Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa
File:                     3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (raw, json)
Hash identifier:          G8jCO6g4vK7AAxe8Vyw4s2tfAM00Dpx+ndUSJndLIxY=
Subject key identifier:   22:8A:C6:EB:00:CA:47:D3:7E:AE:C5:6F:F2:4E:FE:6E:B6:9C:E0:CE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1C9F2608809DE48A6EA9FFFCB0F7D2A860EF7DE9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa
Signing time:             Wed 29 Dec 2021 06:47:21 +0000
ROA not before:           Wed 29 Dec 2021 06:42:21 +0000
ROA not after:            Thu 29 Dec 2022 06:47:21 +0000
asID:                     147088
IP address blocks:        103.172.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9f:26:08:80:9d:e4:8a:6e:a9:ff:fc:b0:f7:d2:a8:60:ef:7d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 29 06:42:21 2021 GMT
            Not After : Dec 29 06:47:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:d6:10:1c:fe:af:2b:a8:32:77:b2:c0:d9:
                    c3:c3:04:4d:11:55:69:29:8c:24:de:7b:8a:78:98:
                    41:d7:89:87:fd:fb:8f:b7:a3:d1:fa:ce:97:cc:b6:
                    21:39:f8:bc:08:09:77:75:13:8c:67:77:5e:0c:64:
                    ae:f8:22:ec:74:f9:9e:7d:37:55:31:bd:8d:99:8c:
                    0a:18:bb:26:0f:46:c1:a7:a8:1b:1a:04:fc:40:c5:
                    6f:31:3d:42:90:f0:6f:cf:30:0b:12:dc:4c:10:20:
                    99:d8:aa:cb:7f:c1:3b:8e:aa:c3:a7:de:5f:f1:86:
                    0b:e4:a8:a7:5f:c3:71:0a:6c:30:80:ee:24:a7:31:
                    33:11:a2:59:df:4b:9d:42:cb:5e:81:b4:29:cb:8b:
                    b6:6b:67:12:fd:f6:a1:4e:79:96:70:9d:be:a5:49:
                    5a:68:e0:b4:96:d7:70:f4:af:25:e4:f3:ab:ba:75:
                    6b:f6:13:68:99:4a:2b:66:3f:5b:7b:6c:75:ed:e4:
                    ae:4f:4c:59:63:28:7e:3b:be:de:cd:33:d2:ed:c8:
                    7c:c5:41:ca:0e:86:49:d0:16:80:47:a4:79:f2:6a:
                    c4:fc:e8:d8:4d:48:67:5a:5d:62:3a:0f:ea:6d:a0:
                    2d:94:38:67:bc:3b:da:99:d3:33:c9:7b:78:6f:9a:
                    f4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8A:C6:EB:00:CA:47:D3:7E:AE:C5:6F:F2:4E:FE:6E:B6:9C:E0:CE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:6c:d9:8a:28:bb:f5:b9:a2:ac:4a:a3:fd:90:af:7d:f6:d0:
         8d:2a:3a:de:e4:90:de:46:93:ae:62:f2:37:01:82:b4:6a:c9:
         f9:b6:fa:07:fb:f9:28:c7:58:30:35:70:4e:c0:ad:1a:58:ba:
         a2:97:1a:c9:3c:23:15:dd:ae:ef:5c:ef:55:69:16:ad:1d:8c:
         cc:1b:ce:38:01:23:71:f2:18:ab:60:e7:5b:b3:04:16:8d:b8:
         09:8b:14:fe:5f:d0:7f:71:85:ef:3e:6e:ad:f9:19:8b:5a:e4:
         4a:1c:a6:c4:fe:4d:56:5b:e9:9f:66:ea:66:c1:37:05:b2:57:
         7e:0b:31:5f:3f:35:69:ed:5a:04:96:11:e4:c0:6d:40:16:29:
         56:75:71:8a:db:e1:85:a0:4e:e1:c3:ec:e4:6f:3b:d0:c8:b1:
         0d:3d:19:b1:ae:89:6b:6e:ca:49:61:41:f7:aa:f9:a7:d2:61:
         1a:6d:f2:eb:3f:70:61:5c:60:10:61:f1:e3:ea:5b:4d:11:87:
         d7:0b:48:9d:e9:5d:97:f7:84:d2:4a:17:6e:82:d2:94:b3:5b:
         95:4a:ce:e3:70:0f:23:8e:77:13:23:25:01:fe:3a:bb:8a:8a:
         4f:70:c3:86:f7:20:4a:6e:40:91:5b:1a:d8:d5:6a:60:18:2d:
         33:e8:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----