Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31392e3130382e302f32322d3234203d3e20313332363431.roa
File:                     3130332e31392e3130382e302f32322d3234203d3e20313332363431.roa (raw, json)
Hash identifier:          WsoBDhj+A1bLEy1HWrGudQfBRkxX3m4nUkwXs2ezpTI=
Subject key identifier:   B2:14:C5:50:78:74:B9:5F:F8:BD:84:54:04:0F:3F:B8:3A:66:8E:3D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       05AB66F03F30E5921680DF78063A1E3BABD61AB6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31392e3130382e302f32322d3234203d3e20313332363431.roa
Signing time:             Mon 14 Jun 2021 04:15:35 +0000
ROA not before:           Mon 14 Jun 2021 04:10:35 +0000
ROA not after:            Tue 14 Jun 2022 04:15:35 +0000
asID:                     132641
IP address blocks:        103.19.108.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ab:66:f0:3f:30:e5:92:16:80:df:78:06:3a:1e:3b:ab:d6:1a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 14 04:10:35 2021 GMT
            Not After : Jun 14 04:15:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:eb:ac:fc:1a:00:b9:e9:a5:18:ee:26:49:
                    52:8d:59:38:d2:ef:7d:18:59:d8:47:78:70:1e:9a:
                    13:97:21:94:cd:cd:da:87:2a:41:e3:ff:32:a2:2a:
                    8b:cc:1b:10:13:3c:0c:3f:e8:fd:bf:91:7a:1b:c7:
                    52:ba:0a:0c:b9:fc:29:ed:00:38:00:22:9b:07:5d:
                    f4:f0:e5:22:5a:36:08:e1:8a:8b:3b:7e:98:d7:54:
                    80:1c:0f:d9:dd:5d:cf:98:76:3e:cd:cb:af:fc:a8:
                    0e:2f:4e:da:cc:96:e7:f4:9c:88:76:22:0e:d1:70:
                    77:52:99:e2:62:c2:2a:6a:ee:81:6d:50:27:b9:d2:
                    e2:32:bc:7c:bf:3c:90:65:93:3a:14:63:f3:c7:0b:
                    d9:a5:7a:d2:fc:b0:20:b3:91:6e:c1:26:34:1c:70:
                    06:47:c7:ee:80:e6:ff:52:29:aa:b2:ee:8f:4f:e8:
                    b6:78:10:35:b3:bb:e1:65:d3:ac:ef:6e:ac:8b:ad:
                    d7:d1:41:5b:a5:f4:66:9a:5b:79:b6:48:c5:92:f4:
                    73:c4:31:10:0f:6b:10:4b:91:3e:80:a3:9a:8a:ec:
                    6d:37:61:4c:66:b6:cf:00:ce:08:34:fa:07:58:c3:
                    1f:58:c1:ab:2e:af:f0:28:93:c7:b0:70:d3:4d:4a:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:14:C5:50:78:74:B9:5F:F8:BD:84:54:04:0F:3F:B8:3A:66:8E:3D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31392e3130382e302f32322d3234203d3e20313332363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:73:3e:fd:92:f4:6a:bd:68:75:c6:5d:80:1b:88:63:bc:57:
         d8:11:34:cd:71:bb:15:da:f5:03:6b:59:2c:61:89:47:92:6d:
         ff:ad:87:7e:30:53:01:af:8e:1f:de:a3:67:12:4b:a3:58:09:
