Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e31332e302f32342d3234203d3e203538333639.roa
File:                     3130332e3136372e31332e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          OFeQhpCy2+qNygQfnld3aM7Pou1vP27ozSU40DwxT8k=
Subject key identifier:   D3:7B:50:32:ED:F9:3F:85:8C:83:57:F2:E6:7F:6E:00:EF:8F:BC:A8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4A3C75EBF947705B24A33AD5BCDC0BCB85836686
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e31332e302f32342d3234203d3e203538333639.roa
Signing time:             Tue 22 Jun 2021 04:03:24 +0000
ROA not before:           Tue 22 Jun 2021 03:58:24 +0000
ROA not after:            Wed 22 Jun 2022 04:03:24 +0000
asID:                     58369
IP address blocks:        103.167.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3c:75:eb:f9:47:70:5b:24:a3:3a:d5:bc:dc:0b:cb:85:83:66:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 22 03:58:24 2021 GMT
            Not After : Jun 22 04:03:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:20:6f:d7:2e:d9:45:d1:98:4e:f5:56:50:
                    b9:11:60:b0:1d:3d:47:b2:e9:98:22:cb:aa:37:b0:
                    04:78:e0:ee:97:71:05:7e:6a:e2:9a:99:38:8f:8a:
                    1c:14:0e:5f:8b:b9:fc:6a:42:96:ea:a1:a7:e8:07:
                    66:96:53:19:27:be:27:37:bd:50:cd:ca:70:e3:ed:
                    64:38:11:d5:88:a6:b0:f5:29:46:73:1d:c5:bb:b2:
                    68:54:7d:39:a3:a6:52:0b:75:48:59:0b:51:0e:c5:
                    60:3f:b0:ab:76:69:e2:f9:1a:64:03:9c:b0:22:13:
                    59:f0:e2:20:ba:ec:0f:c9:91:08:6e:d5:51:22:e9:
                    58:74:e0:88:9f:3d:94:61:77:0d:ae:36:7c:41:81:
                    7a:be:78:10:e3:d4:c3:b7:9b:78:d3:7f:48:32:f9:
                    76:5a:fa:02:51:28:1d:83:28:ab:ce:9c:6e:08:ca:
                    fb:44:a2:0e:b2:d1:90:33:e2:d0:bf:c4:26:4f:92:
                    13:24:a5:35:82:5d:dd:5e:b7:bd:d3:9f:a0:94:58:
                    d7:a9:d6:1d:9e:f3:8f:ae:5b:2a:6f:a0:de:5c:aa:
                    25:5e:3e:44:55:d6:f4:d4:32:91:56:fa:88:7f:6e:
                    c1:68:11:87:7d:3e:26:91:d3:83:47:49:bf:64:a6:
                    40:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7B:50:32:ED:F9:3F:85:8C:83:57:F2:E6:7F:6E:00:EF:8F:BC:A8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e31332e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:29:59:db:30:e1:3e:1a:bf:ba:ea:cb:fd:51:70:81:dd:07:
         6a:2b:90:d1:43:2c:94:66:2d:63:d7:30:2e:cb:cb:a8:ff:23:
         3a:0b:7c:a6:85:5d:a3:2a:7a:8b:ac:86:3f:4f:fe:1f:35:b6:
         e4:99:81:36:a3:9d:70:b8:0c:d4:68:83:04:1c:bb:ef:f4:1a:
