Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e35312e3133312e302f32342d3234203d3e20313331373736.roa
File:                     3130332e35312e3133312e302f32342d3234203d3e20313331373736.roa (raw, json)
Hash identifier:          aKBV2H3ozWji3HU/9EG9fqLzNF6FHVwO9PSmnvvGH58=
Subject key identifier:   D0:04:5F:85:F3:F2:B6:EA:76:60:A5:37:24:7E:EE:8C:6D:83:B0:D4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       25B056248628B008FB4437551323A32F80835725
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e35312e3133312e302f32342d3234203d3e20313331373736.roa
Signing time:             Thu 02 Sep 2021 06:51:44 +0000
ROA not before:           Thu 02 Sep 2021 06:46:44 +0000
ROA not after:            Fri 02 Sep 2022 06:51:44 +0000
asID:                     131776
IP address blocks:        103.51.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b0:56:24:86:28:b0:08:fb:44:37:55:13:23:a3:2f:80:83:57:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  2 06:46:44 2021 GMT
            Not After : Sep  2 06:51:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bb:b7:ee:7d:0c:9d:62:19:07:f5:36:12:17:
                    66:e6:7c:de:44:c9:9a:38:a1:8c:8f:0d:e4:14:a9:
                    d5:1e:71:49:34:aa:89:4e:7d:a4:0f:f8:c5:d3:6b:
                    0c:cb:70:99:21:b6:46:a9:11:fd:79:c7:0c:03:5b:
                    78:3c:c3:f7:bd:32:20:59:5c:73:ae:34:f1:6e:a7:
                    7d:a4:22:b1:b4:69:f9:1f:b7:84:f7:d0:ad:a5:6f:
                    a1:94:d1:ae:43:a4:14:a0:25:74:2c:aa:c8:2c:90:
                    c3:7b:47:78:49:d3:e3:79:df:5c:42:25:91:fd:e4:
                    59:26:78:5b:fa:e8:3b:3e:52:45:ad:29:90:53:7f:
                    38:f2:6e:70:1b:65:6f:bb:47:19:78:e4:3e:5e:ca:
                    8b:02:85:a2:c5:32:ea:49:1a:87:7c:4c:c0:38:29:
                    7d:61:12:de:5c:43:9d:a1:8e:7d:f2:33:a8:ce:07:
                    ec:89:c8:d6:db:ae:ed:05:6a:f7:d2:3a:d5:71:eb:
                    67:f3:15:9f:55:f1:e3:72:03:01:57:6d:78:6f:2d:
                    9e:51:4f:59:20:b1:78:b7:99:34:e4:f4:be:ed:8c:
                    08:5f:81:05:eb:84:37:d5:56:d4:fc:c5:cc:51:53:
                    8f:e1:f4:47:f1:a4:01:b7:c7:51:c9:3d:20:49:bc:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:04:5F:85:F3:F2:B6:EA:76:60:A5:37:24:7E:EE:8C:6D:83:B0:D4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e35312e3133312e302f32342d3234203d3e20313331373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:7d:32:38:c5:6a:03:3c:a7:6c:9a:c4:86:a3:3f:4d:eb:
         0e:d0:82:f2:8e:fc:4d:6a:4a:f1:78:da:e4:03:8f:7d:50:88:
         fc:06:6d:b0:92:13:e2:dc:56:45:7d:74:24:04:d9:92:27:d7:
