Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e33302e302f32332d3234203d3e203539313334.roa
File:                     3130332e3137392e33302e302f32332d3234203d3e203539313334.roa (raw, json)
Hash identifier:          3BSCzAAqwcxTD13ynHV3OTa9pFrPJWQcl1XSlpYaKBc=
Subject key identifier:   64:AB:82:1A:31:63:A1:0D:8C:5F:8B:FD:04:6E:1C:3B:7C:0D:FA:D3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3E8239FD71758EF864B6F16FE9260F25A3E9254C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e33302e302f32332d3234203d3e203539313334.roa
Signing time:             Mon 10 Jan 2022 07:02:43 +0000
ROA not before:           Mon 10 Jan 2022 06:57:43 +0000
ROA not after:            Tue 10 Jan 2023 07:02:43 +0000
asID:                     59134
IP address blocks:        103.179.30.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:82:39:fd:71:75:8e:f8:64:b6:f1:6f:e9:26:0f:25:a3:e9:25:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 10 06:57:43 2022 GMT
            Not After : Jan 10 07:02:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:b1:3f:24:17:7c:fc:5b:94:7e:be:63:90:
                    e5:29:a7:46:05:01:e3:dc:51:4a:fd:84:0a:77:78:
                    ed:98:32:4a:53:7e:6b:01:d2:1a:33:d3:b5:68:39:
                    5a:14:25:96:0f:ae:c1:a5:d0:da:1f:37:bd:30:0f:
                    94:bf:19:13:32:31:3b:eb:25:e5:0d:2f:a7:bb:04:
                    82:b4:75:93:d8:26:f3:6c:e1:7b:55:25:21:dd:5b:
                    cd:c3:a1:4b:7a:a5:61:24:3a:4a:cc:10:0e:da:0f:
                    f2:c1:56:4e:75:56:cd:7f:fd:20:d6:7a:63:0b:13:
                    95:a5:70:15:94:ae:46:97:64:62:96:d8:1a:6f:40:
                    66:c9:6e:a8:48:77:ca:bf:46:52:4a:0e:67:8b:b2:
                    ae:f1:76:f4:6a:a9:9f:55:7a:80:d5:47:a0:0f:d7:
                    f0:2f:0e:47:2a:d8:7f:86:07:f4:7e:b6:da:a6:e9:
                    9d:20:7d:3e:10:fa:62:84:b7:38:e3:e3:cd:2d:fc:
                    a1:c5:06:fd:33:2e:cd:15:ef:30:a0:e9:5c:60:23:
                    76:d5:b6:cd:c7:6c:bc:97:c0:f7:d9:4c:67:ca:95:
                    5f:dd:64:2f:22:38:4c:06:e7:da:8b:ad:92:45:73:
                    ed:7c:cd:02:e4:db:8d:63:1a:b2:32:66:01:c0:dd:
                    1d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AB:82:1A:31:63:A1:0D:8C:5F:8B:FD:04:6E:1C:3B:7C:0D:FA:D3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e33302e302f32332d3234203d3e203539313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:f8:b5:6d:8c:58:95:c4:c9:c2:be:63:2e:af:2a:a4:84:1c:
         8b:10:87:1f:b7:6f:e4:70:ae:8f:40:72:c6:50:ab:26:6a:5d:
         08:25:4f:3d:ab:4a:e5:36:e2:01:c4:36:ef:68:77:05:95:0a:
         58:fc:cb:c5:11:44:fa:20:76:36:6d:69:97:ec:31:ee:50:42:
         bb:0e:2b:4b:0d:61:ef:e9:17:9d:fd:69:d4:92:1b:08:0e:af:
         95:15:94:5b:1c:a0:f6:80:df:c9:b3:41:d8:9c:22:63:35:ec:
         e8:df:81:ec:ac:d0:38:96:04:9f:e3:38:71:5a:6f:f7:9b:e4:
         ce:e3:e3:1f:8a:1a:fd:14:a9:04:7f:df:5a:de:24:bc:1a:85:
         fd:0f:ee:60:c1:94:a0:3a:f4:11:a8:08:f1:37:4f:0d:66:25:
         ca:ce:75:a8:d2:4e:35:c8:24:df:bd:29:f5:cb:40:13:ef:bd:
         cb:01:a3:15:df:62:0c:67:e7:9d:4e:e3:66:e6:64:d5:43:54:
         74:38:fb:f2:27:af:70:a5:9d:55:f8:6b:07:9a:d4:cb:8c:65:
         e2:db:a9:3b:3d:0a:bb:9e:04:8d:d2:6f:a0:30:b1:47:4c:d2:
         54:c9:23:4c:4d:93:2d:c2:05:6f:79:55:fd:b8:2b:4c:1b:c2:
         76:5c:2d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----