         bd:44:2f:a0:91:bc:1a:c6:ab:12:ac:44:02:7f:a8:36:f1:0b:
         aa:80:50:10:0d:f5:a4:56:52:90:81:c4:04:8c:2c:14:8c:3f:
         0d:64:93:68:6f:21:94:34:42:9d:39:10:45:69:55:6d:d8:13:
         e9:a7:7e:b2:06:1a:fe:18:a5:ff:24:a4:8c:46:ef:31:54:1c:
         4e:af:4e:c4:25:1f:5c:22:a5:65:c7:9c:f8:46:e7:97:cd:83:
         2c:9a:38:c0:a6:41:7f:72:9c:83:e9:d4:9e:4f:a8:e7:ad:05:
         25:b2:65:e3:60:d9:52:37:22:e8:57:66:d1:f0:05:7b:d8:68:
         1f:6d:14:26:85:1c:90:a8:0c:f0:02:bf:59:0a:28:06:bb:b5:
         ce:a8:69:22:8b:f6:97:62:81:69:de:42:c4:7d:20:5a:dc:6f:
         0e:13:44:9c:fd:3e:de:4e:1c:bb:87:5f:0c:ee:9f:e9:1a:63:
         c7:70:3d:c8:4b:c1:e3:9c:98:89:8a:25:3b:9a:7b:fc:6c:94:
         d4:fb:05:21
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUBatm8D8w5ZIWgN94BjoeO6vWGrYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDYxNDA0MTAzNVoX
DTIyMDYxNDA0MTUzNVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCNjdGRUJBQ0ZDMUEwMEI5RTlBNTE4RUUyNjQ5NTI4RDU5MzhEMkVGN0Qx
ODU5RDg0Nzc4NzAxRTlBMTM5NzIxOTRDRENEREE4NzJBNDFFM0ZGMzJBMjJBOEJD
QzFCMTAxMzNDMEMzRkU4RkRCRjkxN0ExQkM3NTJCQTBBMENCOUZDMjlFRDAwMzgw
MDIyOUIwNzVERjRGMEU1MjI1QTM2MDhFMThBOEIzQjdFOThENzU0ODAxQzBGRDlE
RDVEQ0Y5ODc2M0VDRENCQUZGQ0E4MEUyRjRFREFDQzk2RTdGNDlDODg3NjIyMEVE
MTcwNzc1Mjk5RTI2MkMyMkE2QUVFODE2RDUwMjdCOUQyRTIzMkJDN0NCRjNDOTA2
NTkzM0ExNDYzRjNDNzBCRDlBNTdBRDJGQ0IwMjBCMzkxNkVDMTI2MzQxQzcwMDY0
N0M3RUU4MEU2RkY1MjI5QUFCMkVFOEY0RkU4QjY3ODEwMzVCM0JCRTE2NUQzQUNF
RjZFQUM4QkFERDdEMTQxNUJBNUY0NjY5QTVCNzlCNjQ4QzU5MkY0NzNDNDMxMTAw
RjZCMTA0QjkxM0U4MEEzOUE4QUVDNkQzNzYxNEM2NkI2Q0YwMENFMDgzNEZBMDc1
OEMzMUY1OEMxQUIyRUFGRjAyODkzQzdCMDcwRDM0RDRBMkIxNzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2f+us/BoAuemlGO4mSVKN
WTjS730YWdhHeHAemhOXIZTNzdqHKkHj/zKiKovMGxATPAw/6P2/kXobx1K6Cgy5
/CntADgAIpsHXfTw5SJaNgjhios7fpjXVIAcD9ndXc+Ydj7Ny6/8qA4vTtrMluf0
nIh2Ig7RcHdSmeJiwipq7oFtUCe50uIyvHy/PJBlkzoUY/PHC9mletL8sCCzkW7B
JjQccAZHx+6A5v9SKaqy7o9P6LZ4EDWzu+Fl06zvbqyLrdfRQVul9GaaW3m2SMWS
9HPEMRAPaxBLkT6Ao5qK7G03YUxmts8Azgg0+gdYwx9Ywasur/Aok8ewcNNNSisX
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUshTFUHh0uV/4vYRUBA8/uDpmjj0wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzOTJlMzEzMDM4MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxNsMA0GCSqG
SIb3DQEBCwUAA4IBAQAEcz79kvRqvWh1xl2AG4hjvFfYETTNcbsV2vUDa1ksYYlH
km3/rYd+MFMBr44f3qNnEkujWAm9RC+gkbwaxqsSrEQCf6g28QuqgFAQDfWkVlKQ
gcQEjCwUjD8NZJNobyGUNEKdORBFaVVt2BPpp36yBhr+GKX/JKSMRu8xVBxOr07E
JR9cIqVlx5z4RueXzYMsmjjApkF/cpyD6dSeT6jnrQUlsmXjYNlSNyLoV2bR8AV7
2GgfbRQmhRyQqAzwAr9ZCigGu7XOqGkii/aXYoFp3kLEfSBa3G8OE0Sc/T7eThy7
h18M7p/pGmPHcD3IS8HjnJiJiiU7mnv8bJTU+wUh
-----END CERTIFICATE-----