Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3131382e302f32332d3234203d3e2039383735.roa
File:                     3130332e3136392e3131382e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          qf7qL/bbgxj9+2EiaSaamfLNIdRbaiyPi/+28KNkf5M=
Subject key identifier:   74:BE:2B:A9:8A:A1:A5:0B:3E:59:50:5C:98:6D:9A:05:8B:52:F9:9B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0A7AB47D42EDAA3D8D5534CC7878DFD421E5EB8F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3131382e302f32332d3234203d3e2039383735.roa
Signing time:             Wed 29 Sep 2021 01:11:14 +0000
ROA not before:           Wed 29 Sep 2021 01:06:14 +0000
ROA not after:            Thu 29 Sep 2022 01:11:14 +0000
asID:                     9875
IP address blocks:        103.169.118.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7a:b4:7d:42:ed:aa:3d:8d:55:34:cc:78:78:df:d4:21:e5:eb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 29 01:06:14 2021 GMT
            Not After : Sep 29 01:11:14 2022 GMT
        Subject: CN=3082010A0282010100B9B73AE0573A7C7BCE6891BD57DC5CA4F0EB636D07E0E03453B0D93B30925839A8EF08E9295594C659E4B618F158A8C48D6DA322CA739E98DACD6218E20E0A3F8CB8B48F7FF8E36EDC57E50E2520F63F668EFF388838FB87700E66B20E05E302169F092D37B40D9DCE6E1EF75EC0C01BB5F8E524A67E74722CD3288F67C5139D1D86B91DD1D8B24EA04DCF62FD659E9F5A4812DFEF9F0E976077C86CC165BCCEC44F1B449471117D41CA52CB0C106234B5EC55AD30EDB15712ED4A98136C0F3BCE83292E06A9DBB86B3D4BD2241FF476F54E9C2174602172BD730D9722296B61B884719F6901BDB65022FDBBCB8D7740364DDC21583EEB575A4858A85DAC89130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:3a:e0:57:3a:7c:7b:ce:68:91:bd:57:dc:
                    5c:a4:f0:eb:63:6d:07:e0:e0:34:53:b0:d9:3b:30:
                    92:58:39:a8:ef:08:e9:29:55:94:c6:59:e4:b6:18:
                    f1:58:a8:c4:8d:6d:a3:22:ca:73:9e:98:da:cd:62:
                    18:e2:0e:0a:3f:8c:b8:b4:8f:7f:f8:e3:6e:dc:57:
                    e5:0e:25:20:f6:3f:66:8e:ff:38:88:38:fb:87:70:
                    0e:66:b2:0e:05:e3:02:16:9f:09:2d:37:b4:0d:9d:
                    ce:6e:1e:f7:5e:c0:c0:1b:b5:f8:e5:24:a6:7e:74:
                    72:2c:d3:28:8f:67:c5:13:9d:1d:86:b9:1d:d1:d8:
                    b2:4e:a0:4d:cf:62:fd:65:9e:9f:5a:48:12:df:ef:
                    9f:0e:97:60:77:c8:6c:c1:65:bc:ce:c4:4f:1b:44:
                    94:71:11:7d:41:ca:52:cb:0c:10:62:34:b5:ec:55:
                    ad:30:ed:b1:57:12:ed:4a:98:13:6c:0f:3b:ce:83:
                    29:2e:06:a9:db:b8:6b:3d:4b:d2:24:1f:f4:76:f5:
                    4e:9c:21:74:60:21:72:bd:73:0d:97:22:29:6b:61:
                    b8:84:71:9f:69:01:bd:b6:50:22:fd:bb:cb:8d:77:
                    40:36:4d:dc:21:58:3e:eb:57:5a:48:58:a8:5d:ac:
                    89:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BE:2B:A9:8A:A1:A5:0B:3E:59:50:5C:98:6D:9A:05:8B:52:F9:9B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3131382e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:c7:f3:20:c8:97:df:7c:8f:98:48:82:f8:fa:d7:94:f7:
