Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3233392e3136352e302f32342d3234203d3e20313331373139.roa
File:                     3130332e3233392e3136352e302f32342d3234203d3e20313331373139.roa (raw, json)
Hash identifier:          a1pmXoNmcYbuFHfh3jRjHrOaKxu1oSKXsFP1NjyvqzY=
Subject key identifier:   B0:DC:62:6D:1F:A8:01:24:C5:41:17:A0:A6:26:C2:03:BA:8F:0E:B6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       30BD1F8ACFBBE264CA45FFB7D9FA34AD3CC55A04
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3233392e3136352e302f32342d3234203d3e20313331373139.roa
Signing time:             Fri 18 Feb 2022 08:00:00 +0000
ROA not before:           Fri 18 Feb 2022 07:55:00 +0000
ROA not after:            Sat 18 Feb 2023 08:00:00 +0000
asID:                     131719
IP address blocks:        103.239.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bd:1f:8a:cf:bb:e2:64:ca:45:ff:b7:d9:fa:34:ad:3c:c5:5a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 18 07:55:00 2022 GMT
            Not After : Feb 18 08:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:5f:f3:80:8f:2c:ec:d1:75:01:61:a0:05:
                    e9:4d:5f:4f:3b:1a:9f:2c:21:ac:fc:c1:3c:c5:c4:
                    99:4b:b8:0e:d8:32:4e:62:26:b4:97:5c:4b:7e:3a:
                    55:5e:62:4e:55:ca:50:2c:8c:94:c8:2f:0b:ef:4a:
                    9e:11:47:7f:cf:8e:12:aa:e1:c1:18:bf:3d:d7:e3:
                    29:7d:65:e5:3c:9f:f0:de:0c:90:cc:c3:9a:20:bd:
                    ab:18:30:0f:c7:bc:2f:d6:7a:2f:45:4b:0f:62:3b:
                    e4:5d:d1:ae:79:10:0f:96:9d:83:41:02:3a:1a:e5:
                    60:cd:c3:8b:92:21:df:93:01:7e:7a:a8:64:86:05:
                    00:78:87:d5:91:04:7d:50:ea:f9:be:d2:93:5d:fa:
                    69:42:3f:d1:78:4b:e4:6f:fa:36:c1:bd:5a:9b:96:
                    1d:28:e0:65:c0:c8:41:df:72:86:05:ad:ed:f4:ba:
                    cc:b9:29:46:db:4a:88:8b:9f:dd:1b:7e:cc:b3:57:
                    dc:d3:f0:37:aa:0f:ed:db:3d:20:67:6b:8c:a3:a5:
                    9d:27:5d:cf:05:d2:ee:4c:49:eb:b0:6c:15:b1:e5:
                    3b:c4:18:9c:c3:9a:6d:74:0f:84:d8:92:19:f8:73:
                    fc:9f:2a:26:01:3c:08:e0:8c:24:30:4d:28:0a:de:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DC:62:6D:1F:A8:01:24:C5:41:17:A0:A6:26:C2:03:BA:8F:0E:B6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3233392e3136352e302f32342d3234203d3e20313331373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:23:e6:81:34:c2:b7:59:30:a3:c0:0a:2a:b6:eb:0e:c8:85:
         f9:62:83:0d:08:f3:6e:fa:9e:37:32:98:21:fa:47:5a:72:d7:
         0c:1f:a2:03:64:5b:25:16:fd:83:6b:43:ac:e0:ce:45:49:b2:
         73:9d:18:62:ee:8f:4f:09:29:77:c1:d6:ad:30:f3:e4:67:a6:
         e6:96:04:70:d6:11:7d:03:5b:77:a3:20:cf:55:93:d0:ea:92:
         4c:49:68:cb:80:ff:27:1b:fb:65:34:ce:d6:e1:1f:7e:b7:73:
         a1:85:c8:72:67:ef:85:be:67:8d:44:9a:48:37:eb:58:b3:6a:
         01:e1:32:f4:d6:60:99:4d:f5:f2:df:94:61:a0:4d:14:ea:6f:
         e4:46:d9:ba:7f:a3:f3:92:ae:5a:34:2b:ee:65:b6:7f:8e:8b:
         8d:13:6c:23:27:b2:f9:1a:3c:32:a8:4c:12:ea:58:02:a9:5c:
         2a:ea:2b:04:a8:56:e5:72:27:19:32:67:c3:33:37:6a:ae:10:
         af:f5:f2:ba:79:1b:1a:89:66:5d:a3:9c:0c:86:18:7e:8f:d9:
         56:11:21:21:11:7f:d2:d0:ff:f3:16:bc:6e:73:99:92:70:20:
         b2:58:2e:75:a1:39:5e:da:bd:23:07:36:fd:ea:97:7c:e3:ed:
         79:28:4a:b2
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUML0fis+74mTKRf+32fo0rTzFWgQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIxODA3NTUwMFoX
DTIzMDIxODA4MDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBRDdENUZGMzgwOEYyQ0VDRDE3NTAxNjFBMDA1RTk0RDVGNEYzQjFBOUYy
QzIxQUNGQ0MxM0NDNUM0OTk0QkI4MEVEODMyNEU2MjI2QjQ5NzVDNEI3RTNBNTU1
RTYyNEU1NUNBNTAyQzhDOTRDODJGMEJFRjRBOUUxMTQ3N0ZDRjhFMTJBQUUxQzEx
OEJGM0REN0UzMjk3RDY1RTUzQzlGRjBERTBDOTBDQ0MzOUEyMEJEQUIxODMwMEZD
N0JDMkZENjdBMkY0NTRCMEY2MjNCRTQ1REQxQUU3OTEwMEY5NjlEODM0MTAyM0Ex
QUU1NjBDREMzOEI5MjIxREY5MzAxN0U3QUE4NjQ4NjA1MDA3ODg3RDU5MTA0N0Q1
MEVBRjlCRUQyOTM1REZBNjk0MjNGRDE3ODRCRTQ2RkZBMzZDMUJENUE5Qjk2MUQy
OEUwNjVDMEM4NDFERjcyODYwNUFERURGNEJBQ0NCOTI5NDZEQjRBODg4QjlGREQx
QjdFQ0NCMzU3RENEM0YwMzdBQTBGRUREQjNEMjA2NzZCOENBM0E1OUQyNzVEQ0Yw
NUQyRUU0QzQ5RUJCMDZDMTVCMUU1M0JDNDE4OUNDMzlBNkQ3NDBGODREODkyMTlG
ODczRkM5RjJBMjYwMTNDMDhFMDhDMjQzMDREMjgwQURFNjhGMTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfV/zgI8s7NF1AWGgBelN
X087Gp8sIaz8wTzFxJlLuA7YMk5iJrSXXEt+OlVeYk5VylAsjJTILwvvSp4RR3/P
jhKq4cEYvz3X4yl9ZeU8n/DeDJDMw5ogvasYMA/HvC/Wei9FSw9iO+Rd0a55EA+W
nYNBAjoa5WDNw4uSId+TAX56qGSGBQB4h9WRBH1Q6vm+0pNd+mlCP9F4S+Rv+jbB
vVqblh0o4GXAyEHfcoYFre30usy5KUbbSoiLn90bfsyzV9zT8DeqD+3bPSBna4yj
pZ0nXc8F0u5MSeuwbBWx5TvEGJzDmm10D4TYkhn4c/yfKiYBPAjgjCQwTSgK3mjx
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUsNxibR+oASTFQRegpibCA7qPDrYwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzIzMzM5MmUzMTM2MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzMxMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn76UwDQYJ
KoZIhvcNAQELBQADggEBAJsj5oE0wrdZMKPACiq26w7Ihfligw0I8276njcymCH6
R1py1wwfogNkWyUW/YNrQ6zgzkVJsnOdGGLuj08JKXfB1q0w8+RnpuaWBHDWEX0D
W3ejIM9Vk9DqkkxJaMuA/ycb+2U0ztbhH363c6GFyHJn74W+Z41Emkg361izagHh
MvTWYJlN9fLflGGgTRTqb+RG2bp/o/OSrlo0K+5ltn+Oi40TbCMnsvkaPDKoTBLq
WAKpXCrqKwSoVuVyJxkyZ8MzN2quEK/18rp5GxqJZl2jnAyGGH6P2VYRISERf9LQ
//MWvG5zmZJwILJYLnWhOV7avSMHNv3ql3zj7XkoSrI=
-----END CERTIFICATE-----