Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3235322e32302e302f32342d3234203d3e203539313337.roa
File:                     3130332e3235322e32302e302f32342d3234203d3e203539313337.roa (raw, json)
Hash identifier:          Ixh44YW9xHMevjD0SQQgQkcqZUThJXyBrMSVSL39cb8=
Subject key identifier:   7C:B7:D6:F4:41:C4:23:DC:A0:84:C3:08:4D:36:7E:D3:35:D1:B1:94
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3F100EA787682192D91026DEA117A995B26E173D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3235322e32302e302f32342d3234203d3e203539313337.roa
Signing time:             Tue 12 Oct 2021 04:00:03 +0000
ROA not before:           Tue 12 Oct 2021 03:55:03 +0000
ROA not after:            Wed 12 Oct 2022 04:00:03 +0000
asID:                     59137
IP address blocks:        103.252.20.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:10:0e:a7:87:68:21:92:d9:10:26:de:a1:17:a9:95:b2:6e:17:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 12 03:55:03 2021 GMT
            Not After : Oct 12 04:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:e6:ef:a0:4a:58:f9:83:85:e1:31:80:81:
                    0a:27:58:ac:3d:a9:9f:f5:63:a9:46:cc:8c:66:66:
                    5f:ca:74:c1:15:79:c8:b0:06:8e:8d:fd:66:34:0d:
                    38:5c:61:b4:d3:94:2e:46:12:86:52:1b:8f:85:75:
                    ac:61:69:d1:37:fc:36:51:d9:0c:01:c8:12:8f:e5:
                    dd:45:9b:bf:dd:ee:49:57:db:64:d3:cf:35:d6:48:
                    8d:73:90:34:d2:02:7d:3e:57:92:30:69:75:49:89:
                    13:9b:a7:4b:19:3e:ca:81:83:58:01:c9:0a:04:1e:
                    e5:ca:4b:75:11:ba:99:95:17:c9:0e:45:8d:8a:20:
                    72:88:8c:ce:91:3c:6f:4b:26:73:2c:f7:f4:28:91:
                    d9:d0:fe:67:a8:15:7b:08:71:f9:c1:d0:5f:87:d6:
                    e1:41:76:a1:53:f9:ee:ec:83:5f:42:9f:98:e4:3b:
                    be:d9:92:7f:33:75:f4:da:4b:17:75:d7:d3:2e:e8:
                    aa:e2:01:85:57:17:82:d9:e2:8a:75:9b:2a:13:da:
                    f8:53:ea:a0:d8:1a:4f:c3:69:9a:60:0a:12:a2:7b:
                    b5:75:cc:0c:89:f6:e2:18:c1:2c:ec:79:c3:84:87:
                    3b:b1:46:68:63:6a:d8:dd:40:8c:ea:8f:ab:06:79:
                    10:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B7:D6:F4:41:C4:23:DC:A0:84:C3:08:4D:36:7E:D3:35:D1:B1:94
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3235322e32302e302f32342d3234203d3e203539313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:f7:84:fe:86:64:8c:d8:3f:6d:c6:02:c3:c8:1d:cf:f3:
         b6:f1:00:19:70:72:52:cf:89:7b:59:c7:03:77:f9:b4:25:24:
         1d:27:22:bd:c5:f9:58:cb:e8:65:1c:f3:3e:0f:5d:32:80:04:
         2e:cc:84:72:4f:b7:e1:44:e0:b5:d3:e1:bc:a8:b9:20:c9:d8:
         72:44:56:36:4b:46:0f:cd:ee:e3:74:b7:d2:2d:bd:89:50:27:
         c4:c9:bc:e9:10:21:e2:46:8e:f6:8b:18:e3:6e:37:aa:95:2b:
         0b:35:bd:b3:56:ca:64:57:6f:85:4c:fb:84:68:2c:42:49:3a:
         c9:32:bb:c4:74:e0:6a:03:c5:6b:da:66:15:78:71:e9:3d:3e:
         8e:49:7c:a5:85:57:b8:16:98:1f:f9:aa:13:1e:86:d3:1b:1e:
         1d:7f:fb:d8:15:de:ee:97:c2:2f:4c:45:54:c6:e6:c4:63:a1:
         05:3f:be:1f:73:51:54:b4:04:15:1c:3f:fd:fc:de:66:36:a8:
         22:a1:a1:68:ff:bf:94:8f:32:77:6c:78:17:85:06:67:17:de:
         13:b5:78:29:7e:33:21:66:9e:11:8d:94:06:43:3e:5c:ad:27:
         1e:51:f1:2c:a3:de:85:09:a2:6a:93:a7:cb:dc:71:1a:60:83:
         08:eb:50:02
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUPxAOp4doIZLZECbeoReplbJuFz0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAxMjAzNTUwM1oX
DTIyMTAxMjA0MDAwM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDMzZDRTZFRkEwNEE1OEY5ODM4NUUxMzE4MDgxMEEyNzU4QUMzREE5OUZG
NTYzQTk0NkNDOEM2NjY2NUZDQTc0QzExNTc5QzhCMDA2OEU4REZENjYzNDBEMzg1
QzYxQjREMzk0MkU0NjEyODY1MjFCOEY4NTc1QUM2MTY5RDEzN0ZDMzY1MUQ5MEMw
MUM4MTI4RkU1REQ0NTlCQkZEREVFNDk1N0RCNjREM0NGMzVENjQ4OEQ3MzkwMzRE
MjAyN0QzRTU3OTIzMDY5NzU0OTg5MTM5QkE3NEIxOTNFQ0E4MTgzNTgwMUM5MEEw
NDFFRTVDQTRCNzUxMUJBOTk5NTE3QzkwRTQ1OEQ4QTIwNzI4ODhDQ0U5MTNDNkY0
QjI2NzMyQ0Y3RjQyODkxRDlEMEZFNjdBODE1N0IwODcxRjlDMUQwNUY4N0Q2RTE0
MTc2QTE1M0Y5RUVFQzgzNUY0MjlGOThFNDNCQkVEOTkyN0YzMzc1RjREQTRCMTc3
NUQ3RDMyRUU4QUFFMjAxODU1NzE3ODJEOUUyOEE3NTlCMkExM0RBRjg1M0VBQTBE
ODFBNEZDMzY5OUE2MDBBMTJBMjdCQjU3NUNDMEM4OUY2RTIxOEMxMkNFQzc5QzM4
NDg3M0JCMTQ2Njg2MzZBRDhERDQwOENFQThGQUIwNjc5MTAxRjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbObvoEpY+YOF4TGAgQon
WKw9qZ/1Y6lGzIxmZl/KdMEVeciwBo6N/WY0DThcYbTTlC5GEoZSG4+FdaxhadE3
/DZR2QwByBKP5d1Fm7/d7klX22TTzzXWSI1zkDTSAn0+V5IwaXVJiRObp0sZPsqB
g1gByQoEHuXKS3URupmVF8kORY2KIHKIjM6RPG9LJnMs9/QokdnQ/meoFXsIcfnB
0F+H1uFBdqFT+e7sg19Cn5jkO77Zkn8zdfTaSxd119Mu6KriAYVXF4LZ4op1myoT
2vhT6qDYGk/DaZpgChKie7V1zAyJ9uIYwSzsecOEhzuxRmhjatjdQIzqj6sGeRAf
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUfLfW9EHEI9yghMMITTZ+0zXRsZQwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzIzNTMyMmUzMjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzOTMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf8FDANBgkqhkiG
9w0BAQsFAAOCAQEANrT3hP6GZIzYP23GAsPIHc/ztvEAGXByUs+Je1nHA3f5tCUk
HScivcX5WMvoZRzzPg9dMoAELsyEck+34UTgtdPhvKi5IMnYckRWNktGD83u43S3
0i29iVAnxMm86RAh4kaO9osY4243qpUrCzW9s1bKZFdvhUz7hGgsQkk6yTK7xHTg
agPFa9pmFXhx6T0+jkl8pYVXuBaYH/mqEx6G0xseHX/72BXe7pfCL0xFVMbmxGOh
BT++H3NRVLQEFRw//fzeZjaoIqGhaP+/lI8yd2x4F4UGZxfeE7V4KX4zIWaeEY2U
BkM+XK0nHlHxLKPehQmiapOny9xxGmCDCOtQAg==
-----END CERTIFICATE-----