Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e31362e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136392e31362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          zBB2XSZwWE4bi+f2PffBgXt1V2rhqoUCLzgD24oUtSA=
Subject key identifier:   FD:BD:CE:B0:2A:9E:D8:01:B9:98:BF:EF:90:14:38:B0:75:62:8B:94
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       67FD6B8A8FDF0DF3AA54311AADB378DC632A4025
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e31362e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:13 +0000
ROA not before:           Mon 28 Jun 2021 16:47:13 +0000
ROA not after:            Tue 28 Jun 2022 16:52:13 +0000
asID:                     4800
IP address blocks:        103.169.16.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fd:6b:8a:8f:df:0d:f3:aa:54:31:1a:ad:b3:78:dc:63:2a:40:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:13 2021 GMT
            Not After : Jun 28 16:52:13 2022 GMT
        Subject: CN=3082010A0282010100EC10F9BB5FFCADB7FA55A961212E71A2DD9CC78E489E8D58EFDE6F267DD4786F6399C07D1C15363CADFABF4EC542DC4998B1B2E1D196A6ED9BACB6D4D47BF50B7A36E1A85426BB45EB03D6D936BD3980ECE4625CEA5AA771D7B371076AA2DF4615EE9BBC0113F5F21515D444FAA5BA7DDBEA88887C368745F34846501FA683FAB7CCE910D438C8F8F39666DF28086D45F3466FB89E7BC306EE9B928731CC3336F0865B47F510CDACF960200BAE91219EB6581FA9B74B7F773625799F99C63CDF0491E6C92648AA0829F5DE387A411E4613653A316DC55C12001360257D74464FF781925F20136B3831211D71485DB7E8CD56B1E76CEB23AE626FBC007BAFBAFB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:10:f9:bb:5f:fc:ad:b7:fa:55:a9:61:21:2e:
                    71:a2:dd:9c:c7:8e:48:9e:8d:58:ef:de:6f:26:7d:
                    d4:78:6f:63:99:c0:7d:1c:15:36:3c:ad:fa:bf:4e:
                    c5:42:dc:49:98:b1:b2:e1:d1:96:a6:ed:9b:ac:b6:
                    d4:d4:7b:f5:0b:7a:36:e1:a8:54:26:bb:45:eb:03:
                    d6:d9:36:bd:39:80:ec:e4:62:5c:ea:5a:a7:71:d7:
                    b3:71:07:6a:a2:df:46:15:ee:9b:bc:01:13:f5:f2:
                    15:15:d4:44:fa:a5:ba:7d:db:ea:88:88:7c:36:87:
                    45:f3:48:46:50:1f:a6:83:fa:b7:cc:e9:10:d4:38:
                    c8:f8:f3:96:66:df:28:08:6d:45:f3:46:6f:b8:9e:
                    7b:c3:06:ee:9b:92:87:31:cc:33:36:f0:86:5b:47:
                    f5:10:cd:ac:f9:60:20:0b:ae:91:21:9e:b6:58:1f:
                    a9:b7:4b:7f:77:36:25:79:9f:99:c6:3c:df:04:91:
                    e6:c9:26:48:aa:08:29:f5:de:38:7a:41:1e:46:13:
                    65:3a:31:6d:c5:5c:12:00:13:60:25:7d:74:46:4f:
                    f7:81:92:5f:20:13:6b:38:31:21:1d:71:48:5d:b7:
                    e8:cd:56:b1:e7:6c:eb:23:ae:62:6f:bc:00:7b:af:
                    ba:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BD:CE:B0:2A:9E:D8:01:B9:98:BF:EF:90:14:38:B0:75:62:8B:94
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e31362e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:5b:a4:3a:b9:46:e8:34:7f:25:2c:6a:60:12:b7:5d:31:4a:
