Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3235322e32322e302f32342d3234203d3e2039373934.roa
File:                     3130332e3235322e32322e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          1LsGnHJvNPLzNgRplRwN3GS7F0A5i3+xobL2IVMpGWg=
Subject key identifier:   2B:6E:1C:3A:EA:6E:E7:6D:60:EC:5C:BA:EC:6E:37:7E:35:C5:D6:5E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       745D70EEDEA654CFD1A06B903A7A03EB0ABED057
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3235322e32322e302f32342d3234203d3e2039373934.roa
Signing time:             Wed 23 Feb 2022 04:30:56 +0000
ROA not before:           Wed 23 Feb 2022 04:25:56 +0000
ROA not after:            Thu 23 Feb 2023 04:30:56 +0000
asID:                     9794
IP address blocks:        103.252.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5d:70:ee:de:a6:54:cf:d1:a0:6b:90:3a:7a:03:eb:0a:be:d0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 23 04:25:56 2022 GMT
            Not After : Feb 23 04:30:56 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:72:f4:f0:4a:c5:dc:ce:86:82:4e:35:8e:
                    e5:89:ce:2d:1f:69:a9:a1:8b:30:8a:44:8c:d0:d7:
                    71:af:6d:db:95:5a:8f:b0:79:a0:3e:0f:43:52:2d:
                    5d:50:67:f8:1b:10:33:39:ef:68:26:d3:4a:66:be:
                    9a:d8:6d:3a:98:2b:6a:b7:c3:96:c6:0f:c9:eb:8c:
                    47:c7:77:02:ec:7c:ba:9c:a8:86:9f:87:e2:68:80:
                    f1:5c:d6:ab:3f:98:06:7a:c9:c9:47:7d:c1:da:32:
                    65:a3:54:49:48:57:5c:9b:07:00:bf:99:b0:78:88:
                    26:95:30:3a:72:48:f8:2c:2e:a0:99:86:45:4b:28:
                    6a:d6:e4:36:f9:ba:01:8b:0f:f2:4f:c2:86:d7:41:
                    c8:3d:b0:98:81:36:dd:7c:93:e9:97:32:93:63:68:
                    9d:f9:38:ed:40:67:90:91:89:52:82:20:2f:00:5a:
                    3a:96:46:87:e9:8b:0f:79:13:b8:fe:72:87:ea:a5:
                    16:77:67:72:a5:79:0f:bd:d4:5b:26:cf:0d:a8:ef:
                    cc:08:e5:13:1d:9f:5b:fc:1b:1c:13:f2:0c:7e:0c:
                    fe:c3:98:6f:4d:ca:a2:d8:53:2f:63:c7:a2:84:b5:
                    0e:d8:09:8b:0a:ec:23:47:3f:c2:e0:fc:9c:8f:c1:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6E:1C:3A:EA:6E:E7:6D:60:EC:5C:BA:EC:6E:37:7E:35:C5:D6:5E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3235322e32322e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:70:0e:a2:5b:29:cd:d7:19:95:35:54:e2:34:d3:c4:b8:
         d8:6b:0a:ab:5a:28:81:a1:63:eb:15:c0:2c:f0:85:69:ff:b0:
         43:c8:57:46:b9:32:75:0d:59:fd:b7:f7:79:4a:64:e6:9c:56:
         7f:00:27:61:45:fa:e5:9b:54:8f:64:db:59:91:f8:5b:16:6a:
