Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139352e3136342e302f32322d3234203d3e2030.roa
File:                     3130332e3139352e3136342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          ycAaZS+CQrK3A0Y1lcxqDiLP0tCoWe4CF9/I4fAr9UI=
Subject key identifier:   E2:5C:59:CA:66:9B:D9:AD:3D:44:6A:A1:AD:55:EB:D8:0E:4B:13:CB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       530DE060B96C92628317349C735A96B934F1F2CB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139352e3136342e302f32322d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 03:56:57 +0000
ROA not before:           Mon 31 Jan 2022 03:51:57 +0000
ROA not after:            Tue 31 Jan 2023 03:56:57 +0000
asID:                     0
IP address blocks:        103.195.164.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0d:e0:60:b9:6c:92:62:83:17:34:9c:73:5a:96:b9:34:f1:f2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 03:51:57 2022 GMT
            Not After : Jan 31 03:56:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:70:6f:ab:54:b5:82:95:65:47:6c:c0:2c:
                    d8:d9:37:b3:37:2e:64:42:25:6e:94:14:b3:84:cc:
                    4a:bd:04:13:3a:28:f4:2b:8d:a5:80:0a:ec:52:7e:
                    55:5e:e5:bd:c1:10:8a:d8:1a:90:30:3b:40:31:a6:
                    99:b6:75:df:71:0f:bc:17:c6:e5:b3:ab:d0:f2:fa:
                    ed:c5:40:e8:a5:f7:a9:02:00:1f:ab:8f:b2:41:de:
                    41:18:af:38:30:13:24:85:28:29:99:06:c6:8c:41:
                    a4:d8:a8:3f:03:02:ff:ac:7e:ff:8c:39:66:3e:01:
                    5c:df:50:81:16:f2:5f:98:60:34:8e:48:b6:fe:a1:
                    d6:b0:ac:a9:ae:6f:e5:ef:06:39:86:d2:31:68:0b:
                    6f:a7:f5:cd:48:8f:91:03:6a:9e:cb:d6:6f:b1:b0:
                    24:0a:b3:89:f9:76:dc:a9:91:13:71:e1:6f:c6:8b:
                    ab:65:37:cd:9e:d5:78:6a:69:d1:be:63:34:89:45:
                    eb:52:ed:17:e5:45:14:fa:f6:25:17:21:f9:02:07:
                    8a:90:e0:fe:36:93:0e:13:3b:ae:a5:12:58:f9:c3:
                    2e:19:c3:17:0a:c6:17:fb:8f:69:0b:33:b3:9b:81:
                    2a:b2:03:57:36:25:a4:b3:83:0c:ad:f8:b9:1c:7c:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5C:59:CA:66:9B:D9:AD:3D:44:6A:A1:AD:55:EB:D8:0E:4B:13:CB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139352e3136342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:74:fb:95:a5:42:3f:b8:30:4e:11:b8:89:f5:29:78:89:
         ec:cf:e0:93:b0:9a:40:18:83:30:20:5f:33:40:63:36:f4:81:
         9a:3e:ae:99:05:b9:01:df:35:17:7a:63:a4:b3:8f:54:7b:0a:
         66:3c:a9:44:5a:e8:4e:ba:8f:dc:93:45:c0:0f:8f:f0:d7:2d:
         85:23:c3:9c:93:bf:5c:cb:97:c1:4b:95:7f:e8:c2:50:fa:ff:
         fc:d6:ed:42:c3:61:ef:90:b3:bd:c0:4c:5d:6c:f0:f1:6d:3a:
         15:1c:d1:61:1e:11:24:0d:33:14:c5:cb:21:14:29:2a:4a:32:
         2f:8d:a6:31:e0:28:cb:fd:c5:cd:ba:3d:72:c8:65:cc:b7:80:
         0c:ef:b2:fd:c8:32:ef:76:fd:1b:cb:f3:00:ef:01:64:7a:f9:
         76:97:c6:d6:23:fd:c9:d7:00:f9:60:e4:98:59:c1:bd:34:0a:
         a0:09:0f:81:38:24:cf:e9:3b:cd:ed:aa:eb:3a:85:08:c3:fa:
         0a:c2:f5:70:18:87:04:ae:82:6a:e6:37:4a:d2:bc:f2:95:e1:
         d4:75:bd:5e:67:5f:d9:9e:e8:9a:80:a1:f7:e2:41:1d:32:91:
         2b:34:53:b9:02:f6:3f:d8:95:de:8f:13:ab:cb:c1:09:84:3d:
         bb:76:0b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----