         2a:87:44:1f:f6:2d:c8:04:ab:77:0a:19:f3:7b:b9:e8:71:62:
         b6:7c:59:03:7e:c9:a5:d4:8b:6c:f6:b0:bb:44:89:34:9a:c9:
         31:ad:88:b1:3f:1c:d7:aa:46:34:bc:78:62:2d:0a:eb:e1:1c:
         49:a3:db:a0:96:c5:27:f3:c5:7f:1f:b8:ca:ff:cc:26:87:08:
         03:13:3d:99:2f:23:37:8e:a6:2d:25:d3:9d:a1:c1:f4:73:8b:
         f9:ae:22:21:f1:11:e2:14:42:e1:e6:cb:45:37:70:44:62:fe:
         c0:3c:47:2a:5c:86:30:0e:5b:1f:98:72:4c:08:c3:de:10:a9:
         fc:bc:d1:8d:ed:6d:62:5c:9b:82:73:62:e3:9a:32:6e:56:55:
         d7:0e:92:97:93:32:cb:72:6e:c2:43:14:b3:49:76:70:21:8b:
         b0:02:fe:c6:79:69:a6:4d:fa:38:22:e7:1a:cf:31:f0:12:fd:
         ea:56:5a:3e:75:e5:7a:7a:5e:50:da:d6:cb:7b:d9:ff:cb:03:
         76:94:2d:cf:c7:14:b3:16:77:8e:46:1a:bb:b9:09:f1:c6:7c:
         9c:11:84:37:76:e9:e8:33:bb:5c:93:91:69:09:20:70:33:ec:
         fa:74:4a:36
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUCnq0fULtqj2NVTTMeHjf1CHl648wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkyOTAxMDYxNFoX
DTIyMDkyOTAxMTExNFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCOUI3M0FFMDU3M0E3QzdCQ0U2ODkxQkQ1N0RDNUNBNEYwRUI2MzZEMDdF
MEUwMzQ1M0IwRDkzQjMwOTI1ODM5QThFRjA4RTkyOTU1OTRDNjU5RTRCNjE4RjE1
OEE4QzQ4RDZEQTMyMkNBNzM5RTk4REFDRDYyMThFMjBFMEEzRjhDQjhCNDhGN0ZG
OEUzNkVEQzU3RTUwRTI1MjBGNjNGNjY4RUZGMzg4ODM4RkI4NzcwMEU2NkIyMEUw
NUUzMDIxNjlGMDkyRDM3QjQwRDlEQ0U2RTFFRjc1RUMwQzAxQkI1RjhFNTI0QTY3
RTc0NzIyQ0QzMjg4RjY3QzUxMzlEMUQ4NkI5MUREMUQ4QjI0RUEwNERDRjYyRkQ2
NTlFOUY1QTQ4MTJERkVGOUYwRTk3NjA3N0M4NkNDMTY1QkNDRUM0NEYxQjQ0OTQ3
MTExN0Q0MUNBNTJDQjBDMTA2MjM0QjVFQzU1QUQzMEVEQjE1NzEyRUQ0QTk4MTM2
QzBGM0JDRTgzMjkyRTA2QTlEQkI4NkIzRDRCRDIyNDFGRjQ3NkY1NEU5QzIxNzQ2
MDIxNzJCRDczMEQ5NzIyMjk2QjYxQjg4NDcxOUY2OTAxQkRCNjUwMjJGREJCQ0I4
RDc3NDAzNjREREMyMTU4M0VFQjU3NUE0ODU4QTg1REFDODkxMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tzrgVzp8e85okb1X3Fyk
8OtjbQfg4DRTsNk7MJJYOajvCOkpVZTGWeS2GPFYqMSNbaMiynOemNrNYhjiDgo/
jLi0j3/4427cV+UOJSD2P2aO/ziIOPuHcA5msg4F4wIWnwktN7QNnc5uHvdewMAb
tfjlJKZ+dHIs0yiPZ8UTnR2GuR3R2LJOoE3PYv1lnp9aSBLf758Ol2B3yGzBZbzO
xE8bRJRxEX1BylLLDBBiNLXsVa0w7bFXEu1KmBNsDzvOgykuBqnbuGs9S9IkH/R2
9U6cIXRgIXK9cw2XIilrYbiEcZ9pAb22UCL9u8uNd0A2TdwhWD7rV1pIWKhdrIkT
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUdL4rqYqhpQs+WVBcmG2aBYtS+ZswHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM5MmUzMTMxMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzOTM4MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWepdjANBgkqhkiG
9w0BAQsFAAOCAQEAH9zH8yDIl998j5hIgvj615T3KodEH/YtyASrdwoZ83u56HFi
tnxZA37JpdSLbPawu0SJNJrJMa2IsT8c16pGNLx4Yi0K6+EcSaPboJbFJ/PFfx+4
yv/MJocIAxM9mS8jN46mLSXTnaHB9HOL+a4iIfER4hRC4ebLRTdwRGL+wDxHKlyG
MA5bH5hyTAjD3hCp/LzRje1tYlybgnNi45oyblZV1w6Sl5Myy3JuwkMUs0l2cCGL
sAL+xnlppk36OCLnGs8x8BL96lZaPnXlenpeUNrWy3vZ/8sDdpQtz8cUsxZ3jkYa
u7kJ8cZ8nBGEN3bp6DO7XJORaQkgcDPs+nRKNg==
-----END CERTIFICATE-----