Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230382e32332e302f32342d3234203d3e20313334363435.roa
File:                     3130332e3230382e32332e302f32342d3234203d3e20313334363435.roa (raw, json)
Hash identifier:          wg26IH5isbUXcOAJR5Vyr3xZMfzPAuwEWarkO/YsOT4=
Subject key identifier:   B4:0F:34:84:81:89:82:BB:34:A8:F7:05:E2:5E:26:4C:66:4A:12:AC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2930834948D5E278C64D14F1DC5178F4CED8CEB1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230382e32332e302f32342d3234203d3e20313334363435.roa
Signing time:             Fri 19 Nov 2021 06:11:53 +0000
ROA not before:           Fri 19 Nov 2021 06:06:53 +0000
ROA not after:            Sat 19 Nov 2022 06:11:53 +0000
asID:                     134645
IP address blocks:        103.208.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:30:83:49:48:d5:e2:78:c6:4d:14:f1:dc:51:78:f4:ce:d8:ce:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 06:06:53 2021 GMT
            Not After : Nov 19 06:11:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d8:ac:3c:11:e7:1e:28:37:9b:cd:d7:94:8d:
                    42:45:52:33:22:2b:dc:70:5e:72:fe:b8:70:fe:e1:
                    de:a5:47:f5:59:24:2e:aa:08:1b:5f:09:90:4d:9b:
                    8f:bd:53:1e:8b:2a:90:a0:79:d1:bb:9e:85:a5:3f:
                    13:17:e8:d0:24:29:b2:8c:f5:16:01:63:6d:ea:b6:
                    30:b3:52:85:f4:85:55:07:04:ac:f7:d8:2b:47:c9:
                    4a:da:6b:36:d2:da:07:9e:95:f9:b0:e1:a5:58:37:
                    a9:7d:7d:e5:6a:6f:47:07:b6:b5:60:78:a2:b6:0e:
                    05:4d:46:55:c8:30:52:c7:80:e3:9d:5f:a3:ee:cd:
                    08:8a:4e:4a:f5:3b:0b:4b:9a:51:18:88:69:8b:d1:
                    09:0a:99:55:37:9b:91:49:f6:c4:30:b2:55:de:33:
                    f4:94:69:46:6c:ed:f0:fc:90:e0:cd:18:dc:68:35:
                    25:7d:75:03:c7:4d:e4:d7:33:63:c1:11:e1:16:46:
                    70:6b:2f:84:b2:75:47:9e:a0:35:20:7c:d4:25:bd:
                    c8:b0:2a:bc:32:d4:d8:41:36:2a:98:eb:cd:47:58:
                    34:52:32:91:78:b7:e1:7f:3f:8f:e6:c1:25:51:f0:
                    ee:89:c7:34:e9:d6:3a:e4:1d:4f:b1:f3:0c:d0:8d:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0F:34:84:81:89:82:BB:34:A8:F7:05:E2:5E:26:4C:66:4A:12:AC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230382e32332e302f32342d3234203d3e20313334363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:be:12:66:92:15:65:0e:7c:a7:68:33:4a:aa:c6:fa:0d:
         2f:a1:2c:35:b7:f1:c4:f4:5a:21:cb:b3:6e:49:71:47:6d:b5:
         80:7f:98:d4:2d:ba:d3:13:1f:30:44:84:a5:76:4e:38:04:5d:
         b7:9a:f5:1d:2b:0e:8c:e5:d3:67:e5:88:3a:e5:ed:b0:af:3f:
         f3:fe:64:69:f0:f1:2b:5f:da:1f:b2:80:40:c8:f6:95:20:26:
         e8:ef:ec:65:52:49:35:27:af:46:d5:ee:51:84:16:e4:bf:c5:
         ed:82:3d:b9:29:e9:05:85:2b:db:0f:0d:9d:51:f2:f4:2d:d6:
         ae:c2:80:22:20:7c:32:e8:72:34:a4:07:a8:96:4e:95:94:c8:
         63:51:db:cb:51:2a:41:b2:19:cc:fb:08:17:54:c1:9a:bb:a8:
         d4:46:0e:ba:b7:81:ca:ba:5a:b3:c2:09:65:b6:2d:4a:94:d2:
         10:b5:27:40:64:f4:87:55:75:c1:35:23:3d:08:e3:b1:0c:4d:
         f2:d2:ba:8f:48:42:d1:0e:34:32:7c:de:e4:11:01:69:0b:5f:
         37:76:d4:d3:04:ca:4d:39:fa:39:c9:62:12:1a:fd:1c:9e:16:
         d6:f1:44:6c:d0:eb:b3:2f:e8:06:a0:2b:9c:99:a4:8f:c3:e5:
         27:d5:94:e4
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUKTCDSUjV4njGTRTx3FF49M7YzrEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExOTA2MDY1M1oX
DTIyMTExOTA2MTE1M1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBENkQ4QUMzQzExRTcxRTI4Mzc5QkNERDc5NDhENDI0NTUyMzMyMjJCREM3
MDVFNzJGRUI4NzBGRUUxREVBNTQ3RjU1OTI0MkVBQTA4MUI1RjA5OTA0RDlCOEZC
RDUzMUU4QjJBOTBBMDc5RDFCQjlFODVBNTNGMTMxN0U4RDAyNDI5QjI4Q0Y1MTYw
MTYzNkRFQUI2MzBCMzUyODVGNDg1NTUwNzA0QUNGN0Q4MkI0N0M5NEFEQTZCMzZE
MkRBMDc5RTk1RjlCMEUxQTU1ODM3QTk3RDdERTU2QTZGNDcwN0I2QjU2MDc4QTJC
NjBFMDU0RDQ2NTVDODMwNTJDNzgwRTM5RDVGQTNFRUNEMDg4QTRFNEFGNTNCMEI0
QjlBNTExODg4Njk4QkQxMDkwQTk5NTUzNzlCOTE0OUY2QzQzMEIyNTVERTMzRjQ5
NDY5NDY2Q0VERjBGQzkwRTBDRDE4REM2ODM1MjU3RDc1MDNDNzRERTRENzMzNjND
MTExRTExNjQ2NzA2QjJGODRCMjc1NDc5RUEwMzUyMDdDRDQyNUJEQzhCMDJBQkMz
MkQ0RDg0MTM2MkE5OEVCQ0Q0NzU4MzQ1MjMyOTE3OEI3RTE3RjNGOEZFNkMxMjU1
MUYwRUU4OUM3MzRFOUQ2M0FFNDFENEZCMUYzMENEMDhENzFENTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW2Kw8EeceKDebzdeUjUJF
UjMiK9xwXnL+uHD+4d6lR/VZJC6qCBtfCZBNm4+9Ux6LKpCgedG7noWlPxMX6NAk
KbKM9RYBY23qtjCzUoX0hVUHBKz32CtHyUraazbS2geelfmw4aVYN6l9feVqb0cH
trVgeKK2DgVNRlXIMFLHgOOdX6PuzQiKTkr1OwtLmlEYiGmL0QkKmVU3m5FJ9sQw
slXeM/SUaUZs7fD8kODNGNxoNSV9dQPHTeTXM2PBEeEWRnBrL4SydUeeoDUgfNQl
vciwKrwy1NhBNiqY681HWDRSMpF4t+F/P4/mwSVR8O6JxzTp1jrkHU+x8wzQjXHV
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUtA80hIGJgrs0qPcF4l4mTGZKEqwwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzIzMDM4MmUzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM0MzYzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9AXMA0GCSqG
SIb3DQEBCwUAA4IBAQCE3b4SZpIVZQ58p2gzSqrG+g0voSw1t/HE9Fohy7NuSXFH
bbWAf5jULbrTEx8wRISldk44BF23mvUdKw6M5dNn5Yg65e2wrz/z/mRp8PErX9of
soBAyPaVICbo7+xlUkk1J69G1e5RhBbkv8Xtgj25KekFhSvbDw2dUfL0LdauwoAi
IHwy6HI0pAeolk6VlMhjUdvLUSpBshnM+wgXVMGau6jURg66t4HKulqzwgllti1K
lNIQtSdAZPSHVXXBNSM9COOxDE3y0rqPSELRDjQyfN7kEQFpC183dtTTBMpNOfo5
yWISGv0cnhbW8URs0OuzL+gGoCucmaSPw+Un1ZTk
-----END CERTIFICATE-----