Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3234322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3234322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          y6YDW9csbIGuWr08N50LAPDkDqRTdN09WK1acbq+rK4=
Subject key identifier:   3F:70:7C:71:E4:D5:49:CD:C2:2F:40:AD:3C:61:39:27:DE:CA:72:42
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       77AB966A3FA5FDB3FBC0E36EB553FD7618C6B4C0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3234322e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:26 +0000
ROA not before:           Thu 03 Mar 2022 07:20:26 +0000
ROA not after:            Fri 03 Mar 2023 07:25:26 +0000
asID:                     17995
IP address blocks:        103.182.242.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ab:96:6a:3f:a5:fd:b3:fb:c0:e3:6e:b5:53:fd:76:18:c6:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:26 2022 GMT
            Not After : Mar  3 07:25:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:44:f8:63:c5:8c:b3:d8:68:52:46:83:3a:
                    a2:9e:d9:31:d8:03:ca:cf:d8:7f:c6:30:e1:0c:13:
                    3f:b6:a4:67:b4:f2:57:41:66:53:75:11:ba:93:61:
                    9a:1b:38:18:7e:a9:5d:c1:f0:00:d3:67:bf:1e:68:
                    7a:80:1f:90:64:24:6c:b3:6b:54:8d:0d:55:16:c7:
                    e0:1f:35:07:f5:bc:30:82:fa:ed:dd:2d:67:42:36:
                    9e:10:8f:ed:d0:38:17:68:b6:bd:ad:2c:eb:5e:6b:
                    4c:0e:f5:b9:94:22:4f:92:ad:4b:42:38:9c:68:ee:
                    f6:ad:61:9d:ed:30:11:d7:f8:89:8a:6b:6a:e2:1a:
                    ea:20:4a:33:db:75:41:1d:ef:e6:5b:92:89:94:f8:
                    d1:32:af:13:9f:c4:5a:d5:91:0d:a5:ff:fe:e4:25:
                    71:a9:89:80:6b:ff:f7:fa:51:40:ff:05:b2:52:ab:
                    53:3e:50:94:d1:49:b9:27:23:62:e7:e8:a8:d5:ad:
                    d8:7f:1a:3e:fd:98:61:36:8f:97:64:5d:a7:a8:1b:
                    fe:f2:73:66:ab:bd:c7:d2:ff:6b:84:bb:99:45:61:
                    9b:25:3a:93:16:17:41:70:e5:e5:79:d4:ac:d3:59:
                    bd:20:10:63:e9:76:ea:8e:37:29:93:7d:1f:5b:c1:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:70:7C:71:E4:D5:49:CD:C2:2F:40:AD:3C:61:39:27:DE:CA:72:42
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3234322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:47:30:78:07:45:52:98:27:22:b6:ea:08:c5:59:4c:4c:2e:
         82:a3:7f:b9:65:c9:a4:90:5b:75:ce:24:46:2e:ec:76:2d:2d:
         df:d9:e2:9b:75:08:b8:6e:09:78:37:a7:3e:45:58:f9:7a:f6:
         51:3d:e1:56:1a:27:93:b5:e0:f0:05:41:1e:94:63:cb:c7:36:
         be:65:e9:84:ca:da:dc:0c:e5:a4:54:06:1d:e3:04:5f:95:3b:
         0a:6b:41:6d:39:e3:ef:56:b8:d2:b5:24:d3:82:27:a3:7c:d3:
         ea:0a:20:78:37:e4:d2:ff:88:b5:76:00:8d:79:de:94:9d:f8:
         09:cf:3b:d2:03:37:86:3f:09:20:cf:cc:af:1c:d3:bc:8a:d2:
         23:04:a5:a0:22:9c:f5:e5:b1:f2:3d:3d:64:52:7e:fc:73:d4:
         c0:57:ee:e8:10:ec:e9:83:ca:cf:70:c9:a1:93:6d:92:ec:d7:
         31:ed:5b:77:b7:32:9f:3e:a4:d3:9b:2b:0e:bf:80:4b:3b:7c:
         a4:fe:33:de:ab:dd:c0:33:e4:e3:bc:6a:fa:21:9f:16:4e:6a:
         9c:08:58:d3:83:67:7e:48:61:3e:58:d7:16:93:35:d2:f2:78:
         77:4c:bc:e5:39:9c:3c:20:2f:f2:88:ca:0e:ab:9f:81:8e:f7:
         e8:71:e8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----