Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e32382e32322e302f32332d3234203d3e20313337333431.roa
File:                     3130332e32382e32322e302f32332d3234203d3e20313337333431.roa (raw, json)
Hash identifier:          jkfEqPnnU1gCQXA5cg00EQF/+tZpMKh1DLq7SgtYppo=
Subject key identifier:   D6:9A:95:64:E8:28:A3:D9:2B:A7:E7:E8:D9:80:16:96:E7:28:CE:F0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       25EF277279781CBFCF4D0B40888BA0110A7CEFA7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e32382e32322e302f32332d3234203d3e20313337333431.roa
Signing time:             Fri 19 Nov 2021 08:44:13 +0000
ROA not before:           Fri 19 Nov 2021 08:39:13 +0000
ROA not after:            Sat 19 Nov 2022 08:44:13 +0000
asID:                     137341
IP address blocks:        103.28.22.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ef:27:72:79:78:1c:bf:cf:4d:0b:40:88:8b:a0:11:0a:7c:ef:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 08:39:13 2021 GMT
            Not After : Nov 19 08:44:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:a1:0e:2e:f6:73:63:ee:66:43:99:5b:dd:
                    ae:37:0f:e1:1f:1d:7e:62:e8:9a:56:61:86:63:1e:
                    e9:ea:b7:4e:12:76:d8:85:da:8f:7d:4f:91:64:b8:
                    da:23:b1:14:4f:c5:84:01:e0:cc:56:66:4f:36:08:
                    b7:d7:72:7a:aa:b9:62:ab:01:94:62:22:0f:55:8d:
                    db:93:74:32:89:ad:fa:fb:34:bf:99:00:2a:07:57:
                    27:0f:b4:0d:be:ae:89:84:0e:0f:ed:7e:3a:0c:ac:
                    b0:c4:c0:7c:82:24:46:fe:be:f3:c1:f0:99:ea:17:
                    ce:7d:34:3d:85:60:5f:9d:f3:93:a9:6c:d1:20:d5:
                    e5:ee:1a:bd:b6:9d:71:59:c7:66:98:ff:34:9d:a2:
                    41:6d:98:82:dc:7f:74:ce:4d:30:6a:38:2a:d6:8e:
                    25:6b:0e:6d:a4:24:fd:7b:83:74:f3:13:83:9b:d4:
                    41:8f:c5:73:02:2d:31:bb:53:cb:05:08:df:cb:fc:
                    14:f8:c8:5c:7e:e3:ff:c1:5c:a6:2f:f2:e8:64:e9:
                    c9:97:0c:1d:d7:67:c9:fa:de:d3:b6:80:89:49:82:
                    00:b9:70:80:d1:f1:e4:f2:e3:0c:71:15:3e:9d:84:
                    1a:e2:b2:a9:dc:65:4d:d2:32:07:d8:38:52:73:fa:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9A:95:64:E8:28:A3:D9:2B:A7:E7:E8:D9:80:16:96:E7:28:CE:F0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e32382e32322e302f32332d3234203d3e20313337333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:c1:99:ed:5a:47:b4:4e:89:7a:50:00:6d:d5:ad:0a:63:c6:
         79:eb:f1:79:b0:ed:06:11:fc:bf:82:eb:07:ac:56:7b:45:e2:
         21:3d:fb:a0:63:62:8a:36:31:d3:00:80:9c:de:7d:ea:92:17:
         78:ef:b3:c5:bd:2c:78:85:48:b2:e2:e3:3a:58:3b:90:6d:d7:
         f2:45:03:3f:a9:af:a7:68:ca:7b:0e:92:b0:18:ad:a2:17:05:
         0b:2e:44:18:02:d5:74:d3:69:b7:d3:f0:14:e3:11:0b:f3:9e:
         33:ba:27:ab:57:41:29:d1:0b:b3:ab:8a:cf:16:16:fc:82:c2:
         91:50:a8:ee:00:67:8f:27:52:7b:aa:4a:12:6f:66:08:95:2b:
         38:9f:b4:44:e8:1a:89:1e:fc:5e:df:11:af:ac:7b:e7:9a:7d:
         31:9d:82:11:cb:5c:95:25:67:7f:a7:6e:12:f6:67:72:bb:8b:
         7b:c8:d6:be:72:45:56:58:03:f0:74:ca:b6:1b:2e:73:8e:75:
         61:24:6d:20:e5:ae:d6:08:b3:f1:a0:d7:77:5a:bc:5a:40:da:
         c7:ba:bc:5a:e6:67:bb:e5:d0:e3:fa:3c:79:bd:60:84:4c:6c:
         d8:7e:73:89:7e:0d:c4:87:da:d7:81:4d:b7:fa:e3:bb:75:79:
         ae:70:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----