         15:7b:07:38:74:20:0a:b5:14:d0:6b:37:96:1d:a6:e6:40:3c:
         1a:64:b0:4e:a1:29:3e:90:a2:d9:d2:16:64:cc:eb:e4:cf:2b:
         8f:ce:d0:5b:7c:1c:ee:7c:36:c9:1b:f6:6a:db:95:03:5f:e2:
         4c:5e:6c:6b:37:df:6f:84:ec:5a:f0:30:80:b2:85:10:6c:da:
         d7:cc:b7:aa:57:1a:8d:0f:38:79:a2:f9:f1:fa:9f:00:00:c9:
         a4:9e:be:87:f1:2e:19:2f:78:9b:a7:e9:88:80:53:34:90:dc:
         42:32:bf:d3:1e:5c:ab:64:0b:cb:6b:21:26:ee:3c:a1:27:68:
         67:ae:45:85:6a:76:59:01:ac:23:5b:66:da:08:96:91:35:89:
         cb:46:eb:7d:67:65:b1:d4:bc:eb:30:e0:82:3b:28:e1:e4:b5:
         49:39:0a:69:45:a8:b1:76:d0:a2:56:95:51:10:ca:cf:b4:64:
         5e:c4:49:c0:f9:df:47:a2:3d:f6:d2:70:de:ea:3e:44:07:c3:
         26:76:c4:50:4e:81:15:62:94:81:b9:2b:1e:b6:69:cb:4f:86:
         f3:79:5f:ee:1e:51:25:7d:fc:a5:3b:ff:40:bc:e2:e9:2c:07:
         2d:d1:fd:aa
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUZ/1rio/fDfOqVDEarbN43GMqQCUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDYyODE2NDcxM1oX
DTIyMDYyODE2NTIxM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFQzEwRjlCQjVGRkNBREI3RkE1NUE5NjEyMTJFNzFBMkREOUNDNzhFNDg5
RThENThFRkRFNkYyNjdERDQ3ODZGNjM5OUMwN0QxQzE1MzYzQ0FERkFCRjRFQzU0
MkRDNDk5OEIxQjJFMUQxOTZBNkVEOUJBQ0I2RDRENDdCRjUwQjdBMzZFMUE4NTQy
NkJCNDVFQjAzRDZEOTM2QkQzOTgwRUNFNDYyNUNFQTVBQTc3MUQ3QjM3MTA3NkFB
MkRGNDYxNUVFOUJCQzAxMTNGNUYyMTUxNUQ0NDRGQUE1QkE3RERCRUE4ODg4N0Mz
Njg3NDVGMzQ4NDY1MDFGQTY4M0ZBQjdDQ0U5MTBENDM4QzhGOEYzOTY2NkRGMjgw
ODZENDVGMzQ2NkZCODlFN0JDMzA2RUU5QjkyODczMUNDMzMzNkYwODY1QjQ3RjUx
MENEQUNGOTYwMjAwQkFFOTEyMTlFQjY1ODFGQTlCNzRCN0Y3NzM2MjU3OTlGOTlD
NjNDREYwNDkxRTZDOTI2NDhBQTA4MjlGNURFMzg3QTQxMUU0NjEzNjUzQTMxNkRD
NTVDMTIwMDEzNjAyNTdENzQ0NjRGRjc4MTkyNUYyMDEzNkIzODMxMjExRDcxNDg1
REI3RThDRDU2QjFFNzZDRUIyM0FFNjI2RkJDMDA3QkFGQkFGQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsEPm7X/ytt/pVqWEhLnGi
3ZzHjkiejVjv3m8mfdR4b2OZwH0cFTY8rfq/TsVC3EmYsbLh0Zam7ZusttTUe/UL
ejbhqFQmu0XrA9bZNr05gOzkYlzqWqdx17NxB2qi30YV7pu8ARP18hUV1ET6pbp9
2+qIiHw2h0XzSEZQH6aD+rfM6RDUOMj485Zm3ygIbUXzRm+4nnvDBu6bkocxzDM2
8IZbR/UQzaz5YCALrpEhnrZYH6m3S393NiV5n5nGPN8EkebJJkiqCCn13jh6QR5G
E2U6MW3FXBIAE2AlfXRGT/eBkl8gE2s4MSEdcUhdt+jNVrHnbOsjrmJvvAB7r7r7
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQU/b3OsCqe2AG5mL/vkBQ4sHVii5QwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM5MmUzMTM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzODMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqRAwDQYJKoZIhvcN
AQELBQADggEBAEBbpDq5Rug0fyUsamASt10xShV7Bzh0IAq1FNBrN5YdpuZAPBpk
sE6hKT6QotnSFmTM6+TPK4/O0Ft8HO58Nskb9mrblQNf4kxebGs332+E7FrwMICy
hRBs2tfMt6pXGo0POHmi+fH6nwAAyaSevofxLhkveJun6YiAUzSQ3EIyv9MeXKtk
C8trISbuPKEnaGeuRYVqdlkBrCNbZtoIlpE1ictG631nZbHUvOsw4II7KOHktUk5
CmlFqLF20KJWlVEQys+0ZF7EScD530eiPfbScN7qPkQHwyZ2xFBOgRVilIG5Kx62
actPhvN5X+4eUSV9/KU7/0C84uksBy3R/ao=
-----END CERTIFICATE-----