Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e34362e302f32332d3234203d3e20313437313039.roa
File:                     3130332e3137352e34362e302f32332d3234203d3e20313437313039.roa (raw, json)
Hash identifier:          BmuBzyQrMfFrEPjioEO8JlPZP9cV/mMKHZ8xOXpy0I8=
Subject key identifier:   B0:00:73:BE:79:0F:85:17:62:0E:CB:4E:91:74:2C:B8:EE:54:22:BE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       42663E7E22B95B3A5F07A84A490090301BD03DAC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e34362e302f32332d3234203d3e20313437313039.roa
Signing time:             Mon 15 Nov 2021 03:56:11 +0000
ROA not before:           Mon 15 Nov 2021 03:51:11 +0000
ROA not after:            Tue 15 Nov 2022 03:56:11 +0000
asID:                     147109
IP address blocks:        103.175.46.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:66:3e:7e:22:b9:5b:3a:5f:07:a8:4a:49:00:90:30:1b:d0:3d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 15 03:51:11 2021 GMT
            Not After : Nov 15 03:56:11 2022 GMT
        Subject: CN=3082010A0282010100CF8F472B4943A906F06E3C7B6541EC2E61F5BB98CFDC7501C97C3BF2EDA21568A5CFC09E324DC91B05BA19027E8ABBA69748FD927B8FDAA4C2172A1AF607EC5BDFB7C5CC5FD16CB9CEA3A8414879F621E06C75812D736168C05783B72FE70ECFD492A68AF3A19BFA8C39E7108F2F20A7991ED643D1F4083E89DDA31A841D8CD448D5BB814CAEB31D0FAF87A7BE8BD46F9A91D2CDC86F54FE1943C9C28A240F56B9E1F3385C57808939131EA59C57956FB61FA596B3CA64B1ECD320454DED68B7118088558B2E375B30C9B76C30B0C5CCAF98C6582E343E6E2839156897472E31AA387A4A01C097580F6DFD502C16D463C974F20A9819CA6EFF8FC9229A6CD4150203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:47:2b:49:43:a9:06:f0:6e:3c:7b:65:41:
                    ec:2e:61:f5:bb:98:cf:dc:75:01:c9:7c:3b:f2:ed:
                    a2:15:68:a5:cf:c0:9e:32:4d:c9:1b:05:ba:19:02:
                    7e:8a:bb:a6:97:48:fd:92:7b:8f:da:a4:c2:17:2a:
                    1a:f6:07:ec:5b:df:b7:c5:cc:5f:d1:6c:b9:ce:a3:
                    a8:41:48:79:f6:21:e0:6c:75:81:2d:73:61:68:c0:
                    57:83:b7:2f:e7:0e:cf:d4:92:a6:8a:f3:a1:9b:fa:
                    8c:39:e7:10:8f:2f:20:a7:99:1e:d6:43:d1:f4:08:
                    3e:89:dd:a3:1a:84:1d:8c:d4:48:d5:bb:81:4c:ae:
                    b3:1d:0f:af:87:a7:be:8b:d4:6f:9a:91:d2:cd:c8:
                    6f:54:fe:19:43:c9:c2:8a:24:0f:56:b9:e1:f3:38:
                    5c:57:80:89:39:13:1e:a5:9c:57:95:6f:b6:1f:a5:
                    96:b3:ca:64:b1:ec:d3:20:45:4d:ed:68:b7:11:80:
                    88:55:8b:2e:37:5b:30:c9:b7:6c:30:b0:c5:cc:af:
                    98:c6:58:2e:34:3e:6e:28:39:15:68:97:47:2e:31:
                    aa:38:7a:4a:01:c0:97:58:0f:6d:fd:50:2c:16:d4:
                    63:c9:74:f2:0a:98:19:ca:6e:ff:8f:c9:22:9a:6c:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:00:73:BE:79:0F:85:17:62:0E:CB:4E:91:74:2C:B8:EE:54:22:BE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e34362e302f32332d3234203d3e20313437313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:c1:ce:45:5f:d7:88:d7:4e:9d:20:2e:d3:dc:f7:59:29:3d:
