Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3136382e302f32332d3234203d3e203538333639.roa
File:                     3130332e3136382e3136382e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          mjwQypzV67Xl0gOUQVtXqBpLj17ucZFadPE6e0IsJZM=
Subject key identifier:   CF:4F:61:D9:70:E8:F0:59:2B:FE:25:CC:76:53:3F:77:6E:A1:FD:CA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       102E161C499B4EF4C4409E9FD14731A20B8A3EA4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3136382e302f32332d3234203d3e203538333639.roa
Signing time:             Wed 15 Sep 2021 07:09:27 +0000
ROA not before:           Wed 15 Sep 2021 07:04:27 +0000
ROA not after:            Thu 15 Sep 2022 07:09:27 +0000
asID:                     58369
IP address blocks:        103.168.168.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2e:16:1c:49:9b:4e:f4:c4:40:9e:9f:d1:47:31:a2:0b:8a:3e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 15 07:04:27 2021 GMT
            Not After : Sep 15 07:09:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:12:b5:fe:84:0f:a0:50:c0:6f:12:47:4f:
                    0f:1d:0a:e0:92:43:1a:af:2c:d3:b9:79:29:7f:3a:
                    4c:4b:de:34:e4:f5:d8:79:64:41:c7:73:54:c1:e4:
                    f5:e7:a2:6b:3b:ce:e5:90:0c:5b:9d:9d:ad:f2:70:
                    38:80:99:ec:14:c6:6d:0f:ea:99:68:dd:f2:69:d2:
                    05:e0:0f:15:b4:1e:bd:77:ab:32:97:72:1b:36:74:
                    79:68:7b:c3:3f:d7:55:d8:12:3c:b4:1d:c6:ad:d5:
                    3e:18:de:7b:cb:45:0b:ba:e9:19:04:93:31:0c:e7:
                    a3:17:4b:8f:9c:fd:f5:4f:aa:4e:15:7a:48:dd:30:
                    3d:42:17:b5:fd:92:d0:fb:60:8d:dc:da:00:73:7a:
                    cb:31:3e:f5:5c:12:ac:36:2f:48:cc:cc:9d:84:d3:
                    bd:9c:a5:ab:22:bb:68:4d:cd:3d:66:41:82:2f:73:
                    bc:08:15:41:c7:98:17:c6:e9:9d:54:35:86:98:d3:
                    1f:37:27:bd:87:d0:d9:4f:02:83:1a:16:13:76:c7:
                    9b:00:9f:88:e9:18:8b:d3:5d:a1:9e:b4:83:d4:83:
                    3b:08:85:87:62:f4:77:c7:b3:ea:b2:5e:8a:b2:38:
                    a3:6a:1e:8b:69:35:b9:bf:9f:f2:20:b6:46:c8:18:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4F:61:D9:70:E8:F0:59:2B:FE:25:CC:76:53:3F:77:6E:A1:FD:CA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3136382e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:3e:04:02:23:27:bb:e4:62:f5:a3:76:dc:5e:c6:c2:8d:af:
         a3:c1:85:82:ee:d5:5b:ea:db:f7:d2:0c:cf:70:65:43:be:20:
         9b:c9:2e:0f:43:4f:8b:3f:84:98:db:50:8a:f3:39:5e:87:a6:
         ad:31:ae:e1:4c:04:af:8c:d0:3f:e8:6d:80:00:22:44:9a:0e:
