Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e38342e302f32342d3234203d3e20313336303532.roa
File:                     3130332e3137312e38342e302f32342d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          D2by3U9ASGTRwXGU8x1RLgyZIre/s6z27WiFKzzl1Ik=
Subject key identifier:   FE:F1:6D:32:62:3A:15:26:3D:15:8E:69:DF:1E:EF:78:FF:13:68:08
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       79C617B264BC59A99B6AD3378734DD72B530E076
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e38342e302f32342d3234203d3e20313336303532.roa
Signing time:             Mon 10 Jan 2022 12:39:59 +0000
ROA not before:           Mon 10 Jan 2022 12:34:59 +0000
ROA not after:            Tue 10 Jan 2023 12:39:59 +0000
asID:                     136052
IP address blocks:        103.171.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c6:17:b2:64:bc:59:a9:9b:6a:d3:37:87:34:dd:72:b5:30:e0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 10 12:34:59 2022 GMT
            Not After : Jan 10 12:39:59 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:51:58:6f:c4:86:b8:30:0c:ac:8a:4a:a3:
                    c8:d3:b6:d0:62:24:a4:db:52:67:20:70:d5:25:72:
                    62:78:5c:d9:bf:eb:9b:74:57:7a:b8:39:6c:49:9c:
                    18:a9:a3:05:51:79:df:18:39:ae:b1:98:ac:f6:76:
                    e0:48:11:1c:74:3c:20:db:ac:3c:df:90:64:48:56:
                    e1:05:da:50:e0:99:b5:e4:f0:42:38:02:aa:1a:44:
                    5b:71:21:65:11:06:de:61:d2:31:62:11:c1:5e:0c:
                    97:97:e0:b9:90:69:86:02:09:08:04:a7:90:8b:fc:
                    78:d1:27:de:7a:6a:1a:36:de:93:2b:92:90:0d:72:
                    23:57:79:93:e3:56:d3:f9:d9:7e:76:65:c4:1c:e8:
                    0f:13:70:fe:db:c2:00:aa:b5:04:ee:bf:35:7a:aa:
                    a9:1e:32:02:01:0e:37:63:99:63:06:3d:7a:6f:8f:
                    14:ec:4c:cb:2a:59:60:15:34:e2:4d:07:7e:85:4b:
                    d8:71:fe:2c:93:92:b1:df:22:08:46:3c:8e:c0:ed:
                    19:8e:70:8a:11:86:2f:61:33:a2:33:2e:7e:a6:aa:
                    fb:d5:cf:3c:d8:f9:fb:e7:62:ee:b2:79:72:dd:d6:
                    d4:17:ee:d2:3d:13:d7:5f:1d:e8:0e:29:aa:bd:8a:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F1:6D:32:62:3A:15:26:3D:15:8E:69:DF:1E:EF:78:FF:13:68:08
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e38342e302f32342d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:5a:cb:c9:ce:6b:aa:d8:ac:96:57:e2:f3:17:cf:1e:f8:b3:
         7f:cd:d4:83:f5:b6:c5:37:ea:bd:6a:a3:2a:d2:cd:85:0e:44:
         d4:51:fe:ec:b0:19:86:24:98:ed:47:55:b1:6b:0a:0c:29:b9:
         3a:8a:26:f0:f6:28:a7:52:41:f2:bf:1c:9a:82:fe:b5:0b:61:
         0a:55:0d:dc:90:23:86:8f:a7:4f:a4:ca:a4:15:33:69:93:91:
         4b:1d:5a:37:e3:e1:e7:8f:96:54:8b:fb:15:eb:e6:2e:ce:10:
         94:de:40:87:51:37:87:5b:fd:82:07:4c:4a:e5:f3:60:63:ea:
         71:ef:c2:b4:50:1f:87:2d:8f:bd:b8:b7:94:79:73:60:47:43:
         f5:35:a9:ac:a8:e9:24:f4:95:83:76:c9:23:b3:63:ef:c1:46:
         e4:20:3c:76:2d:14:c0:6a:4c:9a:5d:a7:f6:ea:04:36:16:fd:
         25:36:b8:f4:2d:e3:45:3d:29:b7:06:53:a7:e5:3f:14:88:b7:
         bc:55:53:ac:69:fb:fa:7b:31:af:c7:b4:22:0f:4c:e1:31:76:
         99:01:60:70:c9:ec:b5:f2:69:a7:c5:96:2d:ef:8d:a8:f5:5b:
         b6:61:dc:7d:98:7b:48:3b:ac:95:6b:89:d8:f3:15:e7:24:c3:
         0c:d3:22:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----