:a0:88:7b:3c:fb:cc:14:8c:94:11:7b:
                    04:87:c6:48:f5:f4:cd:d4:a4:68:54:de:79:5c:7b:
                    f0:d0:e0:54:64:4f:5b:19:4c:f6:ef:c1:12:43:ee:
                    99:aa:84:d7:33:70:39:41:14:1f:c2:92:cb:e6:1e:
                    dc:6c:e6:ad:19:54:e0:87:d3:fc:9e:91:86:b5:d3:
                    e0:06:bf:a8:d8:94:5a:9b:8b:7a:30:e5:a4:ae:32:
                    60:bf:01:06:99:9e:39:48:08:28:17:e3:d3:13:6e:
                    aa:e4:6b:97:7c:b9:07:33:88:be:3c:b4:b7:37:f3:
                    b9:6a:12:e2:f2:6a:63:0d:47:5b:b7:21:29:da:57:
                    24:78:ed:54:8d:e0:72:07:5d:2b:fb:86:6a:eb:d3:
                    10:d5:03:50:f9:2a:ac:cb:9e:c9:5f:56:2f:16:fe:
                    2b:9c:7a:2e:9c:ac:db:bb:d2:d3:6b:49:7c:09:03:
                    59:24:f5:45:dd:7c:f1:9f:8e:60:4b:87:86:66:1b:
                    c2:9b:8c:ce:db:25:ef:e8:58:19:c4:35:cf:48:e1:
                    fc:cb:18:30:3a:81:27:11:9d:ac:83:7a:fe:e8:34:
                    56:f0:a2:59:d4:1f:e7:46:60:73:d9:af:b2:66:6a:
                    7e:f3:8d:84:36:ed:a0:37:45:f7:da:98:49:c2:a7:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DE:0F:18:DE:E5:E9:FF:24:61:FF:9E:CB:89:4C:55:DC:D2:6E:FE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e38362e302f32342d3234203d3e20313431303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c3:22:63:12:e0:be:4c:7a:b1:95:04:92:cf:73:3e:ef:a2:
         9e:8d:31:17:3e:f0:8a:08:70:5b:d8:61:8f:ee:3e:74:82:6c:
         f9:cc:e3:4f:5b:e9:a4:ff:df:90:84:70:83:fa:b0:0f:31:75:
         b2:84:c8:a4:11:96:e1:6b:22:73:85:7b:4c:7e:ba:a3:83:62:
         c8:a8:4d:f1:e0:29:fe:b3:c9:d7:43:95:2c:07:8d:7a:ae:5d:
         96:a0:d8:6e:98:ae:8b:53:d2:43:a4:68:e8:15:ef:ba:6c:2c:
         5f:63:ad:03:13:16:83:04:7c:08:35:06:cd:48:91:34:71:33:
         6b:f8:8d:df:d2:4a:90:a6:71:ad:4d:8d:31:6c:1e:33:aa:61:
         f8:53:b1:33:9a:8b:70:30:b4:8b:ac:2d:bd:74:a6:c3:1f:d0:
         f2:72:a2:aa:33:6f:cd:04:20:c8:20:d7:d8:22:46:da:2d:57:
         51:1a:92:77:cf:ab:86:f5:cd:99:6e:91:0c:25:0b:97:8d:bb:
         48:08:b8:03:cf:40:aa:a0:3c:36:22:d0:4e:8d:35:f4:59:6a:
         fe:e8:1f:2a:b9:c2:8e:de:28:d0:c1:b5:6d:56:f7:a5:08:1e:
         07:9a:14:ca:eb:dc:2a:9d:b6:66:10:b2:cd:a3:35:3a:29:08:
         f5:b7:47:e1
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUJSDAKOJiqeW/w8MZSyCkQEB1l+cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDUwNDA2NTczN1oX
DTIyMDUwNDA3MDIzN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCRkEyNTlBMDg4N0IzQ0ZCQ0MxNDhDOTQxMTdCMDQ4N0M2NDhGNUY0Q0RE
NEE0Njg1NERFNzk1QzdCRjBEMEUwNTQ2NDRGNUIxOTRDRjZFRkMxMTI0M0VFOTlB
QTg0RDczMzcwMzk0MTE0MUZDMjkyQ0JFNjFFREM2Q0U2QUQxOTU0RTA4N0QzRkM5
RTkxODZCNUQzRTAwNkJGQThEODk0NUE5QjhCN0EzMEU1QTRBRTMyNjBCRjAxMDY5
OTlFMzk0ODA4MjgxN0UzRDMxMzZFQUFFNDZCOTc3Q0I5MDczMzg4QkUzQ0I0Qjcz
N0YzQjk2QTEyRTJGMjZBNjMwRDQ3NUJCNzIxMjlEQTU3MjQ3OEVENTQ4REUwNzIw
NzVEMkJGQjg2NkFFQkQzMTBENTAzNTBGOTJBQUNDQjlFQzk1RjU2MkYxNkZFMkI5
QzdBMkU5Q0FDREJCQkQyRDM2QjQ5N0MwOTAzNTkyNEY1NDVERDdDRjE5RjhFNjA0
Qjg3ODY2NjFCQzI5QjhDQ0VEQjI1RUZFODU4MTlDNDM1Q0Y0OEUxRkNDQjE4MzAz
QTgxMjcxMTlEQUM4MzdBRkVFODM0NTZGMEEyNTlENDFGRTc0NjYwNzNEOUFGQjI2
NjZBN0VGMzhEODQzNkVEQTAzNzQ1RjdEQTk4NDlDMkE3RjcwQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/olmgiHs8+8wUjJQRewSH
xkj19M3UpGhU3nlce/DQ4FRkT1sZTPbvwRJD7pmqhNczcDlBFB/CksvmHtxs5q0Z
VOCH0/yekYa10+AGv6jYlFqbi3ow5aSuMmC/AQaZnjlICCgX49MTbqrka5d8uQcz
iL48tLc387lqEuLyamMNR1u3ISnaVyR47VSN4HIHXSv7hmrr0xDVA1D5KqzLnslf
Vi8W/iucei6crNu70tNrSXwJA1kk9UXdfPGfjmBLh4ZmG8KbjM7bJe/oWBnENc9I
4fzLGDA6gScRnayDev7oNFbwolnUH+dGYHPZr7Jman7zjYQ27aA3RffamEnCp/cL
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUe94PGN7l6f8kYf+ey4lMVdzSbv4wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM1MmUzODM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6VWMA0GCSqG
SIb3DQEBCwUAA4IBAQCJwyJjEuC+THqxlQSSz3M+76KejTEXPvCKCHBb2GGP7j50
gmz5zONPW+mk/9+QhHCD+rAPMXWyhMikEZbhayJzhXtMfrqjg2LIqE3x4Cn+s8nX
Q5UsB416rl2WoNhumK6LU9JDpGjoFe+6bCxfY60DExaDBHwINQbNSJE0cTNr+I3f
0kqQpnGtTY0xbB4zqmH4U7EzmotwMLSLrC29dKbDH9DycqKqM2/NBCDIINfYIkba
LVdRGpJ3z6uG9c2ZbpEMJQuXjbtICLgDz0CqoDw2ItBOjTX0WWr+6B8qucKO3ijQ
wbVtVvelCB4HmhTK69wqnbZmELLNozU6KQj1t0fh
-----END CERTIFICATE-----