         60:ac:3c:d4:f7:e5:c5:23:bc:db:85:1b:6f:3a:47:33:89:3f:
         c5:47:12:3b:35:f4:f7:a7:7e:ea:a5:4c:fe:63:84:6d:81:7e:
         9d:6a:ec:f0:e3:78:d2:fa:41:ff:06:72:58:72:87:1f:f7:d3:
         42:66:50:33:f2:2d:83:84:ab:07:cd:ad:da:4f:d7:86:b2:13:
         3d:53:9c:39:80:34:76:2f:17:a7:09:bf:b9:64:2b:a8:b6:fe:
         40:1e:12:28:3b:ee:11:84:f1:b2:42:3f:68:2a:24:2f:7a:ee:
         ac:64:51:5b:3d:00:5c:51:fc:3b:2c:b9:67:2e:ac:28:0e:1b:
         95:5f:58:01:c2:f3:c3:3c:64:dc:30:c8:8a:39:a5:10:02:22:
         8c:4f:cc:e8:b9:3a:8d:50:8b:c4:ca:58:76:96:5b:5a:45:f3:
         bc:d4:94:ae:f0:d7:ee:29:cb:37:5a:33:ce:30:e1:ec:d4:a2:
         bf:82:ca:f4
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUEC4WHEmbTvTEQJ6f0UcxoguKPqQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkxNTA3MDQyN1oX
DTIyMDkxNTA3MDkyN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBENDk5MTJCNUZFODQwRkEwNTBDMDZGMTI0NzRGMEYxRDBBRTA5MjQzMUFB
RjJDRDNCOTc5Mjk3RjNBNEM0QkRFMzRFNEY1RDg3OTY0NDFDNzczNTRDMUU0RjVF
N0EyNkIzQkNFRTU5MDBDNUI5RDlEQURGMjcwMzg4MDk5RUMxNEM2NkQwRkVBOTk2
OERERjI2OUQyMDVFMDBGMTVCNDFFQkQ3N0FCMzI5NzcyMUIzNjc0Nzk2ODdCQzMz
RkQ3NTVEODEyM0NCNDFEQzZBREQ1M0UxOERFN0JDQjQ1MEJCQUU5MTkwNDkzMzEw
Q0U3QTMxNzRCOEY5Q0ZERjU0RkFBNEUxNTdBNDhERDMwM0Q0MjE3QjVGRDkyRDBG
QjYwOEREQ0RBMDA3MzdBQ0IzMTNFRjU1QzEyQUMzNjJGNDhDQ0NDOUQ4NEQzQkQ5
Q0E1QUIyMkJCNjg0RENEM0Q2NjQxODIyRjczQkMwODE1NDFDNzk4MTdDNkU5OUQ1
NDM1ODY5OEQzMUYzNzI3QkQ4N0QwRDk0RjAyODMxQTE2MTM3NkM3OUIwMDlGODhF
OTE4OEJEMzVEQTE5RUI0ODNENDgzM0IwODg1ODc2MkY0NzdDN0IzRUFCMjVFOEFC
MjM4QTM2QTFFOEI2OTM1QjlCRjlGRjIyMEI2NDZDODE4RTMyMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUmRK1/oQPoFDAbxJHTw8d
CuCSQxqvLNO5eSl/OkxL3jTk9dh5ZEHHc1TB5PXnoms7zuWQDFudna3ycDiAmewU
xm0P6plo3fJp0gXgDxW0Hr13qzKXchs2dHloe8M/11XYEjy0Hcat1T4Y3nvLRQu6
6RkEkzEM56MXS4+c/fVPqk4VekjdMD1CF7X9ktD7YI3c2gBzessxPvVcEqw2L0jM
zJ2E072cpasiu2hNzT1mQYIvc7wIFUHHmBfG6Z1UNYaY0x83J72H0NlPAoMaFhN2
x5sAn4jpGIvTXaGetIPUgzsIhYdi9HfHs+qyXoqyOKNqHotpNbm/n/IgtkbIGOMj
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUz09h2XDo8Fkr/iXMdlM/d26h/cowHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM4MmUzMTM2MzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6ioMA0GCSqG
SIb3DQEBCwUAA4IBAQAGPgQCIye75GL1o3bcXsbCja+jwYWC7tVb6tv30gzPcGVD
viCbyS4PQ0+LP4SY21CK8zleh6atMa7hTASvjNA/6G2AACJEmg5grDzU9+XFI7zb
hRtvOkcziT/FRxI7NfT3p37qpUz+Y4RtgX6dauzw43jS+kH/BnJYcocf99NCZlAz
8i2DhKsHza3aT9eGshM9U5w5gDR2LxenCb+5ZCuotv5AHhIoO+4RhPGyQj9oKiQv
eu6sZFFbPQBcUfw7LLlnLqwoDhuVX1gBwvPDPGTcMMiKOaUQAiKMT8zouTqNUIvE
ylh2lltaRfO81JSu8NfuKcs3WjPOMOHs1KK/gsr0
-----END CERTIFICATE-----