Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e34342e302f32332d3234203d3e20313432333931.roa
File:                     3130332e3136392e34342e302f32332d3234203d3e20313432333931.roa (raw, json)
Hash identifier:          UOE5Ic9L2aLGvDl/453Agp2H2j54tlSvCVtlljxjMNM=
Subject key identifier:   B3:B1:9A:27:75:FF:4A:FC:A5:E0:B5:A8:35:84:62:80:D3:AF:FB:56
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       740095A1AE4AFA1D8B525778D84DD530AB81F257
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e34342e302f32332d3234203d3e20313432333931.roa
Signing time:             Mon 27 Sep 2021 06:28:21 +0000
ROA not before:           Mon 27 Sep 2021 06:23:21 +0000
ROA not after:            Tue 27 Sep 2022 06:28:21 +0000
asID:                     142391
IP address blocks:        103.169.44.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:00:95:a1:ae:4a:fa:1d:8b:52:57:78:d8:4d:d5:30:ab:81:f2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 27 06:23:21 2021 GMT
            Not After : Sep 27 06:28:21 2022 GMT
        Subject: CN=3082010A02820101009CB8787BC9C61B41D5B29E05CB949B30ACC2DB197879978B6EA43154D63A7968196B4E195A1926A2D09E8289048FC0C4F7EB62BC150C2E73536A54201D0CFB3CCAD1E6B470BD67C544C326C2A1B53AEE712EE96B62144AFF5D54050C7A73AEEDBF53F655552DDE5A6BAEC7518D2CB71D19FC1764BDD8407AE4BD40B2683151D90CA0B76842A6387614BB31083CF8FA62E11FF0187DBAD554B61AD75BF6606FD2DC70F204FF9077B9451CD816551C4B103A030B6244BC53766B07357C3EE5592FAE20F3413242F6E15C74A929D11D141A8F3CBA0B22B078A3C46E6A251B8AB681B624E9C906B34E204EB9C9F6DC966D614A51FFD7AF93CCB5F2A1E187CD0EDCDF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:78:7b:c9:c6:1b:41:d5:b2:9e:05:cb:94:
                    9b:30:ac:c2:db:19:78:79:97:8b:6e:a4:31:54:d6:
                    3a:79:68:19:6b:4e:19:5a:19:26:a2:d0:9e:82:89:
                    04:8f:c0:c4:f7:eb:62:bc:15:0c:2e:73:53:6a:54:
                    20:1d:0c:fb:3c:ca:d1:e6:b4:70:bd:67:c5:44:c3:
                    26:c2:a1:b5:3a:ee:71:2e:e9:6b:62:14:4a:ff:5d:
                    54:05:0c:7a:73:ae:ed:bf:53:f6:55:55:2d:de:5a:
                    6b:ae:c7:51:8d:2c:b7:1d:19:fc:17:64:bd:d8:40:
                    7a:e4:bd:40:b2:68:31:51:d9:0c:a0:b7:68:42:a6:
                    38:76:14:bb:31:08:3c:f8:fa:62:e1:1f:f0:18:7d:
                    ba:d5:54:b6:1a:d7:5b:f6:60:6f:d2:dc:70:f2:04:
                    ff:90:77:b9:45:1c:d8:16:55:1c:4b:10:3a:03:0b:
                    62:44:bc:53:76:6b:07:35:7c:3e:e5:59:2f:ae:20:
                    f3:41:32:42:f6:e1:5c:74:a9:29:d1:1d:14:1a:8f:
                    3c:ba:0b:22:b0:78:a3:c4:6e:6a:25:1b:8a:b6:81:
                    b6:24:e9:c9:06:b3:4e:20:4e:b9:c9:f6:dc:96:6d:
                    61:4a:51:ff:d7:af:93:cc:b5:f2:a1:e1:87:cd:0e:
                    dc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B1:9A:27:75:FF:4A:FC:A5:E0:B5:A8:35:84:62:80:D3:AF:FB:56
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e34342e302f32332d3234203d3e20313432333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:c4:c8:77:af:f9:bc:bb:0b:64:39:84:9f:41:fd:99:ee:f5:
         0e:34:1b:13:71:69:a1:f8:3e:05:cb:8c:85:53:aa:55:d8:15:
         af:53:4a:8e:86:fb:08:2a:69:a5:be:48:e6:db:d6:ce:9d:07:
         0d:44:0a:70:64:32:9d:24:ea:3b:2a:e6:46:a7:f8:46:95:8f:
         05:18:f9:d4:01:4a:f7:3f:96:e4:24:0c:32:df:1d:52:bb:00:
         f4:11:f7:66:d8:d6:ee:14:85:df:42:f5:e2:af:70:1b:e9:5b:
         00:87:50:74:20:33:1a:db:6c:84:5b:22:91:a0:9a:53:0d:60:
         16:39:5c:02:9b:11:83:f7:73:4b:83:25:1f:c6:4e:97:17:59:
         3b:54:23:4b:9b:ea:b2:7a:fe:d5:44:d1:5e:93:1c:55:00:33:
         bd:1c:66:eb:17:7e:13:18:7f:e6:b0:8b:47:ce:f0:cc:8e:44:
         63:dd:99:07:d7:db:d8:74:62:ad:1a:61:ec:f5:23:b4:6a:d8:
         29:be:26:44:08:11:51:ea:d8:cb:f1:c9:3d:10:c6:b7:60:1f:
         ac:de:a0:39:bb:b7:ce:6c:7c:5d:fa:31:d6:79:14:bb:5e:4e:
         ef:e0:7a:00:d7:eb:5d:90:65:a1:e3:67:2e:65:db:ed:10:68:
         80:02:11:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----