Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3233322e302f32342d3234203d3e20313437303839.roa
File:                     3130332e3137332e3233322e302f32342d3234203d3e20313437303839.roa (raw, json)
Hash identifier:          E3LNPuN2Wg3tMVqctyc7xuRri0dnMkXX7ibce93/JSs=
Subject key identifier:   EB:9C:61:47:81:00:CB:DD:9B:60:16:7F:4C:19:3F:90:2D:63:00:11
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1CA97DDC82E6C5DBEB17D6FB5F5ABAF682355BB3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3233322e302f32342d3234203d3e20313437303839.roa
Signing time:             Wed 10 Nov 2021 09:10:01 +0000
ROA not before:           Wed 10 Nov 2021 09:05:01 +0000
ROA not after:            Thu 10 Nov 2022 09:10:01 +0000
asID:                     147089
IP address blocks:        103.173.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a9:7d:dc:82:e6:c5:db:eb:17:d6:fb:5f:5a:ba:f6:82:35:5b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 09:05:01 2021 GMT
            Not After : Nov 10 09:10:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8a:50:e5:7f:ac:5b:1a:a0:66:e2:70:a8:99:
                    e8:03:17:81:ba:a9:e7:4f:9a:51:ba:52:90:a1:8a:
                    5a:6a:26:a1:4e:55:30:14:53:25:f6:19:af:72:7a:
                    b2:c5:e4:17:30:9e:23:e2:ed:99:7f:ba:01:58:60:
                    e8:92:24:7b:c7:b5:ac:ce:94:a3:c0:51:75:af:12:
                    af:e2:d6:f8:a2:d7:aa:55:a3:21:c6:6d:06:85:ad:
                    e0:ad:45:0e:e9:7f:26:47:58:fd:81:f9:47:01:ba:
                    86:d9:05:49:70:e1:c2:78:25:b1:fb:d3:80:4f:68:
                    bd:1e:8c:35:8e:4e:5c:a1:0e:ac:c6:20:56:f7:4d:
                    76:e8:16:65:79:33:96:34:23:b2:4a:5e:00:0f:fb:
                    9a:d9:82:1c:e6:97:43:b5:d2:2d:c9:42:10:ce:e6:
                    5a:84:0e:5f:f3:ac:68:5d:8b:f0:81:a5:c7:98:62:
                    37:94:37:e5:22:71:9a:11:b4:71:3f:c5:c2:97:51:
                    7e:51:8b:aa:8f:59:0f:01:ab:0c:01:a8:8e:eb:15:
                    12:7d:7b:95:a0:5d:ac:c1:3d:0b:20:8a:a3:08:d0:
                    d1:84:5e:de:5f:da:b6:a2:69:1c:35:b4:e7:2c:2a:
                    cd:11:e7:73:39:22:b5:d5:e2:58:55:f8:3e:ca:56:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9C:61:47:81:00:CB:DD:9B:60:16:7F:4C:19:3F:90:2D:63:00:11
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3233322e302f32342d3234203d3e20313437303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:02:cf:84:8b:b5:58:b8:64:f8:c7:1c:31:f6:44:5c:41:33:
         5d:16:4c:43:ec:a1:d1:2e:e8:40:61:8a:a3:42:09:b3:86:d2:
         6d:58:9c:6c:19:44:4d:24:f6:1b:2d:93:4c:7b:0c:74:1b:11:
         5f:68:9f:06:18:f1:c0:e2:a4:ec:8a:91:37:b5:91:af:3c:40:
         af:f6:2c:dc:35:b1:f0:7a:c0:cf:68:97:b0:c9:39:3e:eb:ac:
         c1:8a:fc:44:2b:9f:80:ed:46:ac:13:3a:4a:b6:75:c4:cb:0e:
         8f:af:d7:c5:52:e0:c4:18:42:de:9b:51:6e:f6:29:88:b9:61:
         ac:11:86:c1:5e:b0:bb:77:d4:c4:bd:3d:c4:8c:ad:af:00:84:
         7b:b7:33:2a:84:1a:ec:f6:47:fd:82:8c:f5:9d:f0:ad:59:31:
         3b:12:e0:42:94:8e:66:0e:84:e3:71:f4:7c:19:a5:bf:96:4b:
         f7:9e:05:aa:16:c0:09:49:58:07:00:53:4c:21:04:e0:1c:77:
         ec:05:bb:a1:ca:77:b2:16:af:6b:27:b6:88:7e:be:8b:89:17:
         d1:6e:8b:2f:b0:c8:74:87:b9:8e:2e:ae:01:e8:02:ea:08:89:
         97:d2:ee:26:80:f8:da:5e:1c:fb:81:9c:23:42:46:af:77:9b:
         2a:aa:ac:dd
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUHKl93ILmxdvrF9b7X1q69oI1W7MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExMDA5MDUwMVoX
DTIyMTExMDA5MTAwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBGMDhBNTBFNTdGQUM1QjFBQTA2NkUyNzBBODk5RTgwMzE3ODFCQUE5RTc0
RjlBNTFCQTUyOTBBMThBNUE2QTI2QTE0RTU1MzAxNDUzMjVGNjE5QUY3MjdBQjJD
NUU0MTczMDlFMjNFMkVEOTk3RkJBMDE1ODYwRTg5MjI0N0JDN0I1QUNDRTk0QTND
MDUxNzVBRjEyQUZFMkQ2RjhBMkQ3QUE1NUEzMjFDNjZEMDY4NUFERTBBRDQ1MEVF
OTdGMjY0NzU4RkQ4MUY5NDcwMUJBODZEOTA1NDk3MEUxQzI3ODI1QjFGQkQzODA0
RjY4QkQxRThDMzU4RTRFNUNBMTBFQUNDNjIwNTZGNzRENzZFODE2NjU3OTMzOTYz
NDIzQjI0QTVFMDAwRkZCOUFEOTgyMUNFNjk3NDNCNUQyMkRDOTQyMTBDRUU2NUE4
NDBFNUZGM0FDNjg1RDhCRjA4MUE1Qzc5ODYyMzc5NDM3RTUyMjcxOUExMUI0NzEz
RkM1QzI5NzUxN0U1MThCQUE4RjU5MEYwMUFCMEMwMUE4OEVFQjE1MTI3RDdCOTVB
MDVEQUNDMTNEMEIyMDhBQTMwOEQwRDE4NDVFREU1RkRBQjZBMjY5MUMzNUI0RTcy
QzJBQ0QxMUU3NzMzOTIyQjVENUUyNTg1NUY4M0VDQTU2NEVCRjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwilDlf6xbGqBm4nComegD
F4G6qedPmlG6UpChilpqJqFOVTAUUyX2Ga9yerLF5BcwniPi7Zl/ugFYYOiSJHvH
tazOlKPAUXWvEq/i1vii16pVoyHGbQaFreCtRQ7pfyZHWP2B+UcBuobZBUlw4cJ4
JbH704BPaL0ejDWOTlyhDqzGIFb3TXboFmV5M5Y0I7JKXgAP+5rZghzml0O10i3J
QhDO5lqEDl/zrGhdi/CBpceYYjeUN+UicZoRtHE/xcKXUX5Ri6qPWQ8BqwwBqI7r
FRJ9e5WgXazBPQsgiqMI0NGEXt5f2raiaRw1tOcsKs0R53M5IrXV4lhV+D7KVk6/
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQU65xhR4EAy92bYBZ/TBk/kC1jABEwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNzMzMmUzMjMzMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnregwDQYJ
KoZIhvcNAQELBQADggEBAF4Cz4SLtVi4ZPjHHDH2RFxBM10WTEPsodEu6EBhiqNC
CbOG0m1YnGwZRE0k9hstk0x7DHQbEV9onwYY8cDipOyKkTe1ka88QK/2LNw1sfB6
wM9ol7DJOT7rrMGK/EQrn4DtRqwTOkq2dcTLDo+v18VS4MQYQt6bUW72KYi5YawR
hsFesLt31MS9PcSMra8AhHu3MyqEGuz2R/2CjPWd8K1ZMTsS4EKUjmYOhONx9HwZ
pb+WS/eeBaoWwAlJWAcAU0whBOAcd+wFu6HKd7IWr2sntoh+vouJF9Fuiy+wyHSH
uY4urgHoAuoIiZfS7iaA+NpeHPuBnCNCRq93myqqrN0=
-----END CERTIFICATE-----