         0a:75:c6:9e:df:be:37:34:fd:06:88:b8:a7:1e:7b:a8:0f:3f:
         3a:40:86:c2:37:a8:be:4b:4f:16:1e:42:e3:78:49:c7:28:90:
         cc:52:4a:a1:a0:c6:f6:b7:64:f1:77:b0:25:bf:24:62:43:f0:
         ea:a3:e4:9e:f6:b8:7d:a7:01:f1:93:60:05:8d:92:bd:46:2a:
         fa:84:d0:8f:c1:28:5b:c5:7b:78:8c:11:ab:db:cd:5b:7f:24:
         3e:7e:4b:c5:16:9d:54:12:eb:15:ef:f4:ef:b9:42:1f:0e:48:
         9f:02:6a:5e:46:9b:e5:d3:a8:43:6f:93:47:e2:86:55:f9:26:
         a1:09:dd:f0:bb:ce:f8:ea:5f:2a:2d:c6:67:06:eb:cd:99:6c:
         b5:0a:f2:d2:2f:a9:0e:f4:fd:c4:28:61:ad:0e:f3:3f:8a:8b:
         d2:a5:65:96:9e:15:a4:4c:6d:cd:2e:6b:2d:01:fe:4c:f3:42:
         56:94:95:82
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUSjx16/lHcFskozrVvNwLy4WDZoYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDYyMjAzNTgyNFoX
DTIyMDYyMjA0MDMyNFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCRTgwMjA2RkQ3MkVEOTQ1RDE5ODRFRjU1NjUwQjkxMTYwQjAxRDNENDdC
MkU5OTgyMkNCQUEzN0IwMDQ3OEUwRUU5NzcxMDU3RTZBRTI5QTk5Mzg4RjhBMUMx
NDBFNUY4QkI5RkM2QTQyOTZFQUExQTdFODA3NjY5NjUzMTkyN0JFMjczN0JENTBD
RENBNzBFM0VENjQzODExRDU4OEE2QjBGNTI5NDY3MzFEQzVCQkIyNjg1NDdEMzlB
M0E2NTIwQjc1NDg1OTBCNTEwRUM1NjAzRkIwQUI3NjY5RTJGOTFBNjQwMzlDQjAy
MjEzNTlGMEUyMjBCQUVDMEZDOTkxMDg2RUQ1NTEyMkU5NTg3NEUwODg5RjNEOTQ2
MTc3MERBRTM2N0M0MTgxN0FCRTc4MTBFM0Q0QzNCNzlCNzhEMzdGNDgzMkY5NzY1
QUZBMDI1MTI4MUQ4MzI4QUJDRTlDNkUwOENBRkI0NEEyMEVCMkQxOTAzM0UyRDBC
RkM0MjY0RjkyMTMyNEE1MzU4MjVEREQ1RUI3QkREMzlGQTA5NDU4RDdBOUQ2MUQ5
RUYzOEZBRTVCMkE2RkEwREU1Q0FBMjU1RTNFNDQ1NUQ2RjRENDMyOTE1NkZBODg3
RjZFQzE2ODExODc3RDNFMjY5MUQzODM0NzQ5QkY2NEE2NDBDNzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gCBv1y7ZRdGYTvVWULkR
YLAdPUey6Zgiy6o3sAR44O6XcQV+auKamTiPihwUDl+LufxqQpbqoafoB2aWUxkn
vic3vVDNynDj7WQ4EdWIprD1KUZzHcW7smhUfTmjplILdUhZC1EOxWA/sKt2aeL5
GmQDnLAiE1nw4iC67A/JkQhu1VEi6Vh04IifPZRhdw2uNnxBgXq+eBDj1MO3m3jT
f0gy+XZa+gJRKB2DKKvOnG4IyvtEog6y0ZAz4tC/xCZPkhMkpTWCXd1et73Tn6CU
WNep1h2e84+uWypvoN5cqiVePkRV1vTUMpFW+oh/bsFoEYd9PiaR04NHSb9kpkDH
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQU03tQMu35P4WMg1fy5n9uAO+PvKgwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM3MmUzMTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGenDTANBgkqhkiG
9w0BAQsFAAOCAQEAUilZ2zDhPhq/uurL/VFwgd0HaiuQ0UMslGYtY9cwLsvLqP8j
Ogt8poVdoyp6i6yGP0/+HzW25JmBNqOdcLgM1GiDBBy77/QaCnXGnt++NzT9Boi4
px57qA8/OkCGwjeovktPFh5C43hJxyiQzFJKoaDG9rdk8XewJb8kYkPw6qPknva4
facB8ZNgBY2SvUYq+oTQj8EoW8V7eIwRq9vNW38kPn5LxRadVBLrFe/077lCHw5I
nwJqXkab5dOoQ2+TR+KGVfkmoQnd8LvO+OpfKi3GZwbrzZlstQry0i+pDvT9xChh
rQ7zP4qL0qVllp4VpExtzS5rLQH+TPNCVpSVgg==
-----END CERTIFICATE-----