Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34392e3138342e302f32322d3234203d3e2030.roa
File:                     3130332e34392e3138342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          8+z1zZV8bFVnMh8EHHvUvi8vA+6L22t6ku+aqm3EdU8=
Subject key identifier:   44:DE:CB:44:50:F7:9A:20:04:FF:56:C5:F8:92:DD:3D:3D:5E:F8:6A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       217EBCA401BF9864FE912BE77EF262281D8E8368
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34392e3138342e302f32322d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:05:26 +0000
ROA not before:           Mon 31 Jan 2022 04:00:26 +0000
ROA not after:            Tue 31 Jan 2023 04:05:26 +0000
asID:                     0
IP address blocks:        103.49.184.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7e:bc:a4:01:bf:98:64:fe:91:2b:e7:7e:f2:62:28:1d:8e:83:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 04:00:26 2022 GMT
            Not After : Jan 31 04:05:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:21:a0:e3:42:75:f7:6d:9d:b3:a8:05:3a:
                    8c:29:e7:3b:69:27:b6:db:d4:c5:26:8e:38:51:d6:
                    65:19:0e:79:89:db:55:9f:f7:9a:11:1f:38:ca:22:
                    e0:01:39:fb:48:eb:1b:37:8d:02:2e:cf:40:b5:89:
                    aa:4e:0a:da:79:53:6e:af:0a:eb:f5:79:47:dd:2d:
                    79:aa:88:98:ae:5f:e4:47:99:d1:1a:70:6c:18:02:
                    d9:95:cf:fa:d3:47:94:97:5e:95:d4:ff:e7:01:71:
                    8c:00:2d:9c:d0:ad:62:e5:f6:d3:bd:ce:d7:ca:a4:
                    6c:7d:22:d3:3d:6f:a9:5f:99:0c:dc:b9:d2:e2:3a:
                    21:e9:ef:3b:8c:bf:a9:59:9e:ed:34:eb:bf:15:94:
                    d9:30:95:3d:b2:be:13:5d:42:5f:8e:19:0e:35:bd:
                    3b:dd:5c:6d:0c:39:fe:d1:ff:b0:9b:56:54:b9:5f:
                    7c:52:33:2f:88:94:62:3a:ab:16:58:d1:ca:90:6f:
                    cd:4a:71:8b:be:cc:32:3a:fd:43:8f:aa:c3:b6:ae:
                    6c:fe:8a:cd:0f:7d:d1:0f:bc:6c:19:ad:a8:0f:3c:
                    c9:4b:66:70:02:a2:b0:77:4a:00:99:99:de:31:c4:
                    66:37:49:b9:e0:b2:59:4d:72:1d:63:b9:4a:20:a8:
                    05:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DE:CB:44:50:F7:9A:20:04:FF:56:C5:F8:92:DD:3D:3D:5E:F8:6A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34392e3138342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:f6:ab:ac:0f:4a:4d:0e:ec:5f:e2:b0:ac:5b:f5:06:c0:
         6a:db:42:ac:38:13:9e:d3:33:61:88:79:74:e5:3e:29:b7:a4:
         25:d3:3f:f7:b0:95:94:6f:72:3a:f2:02:28:8e:da:be:84:fd:
         5d:d6:c0:57:d4:0d:3f:78:19:00:a5:b0:51:4d:f2:9e:c0:e2:
