Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132322e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136382e3132322e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          zuDvXvQuceq5phDqwsJP8gMFT45kxI6pUpkdcZfoVQM=
Subject key identifier:   3B:6D:C9:DF:78:C6:4E:62:50:BF:91:0E:80:B9:6C:9B:F2:95:20:67
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       18D841053D742681EB1813D22A91E323730B0717
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132322e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:13 +0000
ROA not before:           Mon 28 Jun 2021 16:47:13 +0000
ROA not after:            Tue 28 Jun 2022 16:52:13 +0000
asID:                     4800
IP address blocks:        103.168.122.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d8:41:05:3d:74:26:81:eb:18:13:d2:2a:91:e3:23:73:0b:07:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:13 2021 GMT
            Not After : Jun 28 16:52:13 2022 GMT
        Subject: CN=3082010A0282010100BAA9E354C903C430967280672C0B023D5BDACC478CD676E24B6A3D5563762A369EB5511477E451754507F7D00D0D50718E48D7DD808021734E71BAB5D2B4D2E5FCAC4663AC71BBCB24F4A00DB0244B7CE2C716F7F768FAEA2C0C655CD7DF786FA3194B745B20FE6486FA8A83703FB2D0AD84049808F5DC7CF12F4BEB19B8523063E148F666CB89956F53672963B5F9A0010391375E8BD06269046F781E1EDBCB1953D1842F2CB0BC287D951DEBEE08329DBBEE2A791EDE166AEF16DC48429E6561F18727E53FFA136D1802058FDD6FB9CDF12F565D82D9B645002BC344A09974155754C4CDF761F345F9153C27278A51539E24C9917ACCF6CACB6B1A0BF9B6850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:e3:54:c9:03:c4:30:96:72:80:67:2c:0b:
                    02:3d:5b:da:cc:47:8c:d6:76:e2:4b:6a:3d:55:63:
                    76:2a:36:9e:b5:51:14:77:e4:51:75:45:07:f7:d0:
                    0d:0d:50:71:8e:48:d7:dd:80:80:21:73:4e:71:ba:
                    b5:d2:b4:d2:e5:fc:ac:46:63:ac:71:bb:cb:24:f4:
                    a0:0d:b0:24:4b:7c:e2:c7:16:f7:f7:68:fa:ea:2c:
                    0c:65:5c:d7:df:78:6f:a3:19:4b:74:5b:20:fe:64:
                    86:fa:8a:83:70:3f:b2:d0:ad:84:04:98:08:f5:dc:
                    7c:f1:2f:4b:eb:19:b8:52:30:63:e1:48:f6:66:cb:
                    89:95:6f:53:67:29:63:b5:f9:a0:01:03:91:37:5e:
                    8b:d0:62:69:04:6f:78:1e:1e:db:cb:19:53:d1:84:
                    2f:2c:b0:bc:28:7d:95:1d:eb:ee:08:32:9d:bb:ee:
                    2a:79:1e:de:16:6a:ef:16:dc:48:42:9e:65:61:f1:
                    87:27:e5:3f:fa:13:6d:18:02:05:8f:dd:6f:b9:cd:
                    f1:2f:56:5d:82:d9:b6:45:00:2b:c3:44:a0:99:74:
                    15:57:54:c4:cd:f7:61:f3:45:f9:15:3c:27:27:8a:
                    51:53:9e:24:c9:91:7a:cc:f6:ca:cb:6b:1a:0b:f9:
                    b6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6D:C9:DF:78:C6:4E:62:50:BF:91:0E:80:B9:6C:9B:F2:95:20:67
