Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e33322e302f32332d3234203d3e20313431393239.roa
File:                     3130332e3136362e33322e302f32332d3234203d3e20313431393239.roa (raw, json)
Hash identifier:          XsrOO/ade2HthKV/J+SVOUzFIxWZJL3x8rUThanEq9s=
Subject key identifier:   B1:A3:B8:FD:BE:42:57:3B:03:FF:D0:F5:7A:C1:34:DC:34:54:A6:B2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3C199FC804C94D1499295683DC01711152DB17AA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e33322e302f32332d3234203d3e20313431393239.roa
Signing time:             Tue 20 Apr 2021 03:38:31 +0000
ROA not before:           Tue 20 Apr 2021 03:33:31 +0000
ROA not after:            Wed 20 Apr 2022 03:38:31 +0000
asID:                     141929
IP address blocks:        103.166.32.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:19:9f:c8:04:c9:4d:14:99:29:56:83:dc:01:71:11:52:db:17:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 20 03:33:31 2021 GMT
            Not After : Apr 20 03:38:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:a3:57:3d:cd:1c:bc:5f:ad:1f:76:fe:5d:
                    3f:a0:9f:0d:87:57:26:75:36:e3:a0:86:4a:94:61:
                    cb:7f:e7:90:1f:2b:60:52:d3:3f:a5:17:f1:ea:cd:
                    05:21:7c:21:23:4f:fb:b8:7a:ee:81:8a:48:4d:4e:
                    48:7a:cf:b4:21:10:b4:f5:f2:d7:f8:e2:d5:66:25:
                    1f:90:18:8c:d9:8e:4c:92:5d:2d:d7:b7:ce:b8:3e:
                    90:af:81:44:1e:9d:fb:4e:9b:34:01:eb:70:4e:3f:
                    06:21:ff:02:35:c0:31:f5:b5:20:d2:22:a3:f1:e3:
                    8a:1c:d0:20:4b:ab:48:b3:36:52:c5:ff:3c:5f:fd:
                    ee:cf:3a:bd:a3:ae:65:24:ac:7f:26:27:57:20:c8:
                    3a:c6:0e:b2:53:37:e5:53:3a:46:40:16:73:8c:ef:
                    a1:07:39:2b:ae:0e:5d:22:3b:53:83:fc:98:b0:81:
                    98:48:d4:55:d3:d4:c1:96:cd:e3:e8:9a:35:47:6f:
                    ed:96:7c:97:06:81:fa:fc:90:e1:4e:4d:ef:9b:83:
                    71:dd:4c:0f:91:da:9b:5d:9b:de:26:27:f7:6d:1c:
                    5b:d6:54:15:75:ff:2f:45:54:3f:10:f7:80:26:ff:
                    37:4f:a6:92:55:3b:c9:15:53:95:0d:31:a2:de:d8:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A3:B8:FD:BE:42:57:3B:03:FF:D0:F5:7A:C1:34:DC:34:54:A6:B2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e33322e302f32332d3234203d3e20313431393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:15:eb:4c:57:71:1a:bb:ff:49:1f:9d:c4:c8:25:08:69:9b:
         fc:fc:f4:0d:10:78:d4:b8:70:64:e9:ea:59:d2:4b:4d:51:b5:
         3b:14:1f:93:b2:43:e6:d5:6c:c2:31:b9:e7:3d:d7:6f:a1:8d:
         80:32:5d:2f:01:ba:38:ee:d7:ce:3e:47:9c:2d:c4:79:08:89:
         bc:1e:61:10:fc:83:bc:07:ff:a3:04:d0:e1:44:5d:34:15:48:
         8e:ba:c2:b9:2a:99:e0:3e:e6:26:97:cc:70:d5:a4:7d:58:8d:
         95:d6:89:44:55:a8:39:64:da:74:69:dd:da:63:95:d5:0e:9e:
         7b:c5:c7:ce:65:b8:0a:07:15:ef:b4:67:98:70:63:3b:cc:71:
         cb:45:69:59:73:5b:ec:fe:81:7f:f9:df:07:a6:1f:ca:14:e6:
         54:80:f8:12:3a:e8:e2:93:29:d7:6b:e7:0c:87:20:68:fb:81:
         e9:1c:7e:4a:64:3e:fc:48:2b:54:83:e5:16:49:99:a1:c4:c0:
         08:2e:95:81:54:2e:6d:91:2a:d9:4d:7d:90:10:a2:99:26:01:
         8e:e9:e8:5b:d6:96:2e:39:ed:1e:8c:b5:8f:eb:9c:d0:4a:b2:
         dd:d1:45:a7:16:71:d4:53:55:bb:ba:53:f8:3a:c9:a8:00:c7:
         e8:42:d4:74
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUPBmfyATJTRSZKVaD3AFxEVLbF6owDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDQyMDAzMzMzMVoX
DTIyMDQyMDAzMzgzMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDA5RTE5QTM1NzNEQ0QxQ0JDNUZBRDFGNzZGRTVEM0ZBMDlGMEQ4NzU3MjY3
NTM2RTNBMDg2NEE5NDYxQ0I3RkU3OTAxRjJCNjA1MkQzM0ZBNTE3RjFFQUNEMDUy
MTdDMjEyMzRGRkJCODdBRUU4MThBNDg0RDRFNDg3QUNGQjQyMTEwQjRGNUYyRDdG
OEUyRDU2NjI1MUY5MDE4OENEOThFNEM5MjVEMkREN0I3Q0VCODNFOTBBRjgxNDQx
RTlERkI0RTlCMzQwMUVCNzA0RTNGMDYyMUZGMDIzNUMwMzFGNUI1MjBEMjIyQTNG
MUUzOEExQ0QwMjA0QkFCNDhCMzM2NTJDNUZGM0M1RkZERUVDRjNBQkRBM0FFNjUy
NEFDN0YyNjI3NTcyMEM4M0FDNjBFQjI1MzM3RTU1MzNBNDY0MDE2NzM4Q0VGQTEw
NzM5MkJBRTBFNUQyMjNCNTM4M0ZDOThCMDgxOTg0OEQ0NTVEM0Q0QzE5NkNERTNF
ODlBMzU0NzZGRUQ5NjdDOTcwNjgxRkFGQzkwRTE0RTRERUY5QjgzNzFERDRDMEY5
MURBOUI1RDlCREUyNjI3Rjc2RDFDNUJENjU0MTU3NUZGMkY0NTU0M0YxMEY3ODAy
NkZGMzc0RkE2OTI1NTNCQzkxNTUzOTUwRDMxQTJERUQ4QzY5MzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGaNXPc0cvF+tH3b+XT+g
nw2HVyZ1NuOghkqUYct/55AfK2BS0z+lF/HqzQUhfCEjT/u4eu6BikhNTkh6z7Qh
ELT18tf44tVmJR+QGIzZjkySXS3Xt864PpCvgUQenftOmzQB63BOPwYh/wI1wDH1
tSDSIqPx44oc0CBLq0izNlLF/zxf/e7POr2jrmUkrH8mJ1cgyDrGDrJTN+VTOkZA
FnOM76EHOSuuDl0iO1OD/JiwgZhI1FXT1MGWzePomjVHb+2WfJcGgfr8kOFOTe+b
g3HdTA+R2ptdm94mJ/dtHFvWVBV1/y9FVD8Q94Am/zdPppJVO8kVU5UNMaLe2MaT
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUsaO4/b5CVzsD/9D1esE03DRUprIwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM2MmUzMzMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6YgMA0GCSqG
SIb3DQEBCwUAA4IBAQBAFetMV3Eau/9JH53EyCUIaZv8/PQNEHjUuHBk6epZ0ktN
UbU7FB+TskPm1WzCMbnnPddvoY2AMl0vAbo47tfOPkecLcR5CIm8HmEQ/IO8B/+j
BNDhRF00FUiOusK5KpngPuYml8xw1aR9WI2V1olEVag5ZNp0ad3aY5XVDp57xcfO
ZbgKBxXvtGeYcGM7zHHLRWlZc1vs/oF/+d8Hph/KFOZUgPgSOujikynXa+cMhyBo
+4HpHH5KZD78SCtUg+UWSZmhxMAILpWBVC5tkSrZTX2QEKKZJgGO6ehb1pYuOe0e
jLWP65zQSrLd0UWnFnHUU1W7ulP4OsmoAMfoQtR0
-----END CERTIFICATE-----