Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e33322e302f32332d3234203d3e203539313334.roa
File:                     3130332e3137392e33322e302f32332d3234203d3e203539313334.roa (raw, json)
Hash identifier:          4vCj7y2UBnXk7yj95EdvVNxFZcFIDTTRosobpFXv4o0=
Subject key identifier:   CA:CB:AC:93:98:48:C2:0D:3B:D7:09:80:82:56:35:1C:A5:6B:7F:9D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       133BEECF0C608A4346D1038D8A9D487A9A84235C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e33322e302f32332d3234203d3e203539313334.roa
Signing time:             Mon 10 Jan 2022 07:02:53 +0000
ROA not before:           Mon 10 Jan 2022 06:57:53 +0000
ROA not after:            Tue 10 Jan 2023 07:02:53 +0000
asID:                     59134
IP address blocks:        103.179.32.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3b:ee:cf:0c:60:8a:43:46:d1:03:8d:8a:9d:48:7a:9a:84:23:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 10 06:57:53 2022 GMT
            Not After : Jan 10 07:02:53 2023 GMT
        Subject: CN=3082010A0282010100BA3212D9AD92D9894AA927FF1F164F44FE83A462167416B9937B66A057DEFD9883686873886DD7BD8AB916FC3EA716A5E3AEE07E014840168815A5913EB4C24F9FD975F08C9F415902841A1C5F8EE4EE1CCBFFF6935A4E32717F45C8B04EC349C35ABEA0CAEEB1AA25E4447800E28B67FDDE703E19462676D20B7BAEF9625D9A001C935A10AB500DAA482315BEEB9FECB12FC915EC59C45A941929F0387075B8191BCEB0CE7946DD68C9E897F4B59429C2FD008C95DF74A663EE5CFCC340103BED9DD84B61C7B342EE014ED23AD06F876FDA42FF45CF63694154BE7856DC1FC906AB9D9BA7EC1BEF14AEEF762D494F82D9BF6D4C0DDE11486FF4103E905973550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:12:d9:ad:92:d9:89:4a:a9:27:ff:1f:16:
                    4f:44:fe:83:a4:62:16:74:16:b9:93:7b:66:a0:57:
                    de:fd:98:83:68:68:73:88:6d:d7:bd:8a:b9:16:fc:
                    3e:a7:16:a5:e3:ae:e0:7e:01:48:40:16:88:15:a5:
                    91:3e:b4:c2:4f:9f:d9:75:f0:8c:9f:41:59:02:84:
                    1a:1c:5f:8e:e4:ee:1c:cb:ff:f6:93:5a:4e:32:71:
                    7f:45:c8:b0:4e:c3:49:c3:5a:be:a0:ca:ee:b1:aa:
                    25:e4:44:78:00:e2:8b:67:fd:de:70:3e:19:46:26:
                    76:d2:0b:7b:ae:f9:62:5d:9a:00:1c:93:5a:10:ab:
                    50:0d:aa:48:23:15:be:eb:9f:ec:b1:2f:c9:15:ec:
                    59:c4:5a:94:19:29:f0:38:70:75:b8:19:1b:ce:b0:
                    ce:79:46:dd:68:c9:e8:97:f4:b5:94:29:c2:fd:00:
                    8c:95:df:74:a6:63:ee:5c:fc:c3:40:10:3b:ed:9d:
                    d8:4b:61:c7:b3:42:ee:01:4e:d2:3a:d0:6f:87:6f:
                    da:42:ff:45:cf:63:69:41:54:be:78:56:dc:1f:c9:
                    06:ab:9d:9b:a7:ec:1b:ef:14:ae:ef:76:2d:49:4f:
                    82:d9:bf:6d:4c:0d:de:11:48:6f:f4:10:3e:90:59:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CB:AC:93:98:48:C2:0D:3B:D7:09:80:82:56:35:1C:A5:6B:7F:9D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e33322e302f32332d3234203d3e203539313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:5a:72:ad:98:c3:84:b5:dd:8d:41:d7:69:b6:68:95:0b:e3:
         5d:21:91:0b:49:10:c4:5e:db:96:0d:a4:51:85:3f:a8:c1:f2:
         f8:39:08:51:2d:88:6d:3b:e5:82:35:a0:ba:84:0e:f1:fc:f2:
         1b:f8:9c:f0:cf:f4:89:6e:d5:e4:87:c5:c6:15:24:81:a9:ad:
         bb:3f:11:96:8d:c4:f1:89:bf:39:07:76:24:a1:76:37:e2:dd:
         e7:ce:b8:d1:66:68:77:f1:97:87:7a:99:43:05:43:92:8b:82:
         e5:1c:7a:ed:2c:f3:6c:89:9a:e1:3c:73:4f:28:eb:8b:29:2f:
         82:29:bd:e4:a0:48:72:d3:66:d1:71:26:6b:fb:5e:63:29:9d:
         95:a9:f8:41:63:54:dd:14:73:4a:7a:04:15:82:4d:a7:2c:44:
         bc:bc:55:68:d3:13:6c:3f:cb:b2:fa:3e:61:e9:64:24:4e:eb:
         0c:e7:8c:7f:b0:f4:63:3b:e2:26:27:f7:99:ba:7a:88:27:3f:
         5b:d9:a3:6f:02:02:65:bb:c9:18:3c:d5:42:5f:51:5a:91:7e:
         c8:fd:eb:cb:71:92:bc:a4:f9:b0:7b:04:8a:75:76:47:b3:f2:
         95:9d:49:53:91:cc:a8:c8:ef:4a:85:ce:78:f1:4d:be:dc:47:
         cd:b9:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----