Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3132302e302f32332d3234203d3e2039383735.roa
File:                     3130332e3136392e3132302e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          IfnL6EDTf4nDqiqIBJsvcQccaEHWCXYIvYMI1I6ZNaY=
Subject key identifier:   2C:19:83:C2:04:1C:06:5C:69:8D:29:42:AE:7B:DB:FB:5A:03:4E:0B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6512D6A0DF48422EC7FE5C024924261730BC72C1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3132302e302f32332d3234203d3e2039383735.roa
Signing time:             Wed 29 Sep 2021 01:11:23 +0000
ROA not before:           Wed 29 Sep 2021 01:06:23 +0000
ROA not after:            Thu 29 Sep 2022 01:11:23 +0000
asID:                     9875
IP address blocks:        103.169.120.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:12:d6:a0:df:48:42:2e:c7:fe:5c:02:49:24:26:17:30:bc:72:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 29 01:06:23 2021 GMT
            Not After : Sep 29 01:11:23 2022 GMT
        Subject: CN=3082010A0282010100CC4081CD1EA441F1CEE196760257E62874F5504662C8356DF49C60B5E57A7AACF700C143B9C7A80B16FB194F2564051D834E28F7A46971AE0D159DA977C4ADAEC46016EFCD7BDF9D7A5DAFF331DAA6AE73039E7CE54CC40C562283ABBE985EFA899B4E255B7852658B191E3AF70A9D267F9E77C4CCD9EC90E1CA6EFF3189D0CE137BFB34AB284EAED4366856DA6FA5AC31E31854D86312F772CB02AB79161D3559F97BABE4EF7C253F04F0A2E9F3D94D3071EF12BDCE6A497172586A99DBF0D44C1816F11177C5BB15D5E6B55A4A4B4A0452F724ED833C4B05117E593E72F5447EBA2D3FFD2B7BA334079F4E9E0AEF3AC0E7F505A2EA5516E5CF4FBA5AE193230203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:81:cd:1e:a4:41:f1:ce:e1:96:76:02:57:
                    e6:28:74:f5:50:46:62:c8:35:6d:f4:9c:60:b5:e5:
                    7a:7a:ac:f7:00:c1:43:b9:c7:a8:0b:16:fb:19:4f:
                    25:64:05:1d:83:4e:28:f7:a4:69:71:ae:0d:15:9d:
                    a9:77:c4:ad:ae:c4:60:16:ef:cd:7b:df:9d:7a:5d:
                    af:f3:31:da:a6:ae:73:03:9e:7c:e5:4c:c4:0c:56:
                    22:83:ab:be:98:5e:fa:89:9b:4e:25:5b:78:52:65:
                    8b:19:1e:3a:f7:0a:9d:26:7f:9e:77:c4:cc:d9:ec:
                    90:e1:ca:6e:ff:31:89:d0:ce:13:7b:fb:34:ab:28:
                    4e:ae:d4:36:68:56:da:6f:a5:ac:31:e3:18:54:d8:
                    63:12:f7:72:cb:02:ab:79:16:1d:35:59:f9:7b:ab:
                    e4:ef:7c:25:3f:04:f0:a2:e9:f3:d9:4d:30:71:ef:
                    12:bd:ce:6a:49:71:72:58:6a:99:db:f0:d4:4c:18:
                    16:f1:11:77:c5:bb:15:d5:e6:b5:5a:4a:4b:4a:04:
                    52:f7:24:ed:83:3c:4b:05:11:7e:59:3e:72:f5:44:
                    7e:ba:2d:3f:fd:2b:7b:a3:34:07:9f:4e:9e:0a:ef:
                    3a:c0:e7:f5:05:a2:ea:55:16:e5:cf:4f:ba:5a:e1:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:19:83:C2:04:1C:06:5C:69:8D:29:42:AE:7B:DB:FB:5A:03:4E:0B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3132302e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:b5:a0:3c:3d:92:28:71:19:0e:b5:f9:99:5b:88:2e:c1:
         ca:cd:bc:f2:f8:8d:42:4e:9f:82:03:28:07:8d:50:43:6c:d7:
         2a:66:00:67:cf:7c:06:a4:28:e7:22:38:77:a1:f8:6d:9b:43:
         23:29:90:07:7f:03:db:aa:73:fe:2b:c2:51:20:17:9e:12:8e:
         21:2b:65:22:0c:62:ca:23:d5:ea:96:b6:8d:7f:c2:cb:02:35:
         18:39:a0:2a:9c:cd:f9:1c:2b:97:d7:d0:28:7f:fe:64:fb:5c:
         62:bf:0d:b8:fc:94:3a:10:a4:86:89:fd:76:ef:4b:7a:09:d8:
         c3:01:f2:6c:a5:0f:ae:e2:78:d6:11:6c:f7:a4:d8:79:fb:aa:
         fa:c7:02:1e:b0:c6:de:3b:ae:64:af:e2:69:88:0b:d5:29:47:
         c0:76:47:5d:2a:4c:ee:49:c7:4d:34:b0:af:ff:e5:ac:99:70:
         c9:d8:78:b8:d7:41:97:cd:6f:7f:0e:f6:24:32:72:c5:ef:3e:
         fa:5d:41:43:38:57:ce:36:f7:c6:5b:12:ee:c0:17:7e:c9:fc:
         75:01:11:30:d4:11:66:62:88:5d:2d:a4:e7:fa:5c:f9:de:fd:
         78:bb:bd:70:b5:39:86:f2:73:e6:33:a9:c8:42:a0:b6:19:50:
         6a:62:ec:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----