Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa
File:                     3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (raw, json)
Hash identifier:          Ia1SKHqGzA7of4GJlwSHyRcImn9B26ZJ4KAvQNKkinY=
Subject key identifier:   9F:F3:FA:FF:EB:CD:CC:77:A0:F9:71:51:D3:95:19:5E:C3:39:BF:02
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       53364924D3838CEF178F2C589E37BB5C96AC1E88
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa
Signing time:             Mon 12 Jul 2021 06:31:16 +0000
ROA not before:           Mon 12 Jul 2021 06:26:16 +0000
ROA not after:            Tue 12 Jul 2022 06:31:16 +0000
asID:                     142307
IP address blocks:        103.168.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:36:49:24:d3:83:8c:ef:17:8f:2c:58:9e:37:bb:5c:96:ac:1e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 12 06:26:16 2021 GMT
            Not After : Jul 12 06:31:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:e4:44:64:85:c5:f3:ab:31:83:d8:73:98:
                    d8:0d:ed:3b:ec:be:97:6b:4e:9d:27:1c:7d:00:fc:
                    a4:e6:1e:d3:1c:57:80:a5:c5:7f:08:5c:0d:a0:cb:
                    16:b8:c2:93:da:91:fe:bc:52:6d:48:1a:e5:36:3f:
                    cb:7f:cd:25:90:93:d6:a5:8a:f0:ec:f0:b1:9d:43:
                    97:ca:d2:ed:46:e5:e6:47:e5:d2:cb:de:6d:f6:f1:
                    c8:53:8c:52:47:7b:7c:bc:6e:b3:0b:38:67:63:cc:
                    50:f3:69:14:3f:42:74:87:4e:f8:9b:e4:a5:27:b1:
                    a0:b3:ef:32:b8:29:2a:bc:f3:c3:96:2b:63:ad:17:
                    be:9e:b7:b6:b7:5a:43:4c:11:8c:53:22:5f:ae:c6:
                    6d:69:3b:57:43:2d:14:3e:b9:2e:ac:76:1f:45:10:
                    85:ec:0e:26:74:c8:34:ba:ed:b5:71:da:95:e9:5c:
                    bd:8c:8a:c7:c3:c0:0e:42:3b:c3:8e:2a:26:15:a2:
                    70:e4:79:45:85:7b:86:7d:a2:9c:b4:a8:43:76:19:
                    3a:63:ef:32:9f:db:ca:69:df:b6:a3:9c:60:64:4a:
                    43:60:0b:54:a1:f0:bf:1d:9d:ec:5f:a0:c5:b3:c5:
                    47:f2:29:f9:5a:d8:6e:74:ec:94:7b:8f:2f:ff:e4:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F3:FA:FF:EB:CD:CC:77:A0:F9:71:51:D3:95:19:5E:C3:39:BF:02
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:ab:b6:c0:8c:dd:b3:3e:63:7b:6d:47:ea:62:72:6d:51:
         88:18:0d:df:96:0d:f2:cb:3b:10:38:d9:bb:81:11:0d:fc:8f:
         59:ed:74:0c:f1:4b:e8:9d:6a:c2:44:24:af:9b:5f:5c:1c:7f:
         93:6d:3d:8a:09:78:77:24:b1:55:7f:e9:e5:9e:1e:a2:49:cf:
         1e:e5:0a:f9:83:e2:b4:8b:6f:c0:fb:ab:4b:2f:68:58:5a:34:
         26:05:8c:aa:7f:58:52:cb:8a:52:bc:f3:6c:aa:fd:de:a5:f8:
         b1:df:b4:d9:13:50:03:3d:94:85:db:e1:8d:99:74:70:6f:df:
         86:0c:47:3b:b7:82:f0:a1:3a:34:60:6a:29:27:9e:96:8d:c5:
         06:af:45:4e:e5:6e:02:01:bf:ac:4e:91:59:5d:79:5f:01:5a:
         93:67:bc:c1:cb:ed:5e:3a:d8:7b:82:52:ea:29:98:4e:2d:bd:
         e9:0c:c8:78:20:07:04:4e:1a:20:fa:ca:d2:bc:c0:e5:ea:a5:
         43:4b:cd:77:75:46:63:5a:20:63:f7:0a:06:93:7b:49:86:62:
         23:60:f8:2b:20:ea:c0:27:be:30:99:b2:2f:43:59:83:7a:d7:
         8d:89:e8:05:30:16:b2:d7:00:19:45:b8:8c:e0:ae:d3:dd:31:
         7e:c8:1e:48
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUUzZJJNODjO8XjyxYnje7XJasHogwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcxMjA2MjYxNloX
DTIyMDcxMjA2MzExNlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBNUJDRTQ0NDY0ODVDNUYzQUIzMTgzRDg3Mzk4RDgwREVEM0JFQ0JFOTc2
QjRFOUQyNzFDN0QwMEZDQTRFNjFFRDMxQzU3ODBBNUM1N0YwODVDMERBMENCMTZC
OEMyOTNEQTkxRkVCQzUyNkQ0ODFBRTUzNjNGQ0I3RkNEMjU5MDkzRDZBNThBRjBF
Q0YwQjE5RDQzOTdDQUQyRUQ0NkU1RTY0N0U1RDJDQkRFNkRGNkYxQzg1MzhDNTI0
NzdCN0NCQzZFQjMwQjM4Njc2M0NDNTBGMzY5MTQzRjQyNzQ4NzRFRjg5QkU0QTUy
N0IxQTBCM0VGMzJCODI5MkFCQ0YzQzM5NjJCNjNBRDE3QkU5RUI3QjZCNzVBNDM0
QzExOEM1MzIyNUZBRUM2NkQ2OTNCNTc0MzJEMTQzRUI5MkVBQzc2MUY0NTEwODVF
QzBFMjY3NEM4MzRCQUVEQjU3MURBOTVFOTVDQkQ4QzhBQzdDM0MwMEU0MjNCQzM4
RTJBMjYxNUEyNzBFNDc5NDU4NTdCODY3REEyOUNCNEE4NDM3NjE5M0E2M0VGMzI5
RkRCQ0E2OURGQjZBMzlDNjA2NDRBNDM2MDBCNTRBMUYwQkYxRDlERUM1RkEwQzVC
M0M1NDdGMjI5Rjk1QUQ4NkU3NEVDOTQ3QjhGMkZGRkU0MEE2RjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvOREZIXF86sxg9hzmNgN
7TvsvpdrTp0nHH0A/KTmHtMcV4ClxX8IXA2gyxa4wpPakf68Um1IGuU2P8t/zSWQ
k9alivDs8LGdQ5fK0u1G5eZH5dLL3m328chTjFJHe3y8brMLOGdjzFDzaRQ/QnSH
Tvib5KUnsaCz7zK4KSq888OWK2OtF76et7a3WkNMEYxTIl+uxm1pO1dDLRQ+uS6s
dh9FEIXsDiZ0yDS67bVx2pXpXL2MisfDwA5CO8OOKiYVonDkeUWFe4Z9opy0qEN2
GTpj7zKf28pp37ajnGBkSkNgC1Sh8L8dnexfoMWzxUfyKfla2G507JR7jy//5Apv
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUn/P6/+vNzHeg+XFR05UZXsM5vwIwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM4MmUzNDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6gsMA0GCSqG
SIb3DQEBCwUAA4IBAQBJbau2wIzdsz5je21H6mJybVGIGA3flg3yyzsQONm7gREN
/I9Z7XQM8UvonWrCRCSvm19cHH+TbT2KCXh3JLFVf+nlnh6iSc8e5Qr5g+K0i2/A
+6tLL2hYWjQmBYyqf1hSy4pSvPNsqv3epfix37TZE1ADPZSF2+GNmXRwb9+GDEc7
t4LwoTo0YGopJ56WjcUGr0VO5W4CAb+sTpFZXXlfAVqTZ7zBy+1eOth7glLqKZhO
Lb3pDMh4IAcEThog+srSvMDl6qVDS813dUZjWiBj9woGk3tJhmIjYPgrIOrAJ74w
mbIvQ1mDeteNiegFMBay1wAZRbiM4K7T3TF+yB5I
-----END CERTIFICATE-----