Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3233362e302f32332d3234203d3e20313437313036.roa
File:                     3130332e3137342e3233362e302f32332d3234203d3e20313437313036.roa (raw, json)
Hash identifier:          XZce9+L3zmQsq6wQINkm/7Y3I3FCP1zm4YUK0u4kStw=
Subject key identifier:   AE:E5:62:E5:A3:32:D3:30:8A:4C:C0:49:DF:C0:94:B3:01:3D:DD:A1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       78430C00314A24EDC12306D075E3F2A4E5640B4E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3233362e302f32332d3234203d3e20313437313036.roa
Signing time:             Wed 12 Jan 2022 06:20:26 +0000
ROA not before:           Wed 12 Jan 2022 06:15:26 +0000
ROA not after:            Thu 12 Jan 2023 06:20:26 +0000
asID:                     147106
IP address blocks:        103.174.236.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:43:0c:00:31:4a:24:ed:c1:23:06:d0:75:e3:f2:a4:e5:64:0b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 12 06:15:26 2022 GMT
            Not After : Jan 12 06:20:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:61:af:c5:70:a1:be:ee:4e:76:36:44:28:63:
                    bf:8a:cf:e6:15:d0:4e:c4:47:98:55:36:9c:c6:a7:
                    a8:d6:03:e8:49:c4:c7:97:29:0e:83:f2:8d:f8:8c:
                    35:aa:8a:43:f5:f2:7f:50:39:93:86:01:5e:41:a2:
                    ea:1a:3d:05:ce:2c:09:68:dc:b1:a0:81:8e:dd:59:
                    4b:c6:4e:52:24:3f:c6:de:f0:63:27:42:fc:92:59:
                    01:45:ce:17:6a:c0:ed:8c:29:eb:09:c9:95:49:f0:
                    eb:08:3a:58:72:39:36:17:fa:b0:77:7a:06:9a:a2:
                    d3:ca:4e:c8:23:37:d0:25:d0:5f:d2:82:ca:96:db:
                    4c:c9:f8:ee:e4:6d:cf:c0:47:f0:61:46:fc:72:a1:
                    ac:16:9c:c3:ad:f7:ea:20:07:b3:76:d3:1c:03:fe:
                    0d:f3:0f:b9:01:67:a1:ae:9f:fa:8d:9d:49:f9:00:
                    d8:fa:ae:db:64:c3:18:c3:32:38:3d:10:f0:54:39:
                    1b:ed:9f:44:ae:43:27:44:88:f1:8c:ab:2d:db:53:
                    a8:df:2c:16:bf:62:cf:5e:3e:ea:52:54:05:b6:5f:
                    f7:92:3a:57:43:70:49:36:bf:25:4a:88:8f:85:1c:
                    b2:82:ca:bd:f2:ef:9b:44:10:03:1e:8b:00:ff:35:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E5:62:E5:A3:32:D3:30:8A:4C:C0:49:DF:C0:94:B3:01:3D:DD:A1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3233362e302f32332d3234203d3e20313437313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:48:0e:d1:8c:e0:02:ac:98:51:af:2d:c7:e7:46:6f:e5:65:
         4e:58:2b:1c:86:6f:99:bc:ef:c5:df:50:7e:b7:b2:40:4a:ea:
         25:52:7c:0f:56:9a:4b:0c:da:8b:e3:19:da:96:c4:c7:60:77:
         06:82:4b:c0:10:bb:53:e4:f9:49:29:67:78:de:49:04:94:69:
