Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e332e34352e302f32342d3234203d3e203536323335.roa
File:                     3130332e332e34352e302f32342d3234203d3e203536323335.roa (raw, json)
Hash identifier:          OLkkRcHvAzVr+HDQOq+gll53XHDqpsUaTP3rcIQAFe8=
Subject key identifier:   43:5E:08:E4:82:DE:EF:3D:79:19:31:E0:C4:17:AB:F7:EB:DE:F2:EB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4072DC75CBC793FA675297217C07950C011705FB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e332e34352e302f32342d3234203d3e203536323335.roa
Signing time:             Fri 03 Sep 2021 08:03:14 +0000
ROA not before:           Fri 03 Sep 2021 07:58:14 +0000
ROA not after:            Sat 03 Sep 2022 08:03:14 +0000
asID:                     56235
IP address blocks:        103.3.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:72:dc:75:cb:c7:93:fa:67:52:97:21:7c:07:95:0c:01:17:05:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  3 07:58:14 2021 GMT
            Not After : Sep  3 08:03:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:03:a6:3b:a6:51:cd:41:c5:91:2a:f6:e9:
                    c4:b0:46:e2:27:7d:a2:d7:d1:5e:29:4a:22:8c:84:
                    31:1d:d1:2b:c3:8e:38:b8:0a:ea:6d:a5:af:93:0d:
                    89:0d:4a:42:2c:74:66:f1:d2:e1:65:63:ed:1a:ab:
                    04:ec:6d:de:93:3d:05:b5:2d:43:e2:c9:12:06:27:
                    69:6e:6b:b3:4b:18:03:f7:70:fc:5e:04:17:06:f6:
                    f4:49:9c:51:64:fc:20:b5:9e:8a:ec:00:c3:1e:fb:
                    4b:80:64:9b:2b:ae:9a:4c:e9:b1:00:2e:8a:f8:53:
                    1b:9d:c7:a3:1c:a1:0b:ee:96:7a:6b:ac:26:18:8b:
                    7a:ed:ba:d1:6a:9c:fd:8d:ed:b8:3d:37:6a:34:eb:
                    56:af:fd:fa:1e:50:90:99:c7:3d:ca:44:8f:f2:5c:
                    48:28:ab:ab:2a:78:06:38:3e:9d:cd:6f:a4:09:8c:
                    ca:c9:b6:28:55:36:ad:04:f9:6b:55:d7:af:15:bb:
                    84:e9:5b:ac:39:39:6c:a6:02:b4:62:d2:59:09:0c:
                    c6:60:24:b6:20:5f:88:91:c8:f9:6e:0f:e7:cd:e4:
                    d8:2d:8e:7c:b9:fd:e4:9d:1d:e8:00:f7:2b:8c:85:
                    f2:9b:23:09:b1:e0:0b:d2:2e:0a:d9:a3:11:c4:f8:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5E:08:E4:82:DE:EF:3D:79:19:31:E0:C4:17:AB:F7:EB:DE:F2:EB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e332e34352e302f32342d3234203d3e203536323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:84:f5:4c:b2:0c:31:18:fa:8a:d6:92:2c:c3:50:63:d9:dc:
         52:a9:7e:37:8d:f2:86:7d:cc:0b:81:59:e3:de:8b:e9:65:dc:
         b4:0f:51:bc:e3:47:2b:a8:c3:d3:9e:d5:b4:00:4f:6e:e8:92:
         0c:d5:cc:f6:fa:e7:50:da:f6:98:06:5b:7a:fb:cc:4c:0a:68:
         1c:1a:0b:e4:43:64:f3:1d:43:0c:49:76:b1:28:a9:c7:25:9d:
         57:b4:ee:de:cb:a0:9c:36:05:c1:68:b8:80:db:0e:12:54:0a:
         5f:36:1e:f3:ae:d7:28:5f:60:3e:23:45:a0:74:46:72:ac:89:
         89:f2:4f:df:6c:f5:ef:2b:61:86:08:0c:78:d6:98:9e:18:98:
         ec:29:3f:b8:0d:b1:69:9e:0b:a7:59:0e:37:b5:87:37:2f:d5:
         b3:b5:14:96:f6:4c:3e:96:fa:19:88:e6:fc:37:5c:50:03:28:
         eb:94:91:04:ef:4a:62:1f:ce:55:63:6c:a4:fe:39:86:ce:4a:
         72:eb:ed:6d:a8:8b:a4:71:fb:31:06:e5:46:dc:12:75:5d:a0:
         01:49:37:c9:74:f2:52:44:e5:49:3e:2d:11:46:fd:b6:ee:35:
         bc:ef:db:45:44:28:b5:b6:db:a2:d1:d7:0c:8d:ea:75:27:b6:
         29:11:8c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----