Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3134322e302f32332d3234203d3e2039383735.roa
File:                     3130332e3136372e3134322e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          T1kmlzlVRnTnOmjckRJyBfoEJ6d/On5UyiMWmgga30g=
Subject key identifier:   34:4C:BF:22:C2:12:75:EB:BA:8E:87:F7:6B:3F:C9:FB:D3:F4:FE:F1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2FC38053F604B113E3D845F466A20E58FFCCC887
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3134322e302f32332d3234203d3e2039383735.roa
Signing time:             Sat 02 Oct 2021 00:44:58 +0000
ROA not before:           Sat 02 Oct 2021 00:39:58 +0000
ROA not after:            Sun 02 Oct 2022 00:44:58 +0000
asID:                     9875
IP address blocks:        103.167.142.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c3:80:53:f6:04:b1:13:e3:d8:45:f4:66:a2:0e:58:ff:cc:c8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  2 00:39:58 2021 GMT
            Not After : Oct  2 00:44:58 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:f9:bc:61:dd:d6:8f:a8:43:8b:29:a0:80:
                    0f:aa:4b:3c:5c:b1:b2:5d:3d:8b:25:d1:64:ae:84:
                    be:28:d9:3e:59:49:8f:33:d1:21:1c:d9:a1:4b:3a:
                    b0:fa:13:14:e4:a2:55:c0:2d:a5:2a:b6:9f:f7:94:
                    78:ce:58:74:92:6d:ed:9c:6c:b8:ed:c3:08:07:ba:
                    52:fc:a6:66:f4:bc:82:19:50:3e:f8:ab:16:48:08:
                    0a:cf:de:fb:2b:0e:d0:76:da:3b:d9:c9:17:2d:9b:
                    b9:cc:72:57:05:c1:d3:d0:0b:cb:f0:a9:d2:e1:c4:
                    15:88:97:7e:65:da:1a:34:46:c3:8e:4e:7f:07:02:
                    f3:b1:35:cb:d9:2c:59:8a:ae:50:b0:45:a9:2a:01:
                    b2:47:84:5a:69:a9:2a:86:68:7b:5b:b2:03:5c:9d:
                    57:5a:21:bd:3e:70:a8:ab:46:4e:ee:8b:a5:da:a4:
                    12:a3:69:bd:1c:f8:f3:44:00:44:f4:c9:e2:82:bf:
                    b5:cc:78:aa:68:40:8d:aa:2a:4c:ad:d6:b5:db:c0:
                    46:e3:46:6a:f2:dc:91:7f:44:2c:cd:25:d3:9e:aa:
                    ae:c7:ce:e0:3b:d6:75:eb:e3:c7:fc:52:3d:00:3b:
                    b8:24:5d:38:73:03:4a:39:c3:39:d1:4c:d8:34:4e:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:BF:22:C2:12:75:EB:BA:8E:87:F7:6B:3F:C9:FB:D3:F4:FE:F1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3134322e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:d5:62:0c:5b:fd:8d:61:d7:ff:56:98:e4:57:b0:1a:e5:e6:
         d0:05:e4:cd:8c:cd:fd:c0:54:ec:71:da:bf:82:cb:61:15:a0:
         e5:c5:cc:33:92:91:09:18:89:ba:f0:ea:9b:50:6a:e9:1b:a7:
         61:60:01:9c:e6:9e:b6:7e:91:24:dc:94:cb:be:db:40:ed:df:
         54:b0:44:cd:55:37:bd:2b:e4:04:fc:be:a4:ea:b8:54:33:6f:
         d7:5f:3d:de:23:65:9b:e4:84:bc:14:7e:2a:d6:10:95:6e:bd:
         82:05:88:c1:2e:2d:f3:9f:3a:ba:6c:a9:11:93:b8:94:fb:fd:
         15:58:5a:68:3c:25:32:89:f4:5c:de:de:2f:be:58:75:44:a2:
         c1:6f:02:13:1b:b3:79:e8:19:d2:29:63:3b:b3:bc:20:7b:40:
         46:02:3e:cf:a1:ff:4d:28:66:20:4b:08:cb:4b:c0:50:85:0b:
         72:2d:d9:25:e0:af:86:bf:1d:29:a5:b7:7f:8c:51:ce:a0:00:
         40:1c:be:50:b2:18:21:c9:20:2d:28:e2:ce:6d:13:64:66:27:
         ca:4e:56:00:c3:3b:c6:9c:d8:0a:06:07:fc:82:9e:5f:49:17:
         cb:45:1b:9a:04:d4:41:1f:fa:cd:3a:05:ea:69:72:9e:2c:e2:
         20:73:76:fb
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUL8OAU/YEsRPj2EX0ZqIOWP/MyIcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAwMjAwMzk1OFoX
DTIyMTAwMjAwNDQ1OFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCNDU1RjlCQzYxRERENjhGQTg0MzhCMjlBMDgwMEZBQTRCM0M1Q0IxQjI1
RDNEOEIyNUQxNjRBRTg0QkUyOEQ5M0U1OTQ5OEYzM0QxMjExQ0Q5QTE0QjNBQjBG
QTEzMTRFNEEyNTVDMDJEQTUyQUI2OUZGNzk0NzhDRTU4NzQ5MjZERUQ5QzZDQjhF
REMzMDgwN0JBNTJGQ0E2NjZGNEJDODIxOTUwM0VGOEFCMTY0ODA4MEFDRkRFRkIy
QjBFRDA3NkRBM0JEOUM5MTcyRDlCQjlDQzcyNTcwNUMxRDNEMDBCQ0JGMEE5RDJF
MUM0MTU4ODk3N0U2NURBMUEzNDQ2QzM4RTRFN0YwNzAyRjNCMTM1Q0JEOTJDNTk4
QUFFNTBCMDQ1QTkyQTAxQjI0Nzg0NUE2OUE5MkE4NjY4N0I1QkIyMDM1QzlENTc1
QTIxQkQzRTcwQThBQjQ2NEVFRThCQTVEQUE0MTJBMzY5QkQxQ0Y4RjM0NDAwNDRG
NEM5RTI4MkJGQjVDQzc4QUE2ODQwOERBQTJBNENBREQ2QjVEQkMwNDZFMzQ2NkFG
MkRDOTE3RjQ0MkNDRDI1RDM5RUFBQUVDN0NFRTAzQkQ2NzVFQkUzQzdGQzUyM0Qw
MDNCQjgyNDVEMzg3MzAzNEEzOUMzMzlEMTRDRDgzNDRFQzk2NTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Vfm8Yd3Wj6hDiymggA+q
SzxcsbJdPYsl0WSuhL4o2T5ZSY8z0SEc2aFLOrD6ExTkolXALaUqtp/3lHjOWHSS
be2cbLjtwwgHulL8pmb0vIIZUD74qxZICArP3vsrDtB22jvZyRctm7nMclcFwdPQ
C8vwqdLhxBWIl35l2ho0RsOOTn8HAvOxNcvZLFmKrlCwRakqAbJHhFppqSqGaHtb
sgNcnVdaIb0+cKirRk7ui6XapBKjab0c+PNEAET0yeKCv7XMeKpoQI2qKkyt1rXb
wEbjRmry3JF/RCzNJdOeqq7HzuA71nXr48f8Uj0AO7gkXThzA0o5wznRTNg0Tsll
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUNEy/IsISdeu6jof3az/J+9P0/vEwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM3MmUzMTM0MzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzOTM4MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWenjjANBgkqhkiG
9w0BAQsFAAOCAQEAONViDFv9jWHX/1aY5FewGuXm0AXkzYzN/cBU7HHav4LLYRWg
5cXMM5KRCRiJuvDqm1Bq6RunYWABnOaetn6RJNyUy77bQO3fVLBEzVU3vSvkBPy+
pOq4VDNv11893iNlm+SEvBR+KtYQlW69ggWIwS4t8586umypEZO4lPv9FVhaaDwl
Mon0XN7eL75YdUSiwW8CExuzeegZ0iljO7O8IHtARgI+z6H/TShmIEsIy0vAUIUL
ci3ZJeCvhr8dKaW3f4xRzqAAQBy+ULIYIckgLSjizm0TZGYnyk5WAMM7xpzYCgYH
/IKeX0kXy0UbmgTUQR/6zToF6mlyniziIHN2+w==
-----END CERTIFICATE-----