         25:a4:42:1a:ff:00:fe:ec:da:61:57:52:e7:58:a2:9a:bd:ba:
         8c:6e:11:d3:35:91:99:80:69:48:c3:56:46:1c:3e:58:21:10:
         33:3c:8b:34:df:ba:10:f3:a7:a7:98:c1:a1:59:39:41:7d:71:
         dd:f6:b7:55:f0:43:41:d4:76:fc:7e:35:19:a1:63:9c:2f:43:
         8f:1b:40:0c:83:10:c3:2d:85:a0:9a:d0:81:d7:62:99:38:39:
         dd:b1:28:a6:35:1e:ea:5a:1f:75:7a:ae:8f:ed:2f:ef:15:27:
         83:3e:fe:7c:5e:e4:23:d4:71:9f:53:1d:61:02:00:58:6e:5e:
         3d:15:9a:83:4d:e9:22:8f:3a:c5:73:d1:f5:75:7e:e7:5e:42:
         a1:86:94:58:3d:04:5e:02:72:64:0c:33:b7:5d:b0:03:4f:20:
         24:6e:1e:3e:20:e7:54:4d:58:08:16:06:02:5a:d0:10:40:63:
         ea:35:60:22
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUeEMMADFKJO3BIwbQdePypOVkC04wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDExMjA2MTUyNloX
DTIzMDExMjA2MjAyNlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMTYxQUZDNTcwQTFCRUVFNEU3NjM2NDQyODYzQkY4QUNGRTYxNUQwNEVD
NDQ3OTg1NTM2OUNDNkE3QThENjAzRTg0OUM0Qzc5NzI5MEU4M0YyOERGODhDMzVB
QThBNDNGNUYyN0Y1MDM5OTM4NjAxNUU0MUEyRUExQTNEMDVDRTJDMDk2OERDQjFB
MDgxOEVERDU5NEJDNjRFNTIyNDNGQzZERUYwNjMyNzQyRkM5MjU5MDE0NUNFMTc2
QUMwRUQ4QzI5RUIwOUM5OTU0OUYwRUIwODNBNTg3MjM5MzYxN0ZBQjA3NzdBMDY5
QUEyRDNDQTRFQzgyMzM3RDAyNUQwNUZEMjgyQ0E5NkRCNENDOUY4RUVFNDZEQ0ZD
MDQ3RjA2MTQ2RkM3MkExQUMxNjlDQzNBREY3RUEyMDA3QjM3NkQzMUMwM0ZFMERG
MzBGQjkwMTY3QTFBRTlGRkE4RDlENDlGOTAwRDhGQUFFREI2NEMzMThDMzMyMzgz
RDEwRjA1NDM5MUJFRDlGNDRBRTQzMjc0NDg4RjE4Q0FCMkREQjUzQThERjJDMTZC
RjYyQ0Y1RTNFRUE1MjU0MDVCNjVGRjc5MjNBNTc0MzcwNDkzNkJGMjU0QTg4OEY4
NTFDQjI4MkNBQkRGMkVGOUI0NDEwMDMxRThCMDBGRjM1MDM4RDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYa/FcKG+7k52NkQoY7+K
z+YV0E7ER5hVNpzGp6jWA+hJxMeXKQ6D8o34jDWqikP18n9QOZOGAV5BouoaPQXO
LAlo3LGggY7dWUvGTlIkP8be8GMnQvySWQFFzhdqwO2MKesJyZVJ8OsIOlhyOTYX
+rB3egaaotPKTsgjN9Al0F/SgsqW20zJ+O7kbc/AR/BhRvxyoawWnMOt9+ogB7N2
0xwD/g3zD7kBZ6Gun/qNnUn5ANj6rttkwxjDMjg9EPBUORvtn0SuQydEiPGMqy3b
U6jfLBa/Ys9ePupSVAW2X/eSOldDcEk2vyVKiI+FHLKCyr3y75tEEAMeiwD/NQON
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUruVi5aMy0zCKTMBJ38CUswE93aEwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNzM0MmUzMjMzMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzczMTMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnruwwDQYJ
KoZIhvcNAQELBQADggEBAFtIDtGM4AKsmFGvLcfnRm/lZU5YKxyGb5m878XfUH63
skBK6iVSfA9WmksM2ovjGdqWxMdgdwaCS8AQu1Pk+UkpZ3jeSQSUaSWkQhr/AP7s
2mFXUudYopq9uoxuEdM1kZmAaUjDVkYcPlghEDM8izTfuhDzp6eYwaFZOUF9cd32
t1XwQ0HUdvx+NRmhY5wvQ48bQAyDEMMthaCa0IHXYpk4Od2xKKY1HupaH3V6ro/t
L+8VJ4M+/nxe5CPUcZ9THWECAFhuXj0VmoNN6SKPOsVz0fV1fudeQqGGlFg9BF4C
cmQMM7ddsANPICRuHj4g51RNWAgWBgJa0BBAY+o1YCI=
-----END CERTIFICATE-----