Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232362e3133382e302f32332d3234203d3e20313336303532.roa
File:                     3130332e3232362e3133382e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          vtIGEdVenP+V7yvfnKRbElybriOxXQZUSifp3eAcMIY=
Subject key identifier:   12:2D:50:92:45:B8:FD:A3:F6:84:F8:3A:3C:C4:83:EC:E8:2D:54:3C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6CDDF0D15E009CB914911E6D609CADBE1470A019
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232362e3133382e302f32332d3234203d3e20313336303532.roa
Signing time:             Sat 18 Dec 2021 10:00:00 +0000
ROA not before:           Sat 18 Dec 2021 09:55:00 +0000
ROA not after:            Sun 18 Dec 2022 10:00:00 +0000
asID:                     136052
IP address blocks:        103.226.138.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dd:f0:d1:5e:00:9c:b9:14:91:1e:6d:60:9c:ad:be:14:70:a0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 18 09:55:00 2021 GMT
            Not After : Dec 18 10:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c0:c6:75:02:c8:64:5d:3d:7b:7a:d6:b0:91:
                    bc:6e:05:31:8a:b0:2b:a9:f3:0d:3c:60:f9:95:b9:
                    81:f5:bf:aa:67:ea:a0:3e:af:fc:db:aa:0b:8d:9a:
                    44:d4:61:97:a4:cf:34:1a:7e:68:73:36:28:f5:39:
                    4e:0a:b4:5c:7e:ba:3b:4b:d2:20:b1:87:3c:96:83:
                    0a:27:05:47:b0:d5:82:fa:96:59:ca:de:2c:a5:04:
                    cb:ef:b1:6c:b7:5f:b1:72:7c:ad:d7:15:f8:8e:d0:
                    4d:1f:bc:8b:08:8b:b3:2b:8a:3e:a2:15:19:b1:ba:
                    0a:d0:82:a1:df:f6:31:19:cb:b9:91:9e:73:0d:33:
                    ff:3d:07:8e:4e:66:f6:ab:87:a1:83:5e:5e:c2:40:
                    ad:64:52:38:4d:fb:cd:d5:61:e8:52:a0:45:97:f2:
                    68:ca:0b:e5:98:e4:1b:5e:f5:18:f8:da:6c:61:62:
                    86:51:9f:b3:ac:24:7b:3e:94:1e:5c:7a:cb:da:98:
                    05:6b:95:9e:da:d1:2e:a6:88:60:81:45:ac:3b:00:
                    89:7b:02:e0:1f:f0:0a:ce:6a:b1:d9:1b:77:09:ff:
                    d0:ec:56:bc:42:ec:81:2f:a7:18:cb:c2:7f:0e:99:
                    a6:18:03:75:11:a1:27:85:10:6b:62:0e:45:bc:68:
                    af:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2D:50:92:45:B8:FD:A3:F6:84:F8:3A:3C:C4:83:EC:E8:2D:54:3C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232362e3133382e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:9b:ee:4f:c6:fd:59:90:d8:07:bb:18:f7:9e:2a:34:08:3b:
         3f:c3:d5:0a:9a:dc:94:e6:ed:c4:1a:7c:11:f5:81:30:d1:7b:
         d6:e0:e6:dc:f8:7a:22:04:62:a1:f4:43:08:bb:2f:c3:c6:b1:
         47:43:7e:dc:bd:94:e9:b3:73:cc:0d:7c:8c:26:a5:95:5d:84:
         f9:58:88:36:b8:fb:a0:dd:4a:37:22:7f:01:17:f5:fa:b6:4d:
         6a:63:00:1a:de:4f:03:e4:97:b8:eb:9e:ce:80:1f:72:18:1c:
         e1:09:0e:59:57:58:e5:62:8c:68:c2:be:42:20:de:59:3d:68:
         34:84:ef:8e:8d:f7:7d:48:f0:d8:64:e3:62:61:ad:26:84:81:
         9f:66:8b:ed:59:22:9d:46:ff:c3:ad:6a:89:f2:32:74:e5:73:
         08:db:da:08:3b:81:f6:ea:be:54:f3:72:ff:31:ed:81:dd:10:
         c5:0e:01:77:09:41:02:8e:86:95:cd:6e:d7:6a:7b:cf:0d:ba:
         0c:6e:f1:61:f3:8d:8e:fc:e6:1d:af:54:7d:ef:d5:59:05:a6:
         b4:82:b4:b9:f0:3f:59:ff:0b:17:79:2d:40:30:92:8d:dd:74:
         c7:93:e5:c3:61:40:a2:9f:6a:79:09:03:fc:34:5f:aa:2e:c2:
         2a:40:96:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----