Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e3234382e302f32332d3234203d3e203538333639.roa
File:                     3130332e3137322e3234382e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          fkx/WSDWzp1naldhiJ7cIEWNL1bAcb9kFjJLIvJ3Igc=
Subject key identifier:   8B:03:3A:7F:D6:2D:E5:D7:92:B1:E0:FA:F9:AD:64:8E:C9:86:26:B1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6618D785D59A314E87B542C886B1FA9152639B3F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e3234382e302f32332d3234203d3e203538333639.roa
Signing time:             Tue 30 Nov 2021 08:33:02 +0000
ROA not before:           Tue 30 Nov 2021 08:28:02 +0000
ROA not after:            Wed 30 Nov 2022 08:33:02 +0000
asID:                     58369
IP address blocks:        103.172.248.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:18:d7:85:d5:9a:31:4e:87:b5:42:c8:86:b1:fa:91:52:63:9b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 30 08:28:02 2021 GMT
            Not After : Nov 30 08:33:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:aa:23:5d:e9:7c:e7:a0:30:36:d7:87:e7:
                    5a:04:51:b3:e5:20:1b:09:91:7b:14:ff:26:bc:08:
                    94:9d:57:95:9d:fd:80:b5:90:03:9a:6d:d9:d8:73:
                    0b:5c:fd:00:20:f0:a0:7d:2b:1b:a2:8e:0a:cc:ea:
                    22:e6:8e:1d:97:92:34:5c:65:70:f1:cc:32:34:ef:
                    66:f4:5d:df:c0:9d:5e:a2:4e:55:52:9a:4a:99:9d:
                    b3:5d:37:14:dc:c4:8d:77:af:90:0f:98:59:ad:3a:
                    46:fc:2e:68:ed:18:67:e6:13:48:28:9c:aa:0c:8c:
                    8c:8f:e6:a0:05:84:00:52:f4:48:b7:65:91:88:ba:
                    7f:75:41:aa:26:52:b1:fd:2e:31:5e:f3:84:39:f6:
                    57:66:44:3a:15:73:55:d0:66:eb:a7:33:2e:bd:ce:
                    1f:41:76:e0:e7:ed:9d:47:a4:58:e5:a3:50:2f:0d:
                    9b:5c:8b:c6:fe:6a:f2:aa:b5:ce:be:46:d3:f7:93:
                    9c:bb:0c:9c:5c:0a:2f:d8:0a:d3:a1:54:40:01:e4:
                    72:c0:1e:c9:ca:0e:61:ea:e6:cd:cd:0d:fe:1b:53:
                    db:11:20:02:0f:4d:80:cf:56:ec:1a:6f:a0:18:43:
                    29:1a:ca:7d:8a:21:a9:76:f9:7b:a0:a4:31:21:b4:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:03:3A:7F:D6:2D:E5:D7:92:B1:E0:FA:F9:AD:64:8E:C9:86:26:B1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e3234382e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:50:ea:9a:eb:d6:34:12:fb:5c:a8:3f:17:28:10:5b:56:11:
         7d:e0:d4:1b:5a:6b:3f:f9:ee:18:f1:97:04:79:3a:37:76:c1:
         a6:1f:87:5b:4c:b2:94:85:21:71:c4:b4:33:2e:45:f8:2a:be:
         9f:f6:1c:58:85:57:76:4e:f1:c6:c8:29:18:2c:e8:ec:d0:3b:
         49:44:62:cc:27:61:67:f2:7c:d5:e4:0a:c1:aa:4d:ae:95:9e:
         7c:d0:bb:8b:61:a4:61:76:e9:09:8f:53:e0:7e:b7:f8:2b:db:
         ff:e0:76:e2:5e:e5:cc:42:4e:98:0e:e5:54:94:17:7e:34:f7:
         fb:2e:ff:ad:2a:bc:a9:03:2f:3d:cf:85:0c:1c:c4:d5:32:f7:
         fe:b5:98:81:f5:0b:96:31:0b:cc:39:07:d5:a7:c6:39:4b:1a:
         65:e3:c5:de:fb:73:bb:d0:85:6b:ac:6a:6a:9f:b6:e3:19:29:
         02:af:c7:68:c3:28:98:43:8f:51:e2:b5:bc:b7:84:e9:ea:62:
         2e:e0:a3:55:51:5f:3b:73:38:ab:84:e9:7b:f2:6b:22:31:0a:
         12:7d:e1:f5:00:7a:4e:af:30:b0:1e:d5:99:35:ca:4f:f0:52:
         60:df:0c:c9:63:79:89:cb:4e:6b:23:91:1b:2c:b0:18:e9:56:
         5e:7c:97:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----