         2f:2f:1c:da:17:e2:ef:25:ba:2b:7a:ee:e8:92:46:de:3b:84:
         f0:73:b8:d7:2b:60:cd:4f:9d:f7:ef:55:73:87:a6:ce:6f:08:
         f3:28:f5:18:d5:0d:a6:d0:6a:b2:b0:94:e6:d4:9b:28:ad:75:
         29:c2:4a:9f:d7:cd:fd:c0:26:c1:58:9d:73:e1:6a:6f:a9:14:
         01:49:e0:3b:9f:83:e9:dc:7c:8a:4e:7f:82:a9:f5:49:17:3e:
         ed:aa:eb:10:16:46:52:51:66:12:e4:1a:fa:0d:d6:70:42:65:
         48:04:da:08:2f:c6:51:7d:8d:2e:10:fb:0d:5e:0a:11:98:4e:
         8b:fc:95:98:dc:e4:69:85:2d:73:c4:49:63:39:80:92:b0:d5:
         66:c6:f6:e2:38:b9:2e:0c:25:74:a6:8d:5c:43:b9:6a:31:6f:
         c7:8c:78:0f:72:84:ea:58:8c:a0:1b:8e:e0:9a:f7:e9:7e:65:
         fe:af:e8:d9:49:9f:f0:8f:f5:10:c9:d9:0d:77:2e:03:6c:0d:
         42:3f:f8:60:a8:d9:a3:c1:57:cc:f2:44:40:50:b9:57:bf:65:
         bf:9a:77:3f:14:70:0b:cc:d6:50:4f:25:c8:3a:61:ec:f1:af:
         1d:b6:57:cd
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUQmY+fiK5WzpfB6hKSQCQMBvQPawwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExNTAzNTExMVoX
DTIyMTExNTAzNTYxMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDRjhGNDcyQjQ5NDNBOTA2RjA2RTNDN0I2NTQxRUMyRTYxRjVCQjk4Q0ZE
Qzc1MDFDOTdDM0JGMkVEQTIxNTY4QTVDRkMwOUUzMjREQzkxQjA1QkExOTAyN0U4
QUJCQTY5NzQ4RkQ5MjdCOEZEQUE0QzIxNzJBMUFGNjA3RUM1QkRGQjdDNUNDNUZE
MTZDQjlDRUEzQTg0MTQ4NzlGNjIxRTA2Qzc1ODEyRDczNjE2OEMwNTc4M0I3MkZF
NzBFQ0ZENDkyQTY4QUYzQTE5QkZBOEMzOUU3MTA4RjJGMjBBNzk5MUVENjQzRDFG
NDA4M0U4OUREQTMxQTg0MUQ4Q0Q0NDhENUJCODE0Q0FFQjMxRDBGQUY4N0E3QkU4
QkQ0NkY5QTkxRDJDREM4NkY1NEZFMTk0M0M5QzI4QTI0MEY1NkI5RTFGMzM4NUM1
NzgwODkzOTEzMUVBNTlDNTc5NTZGQjYxRkE1OTZCM0NBNjRCMUVDRDMyMDQ1NERF
RDY4QjcxMTgwODg1NThCMkUzNzVCMzBDOUI3NkMzMEIwQzVDQ0FGOThDNjU4MkUz
NDNFNkUyODM5MTU2ODk3NDcyRTMxQUEzODdBNEEwMUMwOTc1ODBGNkRGRDUwMkMx
NkQ0NjNDOTc0RjIwQTk4MTlDQTZFRkY4RkM5MjI5QTZDRDQxNTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPj0crSUOpBvBuPHtlQewu
YfW7mM/cdQHJfDvy7aIVaKXPwJ4yTckbBboZAn6Ku6aXSP2Se4/apMIXKhr2B+xb
37fFzF/RbLnOo6hBSHn2IeBsdYEtc2FowFeDty/nDs/UkqaK86Gb+ow55xCPLyCn
mR7WQ9H0CD6J3aMahB2M1EjVu4FMrrMdD6+Hp76L1G+akdLNyG9U/hlDycKKJA9W
ueHzOFxXgIk5Ex6lnFeVb7YfpZazymSx7NMgRU3taLcRgIhViy43WzDJt2wwsMXM
r5jGWC40Pm4oORVol0cuMao4ekoBwJdYD239UCwW1GPJdPIKmBnKbv+PySKabNQV
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUsABzvnkPhRdiDstOkXQsuO5UIr4wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNzM1MmUzNDM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ68uMA0GCSqG
SIb3DQEBCwUAA4IBAQBBwc5FX9eI106dIC7T3PdZKT0vLxzaF+LvJboreu7okkbe
O4Twc7jXK2DNT53371Vzh6bObwjzKPUY1Q2m0GqysJTm1JsorXUpwkqf1839wCbB
WJ1z4WpvqRQBSeA7n4Pp3HyKTn+CqfVJFz7tqusQFkZSUWYS5Br6DdZwQmVIBNoI
L8ZRfY0uEPsNXgoRmE6L/JWY3ORphS1zxEljOYCSsNVmxvbiOLkuDCV0po1cQ7lq
MW/HjHgPcoTqWIygG47gmvfpfmX+r+jZSZ/wj/UQydkNdy4DbA1CP/hgqNmjwVfM
8kRAULlXv2W/mnc/FHALzNZQTyXIOmHs8a8dtlfN
-----END CERTIFICATE-----