Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131322e302f32332d3234203d3e2039383735.roa
File:                     3130332e3136382e3131322e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          4CRPTMqZ+uE0JJ5BodaxTknm2rRUz+isgBRQxH6ak5k=
Subject key identifier:   0B:B9:73:E1:6A:6C:6D:D5:45:2F:FF:60:53:37:17:1B:5B:0A:4B:9F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6D0628EC389E6725D3BE3EC696A54F5D1D195869
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131322e302f32332d3234203d3e2039383735.roa
Signing time:             Thu 17 Jun 2021 01:45:06 +0000
ROA not before:           Thu 17 Jun 2021 01:40:06 +0000
ROA not after:            Fri 17 Jun 2022 01:45:06 +0000
asID:                     9875
IP address blocks:        103.168.112.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:06:28:ec:38:9e:67:25:d3:be:3e:c6:96:a5:4f:5d:1d:19:58:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 17 01:40:06 2021 GMT
            Not After : Jun 17 01:45:06 2022 GMT
        Subject: CN=3082010A0282010100B8A1729396F7B556EB699AC02588AD9D55ABBF6597BA228382ED016BA727EF0608C5502F76E0DB8B57C22C9C011FABA3E699DB9BDA1FF03229F141ED0FBA3ECB4E89CB8C0E4F6FEC1E633E8A29F513E428FE10F8590882FE2D7A1AF5353100131EF90D2B943F9E8DDA89EAB0C6349EC1946A302C068C130B77413EB3195AEB9BB384CC57EB8E5026DC6C52630D7C25EF5A8E25C6C0D102E535A35A418143CACAD03342D86839D620FE77EE2A640AE87D67890D650046A808C247CA6BBBF229A598CE6C5DF0670C4F61AE386A88787A20A543A720A0AB13E414F6E3EA57F4885E9DC8F47FBBF8CC477681CFBA3B2D1754E1877888A3598A7CA8BF9C99774658CD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:72:93:96:f7:b5:56:eb:69:9a:c0:25:88:
                    ad:9d:55:ab:bf:65:97:ba:22:83:82:ed:01:6b:a7:
                    27:ef:06:08:c5:50:2f:76:e0:db:8b:57:c2:2c:9c:
                    01:1f:ab:a3:e6:99:db:9b:da:1f:f0:32:29:f1:41:
                    ed:0f:ba:3e:cb:4e:89:cb:8c:0e:4f:6f:ec:1e:63:
                    3e:8a:29:f5:13:e4:28:fe:10:f8:59:08:82:fe:2d:
                    7a:1a:f5:35:31:00:13:1e:f9:0d:2b:94:3f:9e:8d:
                    da:89:ea:b0:c6:34:9e:c1:94:6a:30:2c:06:8c:13:
                    0b:77:41:3e:b3:19:5a:eb:9b:b3:84:cc:57:eb:8e:
                    50:26:dc:6c:52:63:0d:7c:25:ef:5a:8e:25:c6:c0:
                    d1:02:e5:35:a3:5a:41:81:43:ca:ca:d0:33:42:d8:
                    68:39:d6:20:fe:77:ee:2a:64:0a:e8:7d:67:89:0d:
                    65:00:46:a8:08:c2:47:ca:6b:bb:f2:29:a5:98:ce:
                    6c:5d:f0:67:0c:4f:61:ae:38:6a:88:78:7a:20:a5:
                    43:a7:20:a0:ab:13:e4:14:f6:e3:ea:57:f4:88:5e:
                    9d:c8:f4:7f:bb:f8:cc:47:76:81:cf:ba:3b:2d:17:
                    54:e1:87:78:88:a3:59:8a:7c:a8:bf:9c:99:77:46:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B9:73:E1:6A:6C:6D:D5:45:2F:FF:60:53:37:17:1B:5B:0A:4B:9F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131322e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:33:b1:59:f0:d5:d0:b9:84:71:8f:ae:fd:ce:bf:08:e6:f0:
