Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e332e34342e302f32342d3234203d3e203536323335.roa
File:                     3130332e332e34342e302f32342d3234203d3e203536323335.roa (raw, json)
Hash identifier:          5KHO4UilOMP6wppKdW7rF3Yz6368BSxXAce3J/QLuJ8=
Subject key identifier:   6B:E4:49:C0:C4:88:25:0B:D5:D2:1D:98:26:70:29:FA:30:AC:53:7D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1E119B5304949794392E173678A148BAF2D67626
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e332e34342e302f32342d3234203d3e203536323335.roa
Signing time:             Fri 03 Sep 2021 08:02:54 +0000
ROA not before:           Fri 03 Sep 2021 07:57:54 +0000
ROA not after:            Sat 03 Sep 2022 08:02:54 +0000
asID:                     56235
IP address blocks:        103.3.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:11:9b:53:04:94:97:94:39:2e:17:36:78:a1:48:ba:f2:d6:76:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  3 07:57:54 2021 GMT
            Not After : Sep  3 08:02:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:44:58:e4:4a:5b:60:6f:94:92:1a:0d:95:df:
                    09:35:69:49:af:b6:ba:a2:bb:af:6a:bf:1d:45:e5:
                    49:61:24:20:e1:09:c1:2c:33:8f:45:98:d7:45:98:
                    5f:2a:4c:d7:d2:7f:f4:f0:15:a2:d0:5e:21:56:53:
                    e8:f9:18:6b:31:91:0c:d4:b3:c2:f6:39:4a:06:a0:
                    3d:f3:4a:6e:78:73:6f:ee:8a:52:49:6d:81:48:fd:
                    e8:91:77:9d:9f:c7:77:9a:e3:73:b7:ec:38:77:66:
                    07:d9:bb:2e:60:3d:27:a9:2d:6a:d2:fc:51:33:b0:
                    b1:a2:00:ab:d2:9e:f4:6c:23:dc:b1:17:de:10:26:
                    cb:aa:d9:f5:a6:ac:64:86:d1:75:58:3e:48:cb:aa:
                    6d:fe:19:fb:2a:73:46:b9:22:6c:b1:69:66:90:d1:
                    fb:ba:74:4d:79:be:d0:da:12:36:74:98:25:df:b7:
                    e5:f5:65:99:ee:8d:68:f5:f3:bd:39:0f:2f:63:89:
                    92:a9:cc:47:cc:d7:5c:58:a4:bb:5f:f7:22:aa:2c:
                    1a:7a:00:bd:47:37:b9:42:ff:52:9a:8b:81:0c:16:
                    a6:cd:d4:0c:ac:33:fa:93:a3:4a:0b:25:eb:62:0f:
                    eb:4f:b7:ba:98:cd:2e:95:c5:5f:41:46:b9:28:48:
                    2a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E4:49:C0:C4:88:25:0B:D5:D2:1D:98:26:70:29:FA:30:AC:53:7D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e332e34342e302f32342d3234203d3e203536323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:50:0a:93:08:61:c6:5c:d5:56:a6:0b:e3:16:a1:ef:c2:57:
         1c:d6:f1:66:39:36:9b:3e:f8:bb:3a:68:86:49:72:ac:f5:c0:
         e2:e7:df:eb:a2:90:ee:e9:23:4b:cd:83:b6:b8:69:ba:8b:81:
         3a:09:7d:68:5c:8b:f0:84:e2:63:5a:21:d0:85:22:f5:a7:2e:
         fa:5f:4f:40:7e:c9:e9:41:2c:07:86:f7:c0:01:f7:58:63:81:
         57:a4:2e:ea:fd:b6:cb:f3:6e:7c:2d:b4:b6:3b:0c:e9:96:50:
         e3:16:9f:9f:f3:29:90:2a:51:8f:0c:80:f9:2a:3f:df:0d:c4:
         e6:b5:5f:49:c4:d3:04:06:19:c0:26:72:cb:98:d9:44:07:12:
         2c:a7:1e:7a:96:98:4f:a8:f1:dc:23:c3:07:0a:99:cd:f8:d9:
         52:24:a0:0d:3b:99:62:ea:f4:52:08:d1:ca:2d:89:8a:06:46:
         99:1b:2f:0c:6c:24:5c:47:76:b9:c6:ad:64:ae:15:d1:12:5e:
         91:5f:49:0a:8c:b1:57:5c:95:ac:34:c2:dd:3c:0d:a3:7b:e9:
         40:f1:b0:8d:22:21:b9:aa:24:53:76:e6:b7:9b:62:31:ac:3f:
         b1:12:ea:14:e1:81:09:c0:9f:51:b2:89:bc:6e:1e:19:bf:71:
         70:d1:00:6b
-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgIUHhGbUwSUl5Q5Lhc2eKFIuvLWdiYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkwMzA3NTc1NFoX
DTIyMDkwMzA4MDI1NFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCRjQ0NThFNDRBNUI2MDZGOTQ5MjFBMEQ5NURGMDkzNTY5NDlBRkI2QkFB
MkJCQUY2QUJGMUQ0NUU1NDk2MTI0MjBFMTA5QzEyQzMzOEY0NTk4RDc0NTk4NUYy
QTRDRDdEMjdGRjRGMDE1QTJEMDVFMjE1NjUzRThGOTE4NkIzMTkxMENENEIzQzJG
NjM5NEEwNkEwM0RGMzRBNkU3ODczNkZFRThBNTI0OTZEODE0OEZERTg5MTc3OUQ5
RkM3Nzc5QUUzNzNCN0VDMzg3NzY2MDdEOUJCMkU2MDNEMjdBOTJENkFEMkZDNTEz
M0IwQjFBMjAwQUJEMjlFRjQ2QzIzRENCMTE3REUxMDI2Q0JBQUQ5RjVBNkFDNjQ4
NkQxNzU1ODNFNDhDQkFBNkRGRTE5RkIyQTczNDZCOTIyNkNCMTY5NjY5MEQxRkJC
QTc0NEQ3OUJFRDBEQTEyMzY3NDk4MjVERkI3RTVGNTY1OTlFRThENjhGNUYzQkQz
OTBGMkY2Mzg5OTJBOUNDNDdDQ0Q3NUM1OEE0QkI1RkY3MjJBQTJDMUE3QTAwQkQ0
NzM3Qjk0MkZGNTI5QThCODEwQzE2QTZDREQ0MENBQzMzRkE5M0EzNEEwQjI1RUI2
MjBGRUI0RkI3QkE5OENEMkU5NUM1NUY0MTQ2QjkyODQ4MkFENzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RFjkSltgb5SSGg2V3wk1
aUmvtrqiu69qvx1F5UlhJCDhCcEsM49FmNdFmF8qTNfSf/TwFaLQXiFWU+j5GGsx
kQzUs8L2OUoGoD3zSm54c2/uilJJbYFI/eiRd52fx3ea43O37Dh3ZgfZuy5gPSep
LWrS/FEzsLGiAKvSnvRsI9yxF94QJsuq2fWmrGSG0XVYPkjLqm3+Gfsqc0a5Imyx
aWaQ0fu6dE15vtDaEjZ0mCXft+X1ZZnujWj18705Dy9jiZKpzEfM11xYpLtf9yKq
LBp6AL1HN7lC/1Kai4EMFqbN1AysM/qTo0oLJetiD+tPt7qYzS6VxV9BRrkoSCrX
AgMBAAGjggH6MIIB9jAdBgNVHQ4EFgQUa+RJwMSIJQvV0h2YJnAp+jCsU30wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB+BggrBgEF
BQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMzJlMzQzNDJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM1MzYzMjMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnAywwDQYJKoZIhvcNAQEL
BQADggEBAHRQCpMIYcZc1VamC+MWoe/CVxzW8WY5Nps++Ls6aIZJcqz1wOLn3+ui
kO7pI0vNg7a4abqLgToJfWhci/CE4mNaIdCFIvWnLvpfT0B+yelBLAeG98AB91hj
gVekLur9tsvzbnwttLY7DOmWUOMWn5/zKZAqUY8MgPkqP98NxOa1X0nE0wQGGcAm
csuY2UQHEiynHnqWmE+o8dwjwwcKmc342VIkoA07mWLq9FII0cotiYoGRpkbLwxs
JFxHdrnGrWSuFdESXpFfSQqMsVdclaw0wt08DaN76UDxsI0iIbmqJFN25rebYjGs
P7ES6hThgQnAn1GyibxuHhm/cXDRAGs=
-----END CERTIFICATE-----