Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131302e302f32332d3234203d3e2039383735.roa
File:                     3130332e3136382e3131302e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          ZwizLeMC5rtqPX1f1y3IGx4NzfSeEIot9jMpoXibsIA=
Subject key identifier:   55:48:92:44:8C:4D:25:36:5F:BA:A4:E0:C6:43:21:9B:ED:21:14:CA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       344AE0B3D619560433AA002B0E2E4CE7A563E53E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131302e302f32332d3234203d3e2039383735.roa
Signing time:             Thu 17 Jun 2021 01:44:57 +0000
ROA not before:           Thu 17 Jun 2021 01:39:57 +0000
ROA not after:            Fri 17 Jun 2022 01:44:57 +0000
asID:                     9875
IP address blocks:        103.168.110.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4a:e0:b3:d6:19:56:04:33:aa:00:2b:0e:2e:4c:e7:a5:63:e5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 17 01:39:57 2021 GMT
            Not After : Jun 17 01:44:57 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:3d:10:7f:19:9f:3d:1f:41:42:c7:df:44:
                    7b:0f:20:22:61:26:85:00:e2:4f:24:93:d2:fc:ba:
                    13:c2:61:fd:64:ce:44:6f:be:fe:e1:1f:88:60:21:
                    e8:d2:74:8b:ec:43:9d:1d:bd:19:75:df:d2:2a:7a:
                    79:09:53:dd:7c:8a:3a:91:a2:12:ce:98:c6:f0:08:
                    c2:c7:a3:78:a1:b7:66:e0:10:28:67:76:f0:bd:28:
                    9a:87:8a:73:6c:ee:63:f9:0e:9c:3a:2d:7b:56:5f:
                    a6:31:d0:d0:52:a5:49:8c:10:a1:5b:4d:af:21:c6:
                    ee:d8:b5:db:f0:22:fa:d9:be:aa:fe:c0:71:16:67:
                    86:94:a9:c2:f5:01:a8:2c:53:ca:c0:fe:5a:b2:96:
                    e5:3f:0e:30:9b:51:b2:2c:0f:7f:8e:c6:e0:0e:c5:
                    d0:3b:19:f9:20:36:56:5a:bf:42:1f:0c:ba:53:eb:
                    e9:36:61:cb:07:09:d6:fe:a6:22:d3:a2:b2:b5:31:
                    a5:f6:1d:fe:ef:1e:3e:10:e3:21:e8:02:6a:09:60:
                    48:38:bd:b0:4a:d7:24:60:a1:59:1c:41:99:92:f1:
                    5a:01:6a:7f:4b:ff:fd:48:3f:5a:79:2d:51:a4:f9:
                    21:78:62:0d:99:3a:2d:c5:25:f6:67:58:81:7a:7e:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:48:92:44:8C:4D:25:36:5F:BA:A4:E0:C6:43:21:9B:ED:21:14:CA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131302e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:78:ba:45:ee:d3:cc:93:0c:90:6d:28:c0:a5:08:c5:86:81:
         fa:56:e5:41:c1:eb:c0:56:8c:47:42:59:01:35:74:9f:36:f6:
         83:a6:22:db:4d:df:a9:53:35:67:a2:21:55:96:7a:98:c1:48:
         6d:09:fe:2e:0b:b6:d6:7c:e0:ee:6f:9b:86:d7:7e:aa:49:2e:
         6c:d6:95:25:40:2f:c6:3a:17:54:ab:00:3c:ff:7a:11:ef:4b:
         d2:5f:43:da:a7:f9:bc:c4:0f:40:ec:85:70:ae:01:96:38:61:
         ee:d9:28:b6:e2:c6:50:70:ba:7a:62:7b:31:0f:c0:65:d3:30:
         38:5c:c8:09:a2:06:dd:38:27:17:0c:1d:a8:da:36:ad:76:bb:
         6f:25:c3:33:4f:31:24:89:12:3b:0f:a9:9b:f8:ac:68:1c:3c:
         af:2f:c4:bd:3d:2e:44:c8:58:eb:f7:76:20:85:52:9a:8c:f0:
         ad:ae:a9:d7:8a:82:4c:9c:2d:78:46:28:4d:9e:d9:2d:bb:da:
         8c:81:89:75:2b:76:58:44:f5:87:ad:b6:65:d8:a0:7c:be:0e:
         4f:56:15:13:fa:3b:04:5b:5d:bf:94:30:a3:22:94:ed:83:11:
         e6:eb:de:cb:2c:f3:32:80:f0:12:20:ae:fa:c2:48:45:c5:4e:
         f9:82:7c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----