Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3138322e302f32332d3234203d3e20313437313032.roa
File:                     3130332e3137342e3138322e302f32332d3234203d3e20313437313032.roa (raw, json)
Hash identifier:          5Yl9LWTY50V+UJc63aoXydcOOduw9SWaos9Xe91oSe0=
Subject key identifier:   47:92:B0:7C:3B:E7:C8:79:11:81:C4:48:E3:F4:93:56:85:72:D0:79
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       17E97693F51D4BD529BBC471D17CF8FE182FE30E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3138322e302f32332d3234203d3e20313437313032.roa
Signing time:             Fri 29 Oct 2021 07:29:57 +0000
ROA not before:           Fri 29 Oct 2021 07:24:57 +0000
ROA not after:            Sat 29 Oct 2022 07:29:57 +0000
asID:                     147102
IP address blocks:        103.174.182.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e9:76:93:f5:1d:4b:d5:29:bb:c4:71:d1:7c:f8:fe:18:2f:e3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 29 07:24:57 2021 GMT
            Not After : Oct 29 07:29:57 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:14:55:f6:64:96:c8:67:47:65:ba:03:69:
                    04:39:5f:31:53:52:f7:df:7c:3d:3a:70:89:c3:d7:
                    7c:26:0e:97:e3:e4:40:74:4e:f0:1a:c5:d6:5a:79:
                    b8:56:91:e6:cb:b5:ed:14:8d:b0:c7:f8:58:79:51:
                    17:a5:5b:9f:04:02:1a:39:23:a2:9d:f5:8f:3a:95:
                    e0:d3:27:ba:33:d3:b6:10:e2:ef:a1:24:8e:b3:b0:
                    37:b9:47:79:17:5e:b9:c8:d3:b1:73:f4:5c:73:c7:
                    f3:35:49:50:bc:8a:bb:0d:81:2b:3a:29:75:cf:8e:
                    e2:f3:df:fe:d7:02:c1:f4:bb:30:ca:7d:a0:54:00:
                    8e:02:68:a6:67:1d:7d:eb:79:a9:ea:ae:c0:c8:06:
                    52:08:fb:c2:36:4f:86:5a:cf:12:8f:f9:64:d9:c8:
                    ac:fc:4b:dc:ff:1e:bc:c0:9e:c8:a4:d3:4e:4c:da:
                    39:29:23:b8:ad:4e:99:66:68:dd:08:1b:3d:10:be:
                    d3:d9:5e:55:26:34:c6:4c:57:f3:4e:3a:85:06:c3:
                    a6:b0:24:cf:4b:37:7c:43:66:17:dd:b3:71:3b:ef:
                    94:2f:78:39:35:ad:25:14:3d:71:63:ac:1b:fc:6f:
                    46:35:73:d6:91:1c:38:0b:37:62:c4:d8:ef:b8:bf:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:92:B0:7C:3B:E7:C8:79:11:81:C4:48:E3:F4:93:56:85:72:D0:79
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3138322e302f32332d3234203d3e20313437313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:17:d3:87:9a:63:b6:95:3c:93:c4:47:25:8e:a2:6c:9e:3e:
         a2:05:07:3a:dd:60:bf:d1:2d:da:6a:53:cd:8f:cb:c7:b9:73:
         e5:e5:10:a5:54:43:f9:e6:2d:6c:33:3a:f4:4d:60:93:58:be:
         8b:8f:6b:a0:e7:0e:59:2a:45:61:2e:15:ad:e4:9d:49:62:91:
         64:66:cb:9b:3d:93:3e:53:b1:74:db:81:de:49:71:58:6b:3d:
         c7:02:50:8c:e9:cf:4b:89:f3:55:3f:61:f3:5e:84:3b:04:b9:
         0d:9c:bb:bc:de:11:48:28:3a:bd:a8:99:5f:17:ec:3c:e3:8b:
         04:f3:0d:69:56:18:26:ed:44:14:e3:0c:7f:86:14:03:9b:1a:
         b5:4b:f4:a5:5c:dd:4b:3c:62:d1:58:79:86:2c:ed:18:a5:b6:
         81:2c:6d:99:95:68:67:f1:45:67:88:25:12:ba:35:f1:c2:8d:
         c8:8b:8e:dc:1b:ea:3a:b5:97:41:db:95:d9:b3:d6:01:78:4f:
         4d:aa:05:f9:6c:10:ca:50:3e:7e:74:13:d5:52:b7:07:a6:2b:
         77:9f:4b:89:8f:53:f1:d0:74:19:40:d6:10:a4:01:bb:84:39:
         38:78:10:2e:ea:a7:14:31:f6:ea:3e:4f:b3:e4:6d:6e:bb:79:
         d2:82:b9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----