Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3130392e302f32342d3234203d3e203538333639.roa
File:                     3130332e3136372e3130392e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          3hbQKe7cX8K4rG/7CJm9VsMN4kvWCFR/GODuypZ9gww=
Subject key identifier:   4B:FF:F6:BE:9E:A2:77:6B:DD:74:8F:F9:C9:BD:EC:0D:94:88:07:58
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       119C05E31206B12DA258B9D2C447763DF797823E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3130392e302f32342d3234203d3e203538333639.roa
Signing time:             Wed 30 Jun 2021 08:46:34 +0000
ROA not before:           Wed 30 Jun 2021 08:41:34 +0000
ROA not after:            Thu 30 Jun 2022 08:46:34 +0000
asID:                     58369
IP address blocks:        103.167.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9c:05:e3:12:06:b1:2d:a2:58:b9:d2:c4:47:76:3d:f7:97:82:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 30 08:41:34 2021 GMT
            Not After : Jun 30 08:46:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:cd:c1:0c:ae:ce:74:0c:74:40:65:20:2e:
                    51:0b:80:05:2e:46:92:97:82:50:5f:a9:75:3c:72:
                    fc:e1:c6:b6:5a:33:96:a1:06:1a:42:5a:b3:62:47:
                    be:cd:75:2d:39:f7:95:40:25:a5:54:55:cb:0d:18:
                    1b:15:a1:a8:33:8c:bd:9e:63:1b:a7:e8:02:a3:cb:
                    cc:2e:9f:cd:66:bd:87:3a:48:10:db:9e:1d:51:eb:
                    9e:da:06:7b:50:bd:1f:aa:b0:3a:56:48:f9:37:4d:
                    b1:4c:04:14:91:86:11:d6:19:6b:21:00:6f:8d:8e:
                    75:ab:76:40:c5:c1:04:8e:3c:99:60:94:42:f9:27:
                    c5:ee:fe:bd:c1:35:68:3b:1f:54:ab:dc:20:65:26:
                    70:96:b7:23:ab:6b:88:d2:95:6f:31:f7:1c:df:19:
                    7f:35:d6:cc:9b:72:77:23:bf:d3:e4:54:68:36:1a:
                    81:22:8c:d9:88:93:44:c5:76:db:d9:68:c8:26:8a:
                    80:1d:d3:6d:72:f4:c3:96:b8:9b:22:17:49:29:9a:
                    90:a9:eb:e4:bd:ca:2a:ed:11:f6:ff:6c:93:1e:76:
                    0b:aa:a6:98:67:a2:fb:47:68:a6:59:6c:17:ad:3f:
                    60:d4:6f:49:de:1e:9b:ce:e9:60:03:11:c5:fe:43:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FF:F6:BE:9E:A2:77:6B:DD:74:8F:F9:C9:BD:EC:0D:94:88:07:58
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3130392e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a4:3b:25:15:3f:e0:c5:e1:e2:64:9c:56:0b:71:7e:13:86:
         0d:df:87:97:37:d5:71:ed:49:d2:e1:61:d3:64:48:93:4c:e7:
         12:d2:f0:20:5c:d7:9f:c4:2f:30:2b:2a:79:cf:bc:40:35:22:
         f4:c1:57:44:7f:d1:c5:4e:da:ee:28:ea:cd:38:17:05:6c:88:
         16:5c:6c:47:4b:21:ec:ce:dd:d2:ab:88:b5:49:78:ac:eb:1b:
         b9:ba:cd:fe:82:ee:49:85:7f:f0:f1:52:28:eb:31:93:80:e9:
         c1:8e:6d:7a:99:7e:b7:94:9b:fa:33:6a:5b:e2:1d:3a:4e:62:
         ec:3f:8b:86:6d:8e:4d:cf:cf:f0:7e:66:00:66:c0:e4:d6:f0:
         ef:e9:ee:b0:56:2c:7c:2e:b8:81:fd:db:fc:60:e3:3b:e4:bb:
         19:f6:cb:ab:07:c0:b6:84:6f:b7:be:f9:2c:b8:55:1c:c7:10:
         b8:bd:f6:57:aa:c7:16:32:37:51:ba:b1:c1:28:27:bf:0e:57:
         b5:b5:d7:e2:ac:cb:f7:bc:0e:5f:5d:c8:e5:86:6d:e1:18:9a:
         f4:12:cc:f2:4e:d7:37:f8:65:cf:e9:30:f0:b7:4f:94:ce:10:
         07:3e:26:6e:33:ac:5b:05:0f:bb:d1:df:28:fe:dc:e0:ef:18:
         87:ab:be:3f
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUEZwF4xIGsS2iWLnSxEd2PfeXgj4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDYzMDA4NDEzNFoX
DTIyMDYzMDA4NDYzNFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDQUU2Q0RDMTBDQUVDRTc0MEM3NDQwNjUyMDJFNTEwQjgwMDUyRTQ2OTI5
NzgyNTA1RkE5NzUzQzcyRkNFMUM2QjY1QTMzOTZBMTA2MUE0MjVBQjM2MjQ3QkVD
RDc1MkQzOUY3OTU0MDI1QTU1NDU1Q0IwRDE4MUIxNUExQTgzMzhDQkQ5RTYzMUJB
N0U4MDJBM0NCQ0MyRTlGQ0Q2NkJEODczQTQ4MTBEQjlFMUQ1MUVCOUVEQTA2N0I1
MEJEMUZBQUIwM0E1NjQ4RjkzNzREQjE0QzA0MTQ5MTg2MTFENjE5NkIyMTAwNkY4
RDhFNzVBQjc2NDBDNUMxMDQ4RTNDOTk2MDk0NDJGOTI3QzVFRUZFQkRDMTM1Njgz
QjFGNTRBQkRDMjA2NTI2NzA5NkI3MjNBQjZCODhEMjk1NkYzMUY3MUNERjE5N0Yz
NUQ2Q0M5QjcyNzcyM0JGRDNFNDU0NjgzNjFBODEyMjhDRDk4ODkzNDRDNTc2REJE
OTY4QzgyNjhBODAxREQzNkQ3MkY0QzM5NkI4OUIyMjE3NDkyOTlBOTBBOUVCRTRC
RENBMkFFRDExRjZGRjZDOTMxRTc2MEJBQUE2OTg2N0EyRkI0NzY4QTY1OTZDMTdB
RDNGNjBENDZGNDlERTFFOUJDRUU5NjAwMzExQzVGRTQzQjE0MzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5s3BDK7OdAx0QGUgLlEL
gAUuRpKXglBfqXU8cvzhxrZaM5ahBhpCWrNiR77NdS0595VAJaVUVcsNGBsVoagz
jL2eYxun6AKjy8wun81mvYc6SBDbnh1R657aBntQvR+qsDpWSPk3TbFMBBSRhhHW
GWshAG+NjnWrdkDFwQSOPJlglEL5J8Xu/r3BNWg7H1Sr3CBlJnCWtyOra4jSlW8x
9xzfGX811sybcncjv9PkVGg2GoEijNmIk0TFdtvZaMgmioAd021y9MOWuJsiF0kp
mpCp6+S9yirtEfb/bJMedguqpphnovtHaKZZbBetP2DUb0neHpvO6WADEcX+Q7FD
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUS//2vp6id2vddI/5yb3sDZSIB1gwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM3MmUzMTMwMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6dtMA0GCSqG
SIb3DQEBCwUAA4IBAQCDpDslFT/gxeHiZJxWC3F+E4YN34eXN9Vx7UnS4WHTZEiT
TOcS0vAgXNefxC8wKyp5z7xANSL0wVdEf9HFTtruKOrNOBcFbIgWXGxHSyHszt3S
q4i1SXis6xu5us3+gu5JhX/w8VIo6zGTgOnBjm16mX63lJv6M2pb4h06TmLsP4uG
bY5Nz8/wfmYAZsDk1vDv6e6wVix8LriB/dv8YOM75LsZ9surB8C2hG+3vvksuFUc
xxC4vfZXqscWMjdRurHBKCe/Dle1tdfirMv3vA5fXcjlhm3hGJr0EszyTtc3+GXP
6TDwt0+UzhAHPiZuM6xbBQ+70d8o/tzg7xiHq74/
-----END CERTIFICATE-----