Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232302e3131322e302f32342d3234203d3e2030.roa
File:                     3130332e3232302e3131322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          bOz2Pyw+qMnd9myU7FOylXrvT3R65L+YguNQUM8KO+k=
Subject key identifier:   02:43:23:02:11:12:BB:FA:74:53:6F:E6:0C:6D:B5:3A:95:62:D7:2B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       45E53A4F2A17BE08C2036322508AB4E4D7B63B30
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232302e3131322e302f32342d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:09:12 +0000
ROA not before:           Mon 31 Jan 2022 04:04:12 +0000
ROA not after:            Tue 31 Jan 2023 04:09:12 +0000
asID:                     0
IP address blocks:        103.220.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e5:3a:4f:2a:17:be:08:c2:03:63:22:50:8a:b4:e4:d7:b6:3b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 04:04:12 2022 GMT
            Not After : Jan 31 04:09:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:56:10:41:78:f9:43:18:ff:80:e3:2a:8d:
                    3d:37:35:52:ee:50:e0:cb:22:14:b8:ec:a9:e9:7b:
                    2f:6d:ff:00:a9:2a:bf:43:99:ee:1e:09:47:8b:1b:
                    c7:2f:01:55:e2:c5:46:4f:4b:2e:a0:b0:84:3b:13:
                    f7:27:44:c3:cd:24:33:b4:ce:98:3c:d1:2b:82:a6:
                    50:8b:18:c1:3e:5b:63:2a:6c:7b:a9:c8:9f:58:41:
                    a4:02:50:c5:14:6a:4e:36:ed:b8:4c:a6:00:28:4e:
                    19:5c:9b:8e:db:6c:84:3a:10:ed:c1:d0:b0:6a:b0:
                    c4:6d:c0:7c:01:14:3d:ac:36:84:ef:a4:dc:e4:3f:
                    56:40:f8:5a:11:a1:8b:dc:e4:91:53:4c:c0:4f:be:
                    52:f1:2f:40:a3:89:8a:ce:8d:fa:05:4b:d5:b2:2b:
                    66:1c:d5:9c:ae:e0:08:28:b2:98:93:94:d0:79:82:
                    13:5b:39:20:a7:1d:05:6b:df:79:b4:49:46:eb:92:
                    c6:2b:4f:00:c9:32:7a:c4:15:2f:73:de:98:e6:6b:
                    5e:f6:bd:1b:d4:5f:23:1e:5d:b8:7b:c6:b0:30:51:
                    9c:20:61:42:31:6b:9d:87:cb:31:64:98:c8:f7:8a:
                    68:50:df:6f:ca:a3:59:1d:43:a0:ee:ec:84:b4:39:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:43:23:02:11:12:BB:FA:74:53:6F:E6:0C:6D:B5:3A:95:62:D7:2B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232302e3131322e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4c:73:1d:81:bf:03:bd:4a:58:67:b5:62:5f:d4:7a:97:ff:
         6d:3b:b9:7c:65:fe:c2:27:8c:cd:85:ca:b9:5e:ed:b8:ba:9c:
         88:b4:3b:ea:03:e2:33:ea:87:21:80:4c:6b:e7:f2:0b:af:98:
         12:f3:89:af:36:94:ae:a1:15:5e:66:44:f1:46:fb:9e:42:38:
         81:ea:c4:5b:7a:96:b5:cc:08:e8:c6:96:0a:fc:36:75:37:74:
         c3:0a:28:16:3d:59:00:e2:2c:10:46:cd:66:5a:b7:29:4a:c4:
         c0:c6:06:49:5d:eb:a5:00:16:30:27:dd:f4:12:44:76:90:c5:
         d2:2c:0d:19:81:a8:95:89:19:65:9d:56:d4:f9:bf:20:9f:6a:
         eb:a2:11:a1:aa:db:3d:86:94:41:80:af:44:23:4d:e6:cc:0a:
         09:fa:a4:9b:f5:e8:ed:1d:49:bb:7b:cb:52:a5:b4:04:d3:e2:
         b3:cd:0f:04:c3:8b:d2:e2:97:25:bd:69:b3:d5:81:df:6b:1e:
         9a:8c:28:fb:29:8a:e1:f9:72:3b:d0:5c:ed:fe:e1:a7:d1:96:
         1c:70:b8:26:77:da:1e:28:e6:cb:44:54:cd:90:77:e6:29:e5:
         b6:60:d9:ac:bd:c1:4d:63:72:06:b1:2b:ab:95:19:54:82:4d:
         9f:63:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----