Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32362e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136392e32362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          6PVJBRi7I3B4NjFIjr8lQrAHcMZYPvKE8u2Ue4QykMQ=
Subject key identifier:   BC:F7:05:64:CA:87:22:4C:E9:DD:59:73:71:DB:D1:A2:46:5E:0B:55
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       54CE8AB42D1B6FA0E363E501AB40479639A3665B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32362e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:14 +0000
ROA not before:           Mon 28 Jun 2021 16:47:14 +0000
ROA not after:            Tue 28 Jun 2022 16:52:14 +0000
asID:                     4800
IP address blocks:        103.169.26.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ce:8a:b4:2d:1b:6f:a0:e3:63:e5:01:ab:40:47:96:39:a3:66:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:14 2021 GMT
            Not After : Jun 28 16:52:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:b0:8c:60:cf:49:48:4a:1d:17:9c:b8:8b:
                    cb:c2:44:a5:7c:e0:5c:dd:f6:32:ea:1f:d9:8b:6d:
                    2c:aa:60:9b:e1:28:ed:d2:78:d0:b7:98:8d:7e:95:
                    d7:65:86:f4:a7:d5:2d:78:3b:c7:7e:fb:7a:21:97:
                    a6:b0:e7:fa:87:4d:6a:f5:62:99:93:a5:68:7e:e7:
                    21:4b:be:7c:5d:8f:ab:60:68:16:cd:4a:0d:52:5f:
                    3e:78:f6:39:93:cc:41:ab:e8:96:3d:38:ac:63:d9:
                    e9:3e:48:23:06:4d:93:28:f4:3c:bf:bd:21:c7:a3:
                    25:0d:87:43:9e:c9:5f:2e:14:f1:2a:fa:30:99:c5:
                    1b:76:da:d8:3f:24:b1:ad:fa:fe:e7:87:c3:ec:c7:
                    13:34:d4:b5:b4:53:61:bd:ec:8f:c5:22:57:84:95:
                    39:f9:ad:32:f3:d6:74:a7:80:3c:6f:ed:79:e0:59:
                    7b:9e:32:30:a8:c4:4a:eb:cc:58:b2:12:65:0c:64:
                    98:e7:e9:c0:2f:c0:f2:09:42:30:17:e1:2e:f8:c0:
                    fe:07:92:7f:7b:f0:f7:60:7c:96:0a:7a:35:9b:59:
                    b1:e3:5a:24:94:4a:8c:9b:bd:07:0e:b5:79:53:b4:
                    04:8b:3f:94:48:1b:34:46:59:39:2d:bc:42:45:88:
                    24:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F7:05:64:CA:87:22:4C:E9:DD:59:73:71:DB:D1:A2:46:5E:0B:55
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32362e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:61:5a:fb:ee:80:9f:fe:46:ae:fd:61:4d:56:b0:a0:f6:9d:
         64:fe:54:1f:c0:db:65:f8:64:c3:cb:c2:c0:4d:1f:6d:c0:b9:
         95:68:14:2b:dc:fc:f3:fc:83:4c:29:c6:ee:0d:63:fe:07:38:
         7d:98:3d:59:14:08:17:f4:16:ff:b6:32:72:c7:6a:5a:8d:ee:
         83:b9:64:e9:49:f0:e5:42:39:0f:ff:97:3c:b5:4d:5f:91:62:
         a8:69:95:f1:26:9d:ca:a7:4a:1b:a3:91:8b:da:ee:b3:fb:38:
         80:e7:56:c6:bd:22:aa:94:1d:da:f6:ad:87:7d:d5:b6:04:d6:
         4c:8f:48:e6:57:9b:d1:59:39:10:31:d7:4d:10:26:cc:88:6a:
         1e:d3:2f:d8:2c:78:37:27:a6:57:31:ec:bd:5b:1b:7d:48:31:
         88:97:46:46:e9:42:03:29:fe:a9:2a:b4:c8:2b:bf:92:2c:59:
         a9:e0:f9:33:57:73:4c:b2:0a:72:1f:88:92:d1:b8:9c:83:97:
         09:24:96:e2:83:7a:d2:42:85:e3:de:ef:c0:33:90:2c:1f:84:
         d1:31:72:0a:a0:0f:b6:ba:08:71:e1:99:4b:3c:78:bc:e9:09:
         5e:54:b6:fb:a3:a0:62:41:f6:df:d5:86:06:37:c8:86:03:b1:
         01:d8:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----