Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3135332e302f32342d3234203d3e20313432333133.roa
File:                     3130332e3136382e3135332e302f32342d3234203d3e20313432333133.roa (raw, json)
Hash identifier:          QDequnO0/gBPN7BD96NWE2mKJejOrtO5c6Xppi+xcGA=
Subject key identifier:   9B:85:8C:ED:A6:37:B3:37:85:48:79:83:DA:BB:56:F5:A5:C6:0F:B5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1FE87D1234C605A5232B8EC30522CD56B59A01C7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3135332e302f32342d3234203d3e20313432333133.roa
Signing time:             Fri 15 Oct 2021 05:25:08 +0000
ROA not before:           Fri 15 Oct 2021 05:20:08 +0000
ROA not after:            Sat 15 Oct 2022 05:25:08 +0000
asID:                     142313
IP address blocks:        103.168.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e8:7d:12:34:c6:05:a5:23:2b:8e:c3:05:22:cd:56:b5:9a:01:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 15 05:20:08 2021 GMT
            Not After : Oct 15 05:25:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c8:ee:39:98:42:70:03:d8:68:d4:67:b4:ba:
                    6c:47:75:40:aa:03:76:17:5a:57:62:3c:68:cc:b5:
                    5b:35:ef:05:bd:1e:c5:62:ab:d9:1e:31:8f:76:f1:
                    89:27:9b:07:ee:09:d8:d4:a0:87:0b:7e:fd:8e:6e:
                    6f:47:fc:0c:70:ff:f1:de:03:63:c6:f8:17:62:5a:
                    79:9b:94:a8:f2:35:13:e8:6c:a3:1d:f9:a7:d1:6c:
                    d4:9c:dd:33:9d:cc:c5:15:4d:b3:21:a6:ca:e1:ea:
                    ad:09:79:b6:49:68:e7:01:e0:90:b2:c2:26:f3:a3:
                    99:05:6a:b1:a0:e6:5b:13:ce:0c:75:3b:36:d2:93:
                    53:19:74:b9:e4:3c:25:92:5e:8b:df:ab:47:f5:0a:
                    eb:39:f0:b1:4a:1a:17:a1:19:1b:0a:67:17:a3:3b:
                    70:3e:89:18:09:05:5a:27:7a:a6:da:cd:c3:ac:41:
                    9c:5d:bb:2a:bc:e9:b0:08:e1:43:f6:88:63:a0:a8:
                    c0:8d:0e:8a:cf:cc:d8:4b:15:80:f2:24:00:5a:a2:
                    06:08:f8:9c:fc:f6:ea:c9:94:9b:bc:d0:61:bc:07:
                    fa:01:94:eb:38:4e:fd:4d:c2:b7:04:58:2a:fb:d9:
                    d8:8c:ba:3d:00:51:7d:87:51:57:1a:a6:8e:ee:70:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:85:8C:ED:A6:37:B3:37:85:48:79:83:DA:BB:56:F5:A5:C6:0F:B5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3135332e302f32342d3234203d3e20313432333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ef:b9:38:a6:a3:f4:d4:48:e3:b8:c3:2f:0b:6b:5e:c3:d2:
         55:f2:68:fb:8d:0c:6d:de:4b:aa:50:76:4e:b8:66:d0:b8:ad:
         67:61:7b:42:7d:51:04:df:5b:69:6d:30:68:7d:e5:7c:7f:db:
         25:57:91:b7:a1:92:a7:c3:a2:e8:78:fe:ba:36:9c:cc:ff:df:
         00:46:65:01:01:5d:94:18:73:40:41:e7:e2:0f:7e:a8:34:1d:
         04:c1:5e:74:ba:f0:d3:80:ee:d2:44:13:6b:7c:a7:fd:75:38:
         a1:5e:c3:47:b7:ac:98:1f:55:9f:51:7a:f8:97:c8:0a:a2:3d:
         39:99:38:cc:67:4b:ec:2a:b9:a0:cb:c1:b2:f7:88:b4:7b:4a:
         02:6b:3a:41:cf:43:86:96:07:6a:5b:ea:59:49:96:14:a3:1c:
         d8:cf:06:88:57:74:9b:4c:eb:1c:40:17:76:d1:d7:81:13:9a:
         1e:d5:6f:12:4c:3d:a2:53:6d:f8:31:2e:77:e5:37:38:4d:5b:
         24:8c:0a:29:b9:92:f8:27:a7:c7:f3:8a:87:35:4c:c6:84:94:
         e3:df:c1:01:30:5b:34:2f:5b:e5:b0:eb:3b:da:be:bb:f3:47:
         92:92:71:8d:83:1f:5d:83:a4:6d:62:a7:e3:ec:c0:fd:1a:e0:
         6f:da:eb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----