         4d:08:9f:a8:c2:0a:f1:89:88:3c:d6:e9:0d:e9:a9:d0:5e:2f:
         9f:73:0d:84:f4:27:e2:af:8b:bd:1e:61:99:b7:c7:d1:f8:0b:
         31:de:2d:ec:3c:61:bc:c8:63:d7:df:af:6c:ee:a8:14:6c:a5:
         2c:62:14:dd:1f:78:2e:f5:d5:b9:67:1b:29:d0:7f:54:93:cf:
         0a:e8:d4:41:18:23:d1:86:01:7d:ed:1d:23:aa:be:68:93:17:
         60:66:02:07:ca:c1:86:52:50:0f:55:53:ec:bf:0f:0c:30:16:
         cb:1e:89:c0:11:11:20:f7:a8:62:e3:8f:ef:51:a1:96:fa:43:
         78:c6:b3:b5:19:03:e0:b3:1e:44:fa:7e:c7:04:41:e1:a9:b2:
         0a:92:5d:b8:cf:eb:23:0a:cc:4e:a2:26:bc:2f:10:24:d6:ee:
         20:64:a3:27:c0:dc:58:ae:b2:38:91:6f:81:0b:18:5c:e6:21:
         57:93:20:8f
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUdF1w7t6mVM/RoGuQOnoD6wq+0FcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIyMzA0MjU1NloX
DTIzMDIyMzA0MzA1NlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBNDI2NzJGNEYwNEFDNURDQ0U4NjgyNEUzNThFRTU4OUNFMkQxRjY5QTlB
MThCMzA4QTQ0OENEMEQ3NzFBRjZEREI5NTVBOEZCMDc5QTAzRTBGNDM1MjJENUQ1
MDY3RjgxQjEwMzMzOUVGNjgyNkQzNEE2NkJFOUFEODZEM0E5ODJCNkFCN0MzOTZD
NjBGQzlFQjhDNDdDNzc3MDJFQzdDQkE5Q0E4ODY5Rjg3RTI2ODgwRjE1Q0Q2QUIz
Rjk4MDY3QUM5Qzk0NzdEQzFEQTMyNjVBMzU0NDk0ODU3NUM5QjA3MDBCRjk5QjA3
ODg4MjY5NTMwM0E3MjQ4RjgyQzJFQTA5OTg2NDU0QjI4NkFENkU0MzZGOUJBMDE4
QjBGRjI0RkMyODZENzQxQzgzREIwOTg4MTM2REQ3QzkzRTk5NzMyOTM2MzY4OURG
OTM4RUQ0MDY3OTA5MTg5NTI4MjIwMkYwMDVBM0E5NjQ2ODdFOThCMEY3OTEzQjhG
RTcyODdFQUE1MTY3NzY3NzJBNTc5MEZCREQ0NUIyNkNGMERBOEVGQ0MwOEU1MTMx
RDlGNUJGQzFCMUMxM0YyMEM3RTBDRkVDMzk4NkY0RENBQTJEODUzMkY2M0M3QTI4
NEI1MEVEODA5OEIwQUVDMjM0NzNGQzJFMEZDOUM4RkMxQTVBOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJnL08ErF3M6Ggk41juWJ
zi0faamhizCKRIzQ13GvbduVWo+weaA+D0NSLV1QZ/gbEDM572gm00pmvprYbTqY
K2q3w5bGD8nrjEfHdwLsfLqcqIafh+JogPFc1qs/mAZ6yclHfcHaMmWjVElIV1yb
BwC/mbB4iCaVMDpySPgsLqCZhkVLKGrW5Db5ugGLD/JPwobXQcg9sJiBNt18k+mX
MpNjaJ35OO1AZ5CRiVKCIC8AWjqWRofpiw95E7j+cofqpRZ3Z3KleQ+91Fsmzw2o
78wI5RMdn1v8GxwT8gx+DP7DmG9NyqLYUy9jx6KEtQ7YCYsK7CNHP8Lg/JyPwaWp
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUK24cOupu521g7Fy67G43fjXF1l4wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzIzNTMyMmUzMjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn/BYwDQYJKoZIhvcN
AQELBQADggEBAIcecA6iWynN1xmVNVTiNNPEuNhrCqtaKIGhY+sVwCzwhWn/sEPI
V0a5MnUNWf2393lKZOacVn8AJ2FF+uWbVI9k21mR+FsWak0In6jCCvGJiDzW6Q3p
qdBeL59zDYT0J+Kvi70eYZm3x9H4CzHeLew8YbzIY9ffr2zuqBRspSxiFN0feC71
1blnGynQf1STzwro1EEYI9GGAX3tHSOqvmiTF2BmAgfKwYZSUA9VU+y/DwwwFsse
icARESD3qGLjj+9RoZb6Q3jGs7UZA+CzHkT6fscEQeGpsgqSXbjP6yMKzE6iJrwv
ECTW7iBkoyfA3FiusjiRb4ELGFzmIVeTII8=
-----END CERTIFICATE-----