Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e33362e302f32332d3234203d3e20313437303734.roa
File:                     3130332e3137322e33362e302f32332d3234203d3e20313437303734.roa (raw, json)
Hash identifier:          688qRWJskYCW2EWn/aENOloddzUIAHc8bbLLlJNWHZ8=
Subject key identifier:   97:7B:1E:BE:4E:91:CC:0C:22:D6:47:C9:BC:FC:5C:DE:E9:53:53:1E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5483D605764A3F2372F98EC57396B105CB4F8042
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e33362e302f32332d3234203d3e20313437303734.roa
Signing time:             Mon 18 Oct 2021 03:57:21 +0000
ROA not before:           Mon 18 Oct 2021 03:52:21 +0000
ROA not after:            Tue 18 Oct 2022 03:57:21 +0000
asID:                     147074
IP address blocks:        103.172.36.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:83:d6:05:76:4a:3f:23:72:f9:8e:c5:73:96:b1:05:cb:4f:80:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 18 03:52:21 2021 GMT
            Not After : Oct 18 03:57:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:4f:2f:fa:cd:6c:94:f5:c1:7d:28:2c:65:
                    6a:37:a8:5d:7a:6a:71:d7:68:67:7c:90:5b:80:db:
                    d5:be:92:98:76:b3:bf:ec:28:3e:bd:b4:a1:ff:15:
                    43:7f:71:42:a9:71:0f:a6:d9:cd:2b:e1:c5:59:bc:
                    8d:ee:6d:0f:48:6a:f4:d8:a5:89:1a:24:98:bd:c6:
                    dd:18:fc:24:ee:14:ad:f6:5a:f2:97:54:e8:6e:08:
                    12:83:24:13:aa:92:0c:d2:71:f0:4d:3c:54:da:7d:
                    3a:4b:ea:56:27:d9:d8:2d:d9:12:91:2b:65:e1:fa:
                    77:d8:9a:50:53:63:2e:f1:b5:1a:97:b2:16:1c:91:
                    48:e6:b6:ed:4e:46:0c:73:fe:33:49:81:9d:f2:6e:
                    9c:a4:67:af:eb:92:d0:37:2a:26:ac:28:51:d7:39:
                    c4:44:8d:17:03:91:3f:81:3d:e7:18:90:4a:3b:de:
                    5b:e5:a4:f7:0a:4f:a4:0a:fe:73:92:fb:64:20:e3:
                    19:5c:d2:d7:43:2e:51:71:1f:43:17:7a:eb:3a:e2:
                    19:3b:e1:6a:00:0a:7a:e8:46:c2:19:a4:b6:cc:df:
                    e6:0e:2a:09:05:b3:f0:dd:c7:71:7b:1b:5e:02:e6:
                    02:b6:3e:a5:86:82:1d:72:83:74:4b:d0:66:14:26:
                    28:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7B:1E:BE:4E:91:CC:0C:22:D6:47:C9:BC:FC:5C:DE:E9:53:53:1E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e33362e302f32332d3234203d3e20313437303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:97:d8:a6:f2:25:6c:5d:a9:a1:3d:5b:10:39:2c:32:2d:72:
         9d:18:22:b6:39:ae:3d:16:19:1d:b9:6a:c2:b7:da:1f:15:22:
         4b:f2:75:23:9b:96:97:cb:57:fe:8a:15:d5:3b:d0:b1:89:2f:
         69:f6:fe:50:0d:1b:c7:ac:b7:cb:0d:5e:e8:7a:3a:b0:58:30:
         66:33:a2:da:d4:5f:cb:e9:53:0d:03:12:e1:f2:90:e8:3d:b1:
         d2:eb:09:18:19:b6:a1:93:e3:bd:5c:67:4d:f0:13:c8:91:1f:
         f4:df:f4:51:4a:00:62:e2:bb:dc:e1:9c:d2:7d:77:36:de:10:
         43:12:66:a4:af:68:b6:50:19:f9:c0:ad:e7:e3:d4:e5:64:c3:
         ca:77:80:06:b5:7b:06:85:6c:62:af:c1:89:1c:07:ea:12:f3:
         c6:a7:94:ef:4b:68:b8:0a:a1:b7:46:b8:a5:64:62:93:1f:72:
         d8:97:d0:d7:ab:eb:9f:df:76:9d:63:a6:c0:c9:b6:d1:b3:06:
         ea:c0:f6:6b:6f:6b:5b:28:f5:e4:ad:b3:55:a1:20:df:1e:ed:
         d7:13:42:f6:0f:64:6b:4c:e7:3a:19:1f:64:aa:b8:82:92:bf:
         9a:00:86:c0:3d:e4:a3:88:02:38:2b:1e:0e:2c:47:6e:41:a9:
         bf:5b:e6:bb
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUVIPWBXZKPyNy+Y7Fc5axBctPgEIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAxODAzNTIyMVoX
DTIyMTAxODAzNTcyMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBMTY5NEYyRkZBQ0Q2Qzk0RjVDMTdEMjgyQzY1NkEzN0E4NUQ3QTZBNzFE
NzY4Njc3QzkwNUI4MERCRDVCRTkyOTg3NkIzQkZFQzI4M0VCREI0QTFGRjE1NDM3
RjcxNDJBOTcxMEZBNkQ5Q0QyQkUxQzU1OUJDOERFRTZEMEY0ODZBRjREOEE1ODkx
QTI0OThCREM2REQxOEZDMjRFRTE0QURGNjVBRjI5NzU0RTg2RTA4MTI4MzI0MTNB
QTkyMENEMjcxRjA0RDNDNTREQTdEM0E0QkVBNTYyN0Q5RDgyREQ5MTI5MTJCNjVF
MUZBNzdEODlBNTA1MzYzMkVGMUI1MUE5N0IyMTYxQzkxNDhFNkI2RUQ0RTQ2MEM3
M0ZFMzM0OTgxOURGMjZFOUNBNDY3QUZFQjkyRDAzNzJBMjZBQzI4NTFENzM5QzQ0
NDhEMTcwMzkxM0Y4MTNERTcxODkwNEEzQkRFNUJFNUE0RjcwQTRGQTQwQUZFNzM5
MkZCNjQyMEUzMTk1Q0QyRDc0MzJFNTE3MTFGNDMxNzdBRUIzQUUyMTkzQkUxNkEw
MDBBN0FFODQ2QzIxOUE0QjZDQ0RGRTYwRTJBMDkwNUIzRjBEREM3NzE3QjFCNUUw
MkU2MDJCNjNFQTU4NjgyMUQ3MjgzNzQ0QkQwNjYxNDI2MjgzMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChaU8v+s1slPXBfSgsZWo3
qF16anHXaGd8kFuA29W+kph2s7/sKD69tKH/FUN/cUKpcQ+m2c0r4cVZvI3ubQ9I
avTYpYkaJJi9xt0Y/CTuFK32WvKXVOhuCBKDJBOqkgzScfBNPFTafTpL6lYn2dgt
2RKRK2Xh+nfYmlBTYy7xtRqXshYckUjmtu1ORgxz/jNJgZ3ybpykZ6/rktA3Kias
KFHXOcREjRcDkT+BPecYkEo73lvlpPcKT6QK/nOS+2Qg4xlc0tdDLlFxH0MXeus6
4hk74WoACnroRsIZpLbM3+YOKgkFs/Ddx3F7G14C5gK2PqWGgh1yg3RL0GYUJigz
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUl3sevk6RzAwi1kfJvPxc3ulTUx4wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNzMyMmUzMzM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6wkMA0GCSqG
SIb3DQEBCwUAA4IBAQBFl9im8iVsXamhPVsQOSwyLXKdGCK2Oa49FhkduWrCt9of
FSJL8nUjm5aXy1f+ihXVO9CxiS9p9v5QDRvHrLfLDV7oejqwWDBmM6La1F/L6VMN
AxLh8pDoPbHS6wkYGbahk+O9XGdN8BPIkR/03/RRSgBi4rvc4ZzSfXc23hBDEmak
r2i2UBn5wK3n49TlZMPKd4AGtXsGhWxir8GJHAfqEvPGp5TvS2i4CqG3RrilZGKT
H3LYl9DXq+uf33adY6bAybbRswbqwPZrb2tbKPXkrbNVoSDfHu3XE0L2D2RrTOc6
GR9kqriCkr+aAIbAPeSjiAI4Kx4OLEduQam/W+a7
-----END CERTIFICATE-----