         98:62:73:2c:36:97:0f:91:7d:87:d8:0d:5f:61:3b:d4:37:db:
         f6:55:e2:be:1c:9f:72:9f:ec:c4:91:ae:1f:ff:49:09:bf:46:
         d1:55:ad:d8:4d:fb:fe:38:28:2e:ae:d6:9f:4f:73:c3:b3:90:
         b2:60:3b:1e:22:8a:ea:86:dc:bb:13:15:b2:99:00:71:d4:b4:
         8f:ee:7e:8b:67:4d:d4:c1:0f:2a:ef:8e:97:bc:75:44:d4:10:
         c1:7a:f8:8c:72:97:6a:93:66:90:2f:51:17:1a:0c:02:78:9f:
         fe:b4:88:db:3d:c7:32:1b:27:c3:2b:cc:5d:22:46:7d:02:bf:
         23:11:df:61:f2:f8:4e:f1:35:d5:6e:09:6c:6a:6b:2a:6e:da:
         67:d6:21:b4:ac:28:32:13:d6:db:05:09:ff:54:ed:65:d8:46:
         3f:c3:48:07:b0:a6:46:a3:12:3f:2c:06:ce:63:2f:f8:3b:f4:
         12:46:3a:99
-----BEGIN CERTIFICATE-----
MIIG/zCCBeegAwIBAgIUIX68pAG/mGT+kSvnfvJiKB2Og2gwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDEzMTA0MDAyNloX
DTIzMDEzMTA0MDUyNlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDA5QUM3MjFBMEUzNDI3NUY3NkQ5REIzQTgwNTNBOEMyOUU3M0I2OTI3QjZE
QkQ0QzUyNjhFMzg1MUQ2NjUxOTBFNzk4OURCNTU5RkY3OUExMTFGMzhDQTIyRTAw
MTM5RkI0OEVCMUIzNzhEMDIyRUNGNDBCNTg5QUE0RTBBREE3OTUzNkVBRjBBRUJG
NTc5NDdERDJENzlBQTg4OThBRTVGRTQ0Nzk5RDExQTcwNkMxODAyRDk5NUNGRkFE
MzQ3OTQ5NzVFOTVENEZGRTcwMTcxOEMwMDJEOUNEMEFENjJFNUY2RDNCRENFRDdD
QUE0NkM3RDIyRDMzRDZGQTk1Rjk5MENEQ0I5RDJFMjNBMjFFOUVGM0I4Q0JGQTk1
OTlFRUQzNEVCQkYxNTk0RDkzMDk1M0RCMkJFMTM1RDQyNUY4RTE5MEUzNUJEM0JE
RDVDNkQwQzM5RkVEMUZGQjA5QjU2NTRCOTVGN0M1MjMzMkY4ODk0NjIzQUFCMTY1
OEQxQ0E5MDZGQ0Q0QTcxOEJCRUNDMzIzQUZENDM4RkFBQzNCNkFFNkNGRThBQ0Qw
RjdERDEwRkJDNkMxOUFEQTgwRjNDQzk0QjY2NzAwMkEyQjA3NzRBMDA5OTk5REUz
MUM0NjYzNzQ5QjlFMEIyNTk0RDcyMUQ2M0I5NEEyMEE4MDVCMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaxyGg40J1922ds6gFOowp
5ztpJ7bb1MUmjjhR1mUZDnmJ21Wf95oRHzjKIuABOftI6xs3jQIuz0C1iapOCtp5
U26vCuv1eUfdLXmqiJiuX+RHmdEacGwYAtmVz/rTR5SXXpXU/+cBcYwALZzQrWLl
9tO9ztfKpGx9ItM9b6lfmQzcudLiOiHp7zuMv6lZnu00678VlNkwlT2yvhNdQl+O
GQ41vTvdXG0MOf7R/7CbVlS5X3xSMy+IlGI6qxZY0cqQb81KcYu+zDI6/UOPqsO2
rmz+is0PfdEPvGwZragPPMlLZnACorB3SgCZmd4xxGY3SbngsllNch1juUogqAWz
AgMBAAGjggH2MIIB8jAdBgNVHQ4EFgQURN7LRFD3miAE/1bF+JLdPT1e+GowHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB6BggrBgEF
BQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzNDM5MmUzMTM4MzQyZTMwMmYzMjMy
MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcxuDANBgkqhkiG9w0BAQsFAAOC
AQEAluH2q6wPSk0O7F/isKxb9QbAattCrDgTntMzYYh5dOU+KbekJdM/97CVlG9y
OvICKI7avoT9XdbAV9QNP3gZAKWwUU3ynsDimGJzLDaXD5F9h9gNX2E71Dfb9lXi
vhyfcp/sxJGuH/9JCb9G0VWt2E37/jgoLq7Wn09zw7OQsmA7HiKK6obcuxMVspkA
cdS0j+5+i2dN1MEPKu+Ol7x1RNQQwXr4jHKXapNmkC9RFxoMAnif/rSI2z3HMhsn
wyvMXSJGfQK/IxHfYfL4TvE11W4JbGprKm7aZ9YhtKwoMhPW2wUJ/1TtZdhGP8NI
B7CmRqMSPywGzmMv+Dv0EkY6mQ==
-----END CERTIFICATE-----