Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e37342e302f32332d3234203d3e20313430343433.roa
File:                     3130332e3137332e37342e302f32332d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          /ycfgJGtr+rAOMc6M4uAWpBZB4LRqiVzkwJzZlvBW8E=
Subject key identifier:   EB:FE:2B:78:C3:ED:40:07:35:9E:3F:16:13:C0:4D:7A:76:F1:46:42
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0D295660EB94834C193146061CBF9EB688012D8E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e37342e302f32332d3234203d3e20313430343433.roa
Signing time:             Tue 21 Sep 2021 07:28:53 +0000
ROA not before:           Tue 21 Sep 2021 07:23:53 +0000
ROA not after:            Wed 21 Sep 2022 07:28:53 +0000
asID:                     140443
IP address blocks:        103.173.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:29:56:60:eb:94:83:4c:19:31:46:06:1c:bf:9e:b6:88:01:2d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 21 07:23:53 2021 GMT
            Not After : Sep 21 07:28:53 2022 GMT
        Subject: CN=3082010A0282010100B950ABAA742F1A92F5AD79DD0082BF8D17CAD71E9149170B2BED1C79DB5BDC22C301860BA0DC61579109A5944FD960CBB265ED0DEF3912A337C172771DE50C8D614E5D3F8FFF42D74334E8500F31C7F054E5B1AC559D45080E8192940B9486873E233634554B11A80B5685B80F9C235D2E915826B1CCD63A2142C0F9375452743F0689D6581698A1BD95744F673102620AF988C91079227CD9836ED86A548D32399466824D87660D42508F907916ADEF62E3D2A4C7F52FBFE6039C6C52025D2655F4EA8F33906B16AC0FB510C4571C133E73556F1D181ED738509CE20ADE9145B06BC664CD61038F0CCA3E39500278BA16D7B4D824F9DF1374714A074D0D13A50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:ab:aa:74:2f:1a:92:f5:ad:79:dd:00:82:
                    bf:8d:17:ca:d7:1e:91:49:17:0b:2b:ed:1c:79:db:
                    5b:dc:22:c3:01:86:0b:a0:dc:61:57:91:09:a5:94:
                    4f:d9:60:cb:b2:65:ed:0d:ef:39:12:a3:37:c1:72:
                    77:1d:e5:0c:8d:61:4e:5d:3f:8f:ff:42:d7:43:34:
                    e8:50:0f:31:c7:f0:54:e5:b1:ac:55:9d:45:08:0e:
                    81:92:94:0b:94:86:87:3e:23:36:34:55:4b:11:a8:
                    0b:56:85:b8:0f:9c:23:5d:2e:91:58:26:b1:cc:d6:
                    3a:21:42:c0:f9:37:54:52:74:3f:06:89:d6:58:16:
                    98:a1:bd:95:74:4f:67:31:02:62:0a:f9:88:c9:10:
                    79:22:7c:d9:83:6e:d8:6a:54:8d:32:39:94:66:82:
                    4d:87:66:0d:42:50:8f:90:79:16:ad:ef:62:e3:d2:
                    a4:c7:f5:2f:bf:e6:03:9c:6c:52:02:5d:26:55:f4:
                    ea:8f:33:90:6b:16:ac:0f:b5:10:c4:57:1c:13:3e:
                    73:55:6f:1d:18:1e:d7:38:50:9c:e2:0a:de:91:45:
                    b0:6b:c6:64:cd:61:03:8f:0c:ca:3e:39:50:02:78:
                    ba:16:d7:b4:d8:24:f9:df:13:74:71:4a:07:4d:0d:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:2B:78:C3:ED:40:07:35:9E:3F:16:13:C0:4D:7A:76:F1:46:42
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e37342e302f32332d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:c2:24:5c:10:90:58:1e:c4:29:2d:b0:22:a2:3c:27:62:
         17:b5:55:b5:54:53:11:a4:c5:a3:68:9c:e9:89:0b:ef:be:bb:
         75:f6:42:8b:60:9a:5d:86:f4:93:6a:2f:24:cd:23:52:8b:58:
         53:0e:cb:9c:8e:ad:27:e5:d7:cd:e9:01:ea:e5:8b:bf:1b:f9:
         26:f2:d5:60:53:51:af:11:ee:25:31:92:8d:b8:dc:b3:67:1d:
         8e:0e:d2:13:91:33:5b:59:f8:03:84:af:e5:3a:ba:c1:66:f5:
         77:45:02:29:b5:fb:5d:cf:92:85:ae:30:27:0c:29:bd:a7:c2:
         ff:08:6a:67:d5:f4:e8:92:44:a4:23:c5:5e:22:57:b3:15:52:
         5f:3d:b9:f3:5a:92:e1:61:fb:03:b7:1c:ee:03:08:d2:b5:26:
         04:75:ef:76:08:f4:2c:c6:06:56:2e:c4:30:ef:5a:82:e1:87:
         5d:04:7a:bd:b5:20:04:f4:54:98:eb:d4:25:2a:17:fd:b1:bf:
         e5:ae:f2:46:2a:ce:44:89:ad:42:7a:13:19:0a:ff:f3:4e:ea:
         5d:99:1f:03:cf:2b:2f:60:d3:f7:bb:25:85:83:d9:fa:e7:a6:
         dd:f7:99:f7:48:a6:36:5e:e4:e3:12:c7:2f:71:e6:7c:9a:c0:
         91:e5:7a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----