Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139342e302f32332d3234203d3e203338373538.roa
File:                     3130332e3136362e3139342e302f32332d3234203d3e203338373538.roa (raw, json)
Hash identifier:          tXorUf5IxlIMbYK650DZBrmBdxIy/ZxTJ7mEnZyMmU8=
Subject key identifier:   9B:DA:79:BD:41:28:71:6D:45:A8:09:51:30:57:56:93:09:5C:DB:19
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6C752C102155F8A1BE3D18E366D7941C444D3B96
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139342e302f32332d3234203d3e203338373538.roa
Signing time:             Tue 04 May 2021 08:49:29 +0000
ROA not before:           Tue 04 May 2021 08:44:29 +0000
ROA not after:            Wed 04 May 2022 08:49:29 +0000
asID:                     38758
IP address blocks:        103.166.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:75:2c:10:21:55:f8:a1:be:3d:18:e3:66:d7:94:1c:44:4d:3b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  4 08:44:29 2021 GMT
            Not After : May  4 08:49:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:86:ff:0e:ce:24:33:86:2e:67:c1:f4:7c:c3:
                    f9:f1:9b:f8:9a:48:ae:08:68:b2:8f:2a:83:7c:e6:
                    0f:dc:b0:fc:ec:d1:d9:7e:3c:6c:a5:37:01:7d:d4:
                    be:bd:07:59:f1:42:15:67:e2:5a:88:b4:00:99:cf:
                    5a:ee:82:a3:ad:fd:57:c1:dc:02:da:6b:ae:d1:be:
                    11:e7:88:3a:68:9f:5e:bb:36:87:07:5e:58:7e:bf:
                    f2:ba:86:e9:47:33:d5:01:c3:75:35:ae:bc:ef:5d:
                    4d:c0:01:c1:f5:2a:7a:e6:1a:eb:4e:40:98:93:c3:
                    b2:50:aa:e5:6d:a8:7a:56:d4:f4:96:3e:3b:9a:c6:
                    61:fc:77:2b:b2:5e:5b:cf:ab:f8:d5:f5:ef:1c:a4:
                    c8:a2:6f:c8:45:19:35:a0:ff:d3:5a:d6:5a:a3:9b:
                    31:65:ad:c7:d2:80:cb:c7:0c:bf:38:d4:2a:64:a0:
                    68:43:88:2a:8f:94:64:9c:67:3a:e2:e3:61:2a:d6:
                    98:a7:75:10:87:c8:81:5e:78:54:f8:2e:2e:3f:72:
                    bb:4c:ed:fc:79:41:c7:27:8a:d4:a3:dc:f7:ec:b3:
                    0a:a8:64:d1:51:3a:f1:1e:cd:23:33:7c:1c:e6:1b:
                    38:89:a7:4f:73:79:2a:11:5a:fd:ea:e6:14:67:8d:
                    70:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DA:79:BD:41:28:71:6D:45:A8:09:51:30:57:56:93:09:5C:DB:19
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139342e302f32332d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:ee:b6:e5:66:ca:c4:31:b7:44:30:ba:2f:c9:e6:3a:e0:4d:
         b4:bb:d7:bc:dd:fe:4a:22:a6:13:f2:c3:38:54:83:df:8e:6d:
         fc:b7:fc:eb:d3:be:c4:35:3e:d0:93:75:f5:5f:ab:8d:90:b0:
         49:e0:8e:0c:36:54:32:da:03:a3:e4:55:2a:43:27:f2:c3:f8:
         e0:d9:2d:97:cf:7f:57:bc:1d:c0:4d:bb:39:9b:c5:be:32:51:
         93:04:4d:c8:87:f4:ad:70:41:f3:d4:13:5e:12:c1:9f:fa:a9:
         92:53:c3:08:73:23:a2:71:c2:9c:51:4a:09:23:d6:a6:6b:24:
         ef:92:79:9d:69:a2:07:0e:1e:ac:b8:80:8a:de:ae:3c:4a:f5:
         bf:f9:67:fe:9a:23:93:11:63:06:46:8e:01:ee:08:b6:22:3b:
         f7:83:d2:7a:40:59:26:80:89:70:11:0b:20:cd:33:8e:20:b0:
         7d:bb:78:5c:b3:68:73:95:a1:f7:43:9a:cc:24:eb:3e:6a:ee:
         e8:00:62:66:53:bc:1d:48:c7:c0:d1:c5:e3:1b:ac:fd:72:f2:
         b1:fc:4a:49:dd:7b:30:21:0b:a9:d3:de:6d:4f:aa:a5:d9:19:
         c4:8b:34:55:bf:d2:83:d9:61:03:e5:dc:0d:a9:24:ce:ba:76:
         71:67:c8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----