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132322e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:b8:fc:2a:77:06:f5:1c:d0:b6:b7:e4:ef:62:71:de:9c:36:
         f9:04:cc:f6:0a:55:dc:c1:8e:ca:76:fb:50:cd:31:b6:ff:6e:
         d3:82:f5:44:8a:a6:24:9c:51:b0:32:49:53:d9:41:b5:15:22:
         8f:f9:4c:19:40:ff:7b:3c:49:07:6f:af:4c:23:45:14:d1:07:
         41:b3:c3:a8:06:3b:7e:ee:46:85:a6:95:b0:43:99:a6:73:da:
         b9:bf:c9:d6:e9:45:8b:ba:23:ad:a3:99:63:65:9f:85:a3:ab:
         70:87:14:e4:66:2d:3f:43:40:f0:37:ed:f1:50:13:ad:4f:52:
         57:1b:21:00:6b:c4:68:fd:80:0e:41:7c:40:83:9a:1a:1a:82:
         35:a7:bd:45:42:5e:f9:f5:5d:07:31:04:ce:f8:49:93:8c:3a:
         d7:e7:5b:53:ad:19:fd:55:4f:78:f1:12:ec:57:79:aa:e0:1f:
         b3:58:54:47:bf:c9:2e:53:1f:37:2f:8a:54:be:84:a6:3a:96:
         81:44:07:9d:d9:f7:df:d3:4e:0a:57:95:22:ac:7b:01:e2:3d:
         dd:31:2b:45:7e:0c:3c:e4:11:40:7b:60:8c:29:81:fe:87:59:
         14:dc:c2:cd:a3:c8:81:f6:19:cd:82:38:97:d9:4a:1b:96:ce:
         4f:fb:5d:df
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUGNhBBT10JoHrGBPSKpHjI3MLBxcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDYyODE2NDcxM1oX
DTIyMDYyODE2NTIxM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCQUE5RTM1NEM5MDNDNDMwOTY3MjgwNjcyQzBCMDIzRDVCREFDQzQ3OENE
Njc2RTI0QjZBM0Q1NTYzNzYyQTM2OUVCNTUxMTQ3N0U0NTE3NTQ1MDdGN0QwMEQw
RDUwNzE4RTQ4RDdERDgwODAyMTczNEU3MUJBQjVEMkI0RDJFNUZDQUM0NjYzQUM3
MUJCQ0IyNEY0QTAwREIwMjQ0QjdDRTJDNzE2RjdGNzY4RkFFQTJDMEM2NTVDRDdE
Rjc4NkZBMzE5NEI3NDVCMjBGRTY0ODZGQThBODM3MDNGQjJEMEFEODQwNDk4MDhG
NURDN0NGMTJGNEJFQjE5Qjg1MjMwNjNFMTQ4RjY2NkNCODk5NTZGNTM2NzI5NjNC
NUY5QTAwMTAzOTEzNzVFOEJEMDYyNjkwNDZGNzgxRTFFREJDQjE5NTNEMTg0MkYy
Q0IwQkMyODdEOTUxREVCRUUwODMyOURCQkVFMkE3OTFFREUxNjZBRUYxNkRDNDg0
MjlFNjU2MUYxODcyN0U1M0ZGQTEzNkQxODAyMDU4RkRENkZCOUNERjEyRjU2NUQ4
MkQ5QjY0NTAwMkJDMzQ0QTA5OTc0MTU1NzU0QzRDREY3NjFGMzQ1RjkxNTNDMjcy
NzhBNTE1MzlFMjRDOTkxN0FDQ0Y2Q0FDQjZCMUEwQkY5QjY4NTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qeNUyQPEMJZygGcsCwI9
W9rMR4zWduJLaj1VY3YqNp61URR35FF1RQf30A0NUHGOSNfdgIAhc05xurXStNLl
/KxGY6xxu8sk9KANsCRLfOLHFvf3aPrqLAxlXNffeG+jGUt0WyD+ZIb6ioNwP7LQ
rYQEmAj13HzxL0vrGbhSMGPhSPZmy4mVb1NnKWO1+aABA5E3XovQYmkEb3geHtvL
GVPRhC8ssLwofZUd6+4IMp277ip5Ht4Wau8W3EhCnmVh8Ycn5T/6E20YAgWP3W+5
zfEvVl2C2bZFACvDRKCZdBVXVMTN92HzRfkVPCcnilFTniTJkXrM9srLaxoL+baF
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUO23J33jGTmJQv5EOgLlsm/KVIGcwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM4MmUzMTMyMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeoejANBgkqhkiG
9w0BAQsFAAOCAQEAArj8KncG9RzQtrfk72Jx3pw2+QTM9gpV3MGOynb7UM0xtv9u
04L1RIqmJJxRsDJJU9lBtRUij/lMGUD/ezxJB2+vTCNFFNEHQbPDqAY7fu5GhaaV
sEOZpnPaub/J1ulFi7ojraOZY2WfhaOrcIcU5GYtP0NA8Dft8VATrU9SVxshAGvE
aP2ADkF8QIOaGhqCNae9RUJe+fVdBzEEzvhJk4w61+dbU60Z/VVPePES7Fd5quAf
s1hUR7/JLlMfNy+KVL6EpjqWgUQHndn339NOCleVIqx7AeI93TErRX4MPOQRQHtg
jCmB/odZFNzCzaPIgfYZzYI4l9lKG5bOT/td3w==
-----END CERTIFICATE-----