         a4:46:bd:9a:97:76:6c:b4:4d:e2:dc:a5:1c:ec:d0:06:5c:d0:
         89:9c:7a:45:ed:b5:83:db:3c:a7:ec:28:8c:6a:f9:37:93:62:
         c9:f9:93:9c:e5:99:90:5d:58:c9:10:53:7d:0b:4c:81:45:17:
         fb:f9:38:6a:26:b7:40:e4:c0:fc:97:c6:56:94:0b:3e:4f:6a:
         18:27:2f:e2:30:4c:1f:20:7a:1f:88:5d:85:2d:d6:85:78:c2:
         0f:ae:2e:a8:ba:5e:82:01:64:a2:7f:0f:9c:ee:bd:bc:43:1d:
         79:f3:f3:88:97:06:9c:72:65:18:8c:ff:61:c5:4b:b5:3a:d9:
         49:62:aa:b3:11:74:79:68:9c:44:b4:c2:a1:2d:fc:78:5c:04:
         c5:22:d5:8d:4f:9d:10:38:3c:03:73:94:31:d2:2f:0d:95:bd:
         b8:40:00:99:80:ac:80:ad:6a:04:17:b8:ee:f8:b3:be:9b:cd:
         5d:94:be:75:bd:77:3a:05:6e:3c:d9:48:14:e0:a9:aa:c0:23:
         35:16:92:82:a0:a0:ed:05:e1:89:5e:97:1f:5e:5a:18:52:c8:
         10:7c:f1:54:ee:e4:de:98:24:62:19:1e:c3:9c:f6:bb:15:4a:
         bd:95:14:73
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUbQYo7DieZyXTvj7GlqVPXR0ZWGkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDYxNzAxNDAwNloX
DTIyMDYxNzAxNDUwNlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCOEExNzI5Mzk2RjdCNTU2RUI2OTlBQzAyNTg4QUQ5RDU1QUJCRjY1OTdC
QTIyODM4MkVEMDE2QkE3MjdFRjA2MDhDNTUwMkY3NkUwREI4QjU3QzIyQzlDMDEx
RkFCQTNFNjk5REI5QkRBMUZGMDMyMjlGMTQxRUQwRkJBM0VDQjRFODlDQjhDMEU0
RjZGRUMxRTYzM0U4QTI5RjUxM0U0MjhGRTEwRjg1OTA4ODJGRTJEN0ExQUY1MzUz
MTAwMTMxRUY5MEQyQjk0M0Y5RThEREE4OUVBQjBDNjM0OUVDMTk0NkEzMDJDMDY4
QzEzMEI3NzQxM0VCMzE5NUFFQjlCQjM4NENDNTdFQjhFNTAyNkRDNkM1MjYzMEQ3
QzI1RUY1QThFMjVDNkMwRDEwMkU1MzVBMzVBNDE4MTQzQ0FDQUQwMzM0MkQ4Njgz
OUQ2MjBGRTc3RUUyQTY0MEFFODdENjc4OTBENjUwMDQ2QTgwOEMyNDdDQTZCQkJG
MjI5QTU5OENFNkM1REYwNjcwQzRGNjFBRTM4NkE4ODc4N0EyMEE1NDNBNzIwQTBB
QjEzRTQxNEY2RTNFQTU3RjQ4ODVFOURDOEY0N0ZCQkY4Q0M0Nzc2ODFDRkJBM0Iy
RDE3NTRFMTg3Nzg4OEEzNTk4QTdDQThCRjlDOTk3NzQ2NThDRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4oXKTlve1VutpmsAliK2d
Vau/ZZe6IoOC7QFrpyfvBgjFUC924NuLV8IsnAEfq6Pmmdub2h/wMinxQe0Puj7L
TonLjA5Pb+weYz6KKfUT5Cj+EPhZCIL+LXoa9TUxABMe+Q0rlD+ejdqJ6rDGNJ7B
lGowLAaMEwt3QT6zGVrrm7OEzFfrjlAm3GxSYw18Je9ajiXGwNEC5TWjWkGBQ8rK
0DNC2Gg51iD+d+4qZArofWeJDWUARqgIwkfKa7vyKaWYzmxd8GcMT2GuOGqIeHog
pUOnIKCrE+QU9uPqV/SIXp3I9H+7+MxHdoHPujstF1Thh3iIo1mKfKi/nJl3RljN
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUC7lz4WpsbdVFL/9gUzcXG1sKS58wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM4MmUzMTMxMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzOTM4MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeocDANBgkqhkiG
9w0BAQsFAAOCAQEAMzOxWfDV0LmEcY+u/c6/CObwpEa9mpd2bLRN4tylHOzQBlzQ
iZx6Re21g9s8p+wojGr5N5NiyfmTnOWZkF1YyRBTfQtMgUUX+/k4aia3QOTA/JfG
VpQLPk9qGCcv4jBMHyB6H4hdhS3WhXjCD64uqLpeggFkon8PnO69vEMdefPziJcG
nHJlGIz/YcVLtTrZSWKqsxF0eWicRLTCoS38eFwExSLVjU+dEDg8A3OUMdIvDZW9
uEAAmYCsgK1qBBe47vizvpvNXZS+db13OgVuPNlIFOCpqsAjNRaSgqCg7QXhiV6X
H15aGFLIEHzxVO7k3pgkYhkew5z2uxVKvZUUcw==
-----END CERTIFICATE-----