         5c:0f:a8:df:ea:b6:7b:2c:05:88:12:8c:8b:42:83:5b:d9:83:
         6d:dd:8e:66:e2:96:fe:02:d2:b2:b5:13:6a:90:c0:91:68:e0:
         6f:e4:e3:c7:81:46:df:4d:58:80:60:a3:5b:5e:b8:26:55:b1:
         60:e7:f3:f3:23:e0:c1:1c:18:a6:c2:53:7a:5a:98:0b:e4:38:
         52:3b:38:d3:a6:1c:e5:c1:41:64:c5:89:1c:47:5a:68:71:09:
         a5:d6:a0:6b:cc:6b:ad:0f:38:ac:8e:d1:1e:a2:3b:7d:c2:e7:
         25:95:8f:bd:cf:a9:a2:4d:b2:e6:72:dd:ad:66:6a:05:34:05:
         fc:ab:c5:eb:b8:90:f4:bf:62:c6:2c:c2:d0:e6:74:98:51:e7:
         03:b0:b6:f1:18:b1:d5:ae:fe:39:1b:7a:7d:ed:02:0d:bf:cb:
         e2:93:95:32:7d:5b:b5:45:c3:80:1e:b9:60:08:69:c2:ad:f8:
         f2:06:d5:d2:88:3c:8e:ac:80:93:73:e2:97:aa:b2:d3:10:9a:
         b6:63:fe:01
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUJbBWJIYosAj7RDdVEyOjL4CDVyUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkwMjA2NDY0NFoX
DTIyMDkwMjA2NTE0NFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFMkJCQjdFRTdEMEM5RDYyMTkwN0Y1MzYxMjE3NjZFNjdDREU0NEM5OUEz
OEExOEM4RjBERTQxNEE5RDUxRTcxNDkzNEFBODk0RTdEQTQwRkY4QzVEMzZCMEND
QjcwOTkyMUI2NDZBOTExRkQ3OUM3MEMwMzVCNzgzQ0MzRjdCRDMyMjA1OTVDNzNB
RTM0RjE2RUE3N0RBNDIyQjFCNDY5RjkxRkI3ODRGN0QwQURBNTZGQTE5NEQxQUU0
M0E0MTRBMDI1NzQyQ0FBQzgyQzkwQzM3QjQ3Nzg0OUQzRTM3OURGNUM0MjI1OTFG
REU0NTkyNjc4NUJGQUU4M0IzRTUyNDVBRDI5OTA1MzdGMzhGMjZFNzAxQjY1NkZC
QjQ3MTk3OEU0M0U1RUNBOEIwMjg1QTJDNTMyRUE0OTFBODc3QzRDQzAzODI5N0Q2
MTEyREU1QzQzOURBMThFN0RGMjMzQThDRTA3RUM4OUM4RDZEQkFFRUQwNTZBRjdE
MjNBRDU3MUVCNjdGMzE1OUY1NUYxRTM3MjAzMDE1NzZENzg2RjJEOUU1MTRGNTky
MEIxNzhCNzk5MzRFNEY0QkVFRDhDMDg1RjgxMDVFQjg0MzdENTU2RDRGQ0M1Q0M1
MTUzOEZFMUY0NDdGMUE0MDFCN0M3NTFDOTNEMjA0OUJDNURDRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiu7fufQydYhkH9TYSF2bm
fN5EyZo4oYyPDeQUqdUecUk0qolOfaQP+MXTawzLcJkhtkapEf15xwwDW3g8w/e9
MiBZXHOuNPFup32kIrG0afkft4T30K2lb6GU0a5DpBSgJXQsqsgskMN7R3hJ0+N5
31xCJZH95FkmeFv66Ds+UkWtKZBTfzjybnAbZW+7Rxl45D5eyosChaLFMupJGod8
TMA4KX1hEt5cQ52hjn3yM6jOB+yJyNbbru0FavfSOtVx62fzFZ9V8eNyAwFXbXhv
LZ5RT1kgsXi3mTTk9L7tjAhfgQXrhDfVVtT8xcxRU4/h9EfxpAG3x1HJPSBJvF3N
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQU0ARfhfPytup2YKU3JH7ujG2DsNQwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzUzMTJlMzEzMzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzODMA0GCSqG
SIb3DQEBCwUAA4IBAQBMNH0yOMVqAzynbJrEhqM/TesO0ILyjvxNakrxeNrkA499
UIj8Bm2wkhPi3FZFfXQkBNmSJ9dcD6jf6rZ7LAWIEoyLQoNb2YNt3Y5m4pb+AtKy
tRNqkMCRaOBv5OPHgUbfTViAYKNbXrgmVbFg5/PzI+DBHBimwlN6WpgL5DhSOzjT
phzlwUFkxYkcR1pocQml1qBrzGutDzisjtEeojt9wucllY+9z6miTbLmct2tZmoF
NAX8q8XruJD0v2LGLMLQ5nSYUecDsLbxGLHVrv45G3p97QINv8vik5UyfVu1RcOA
HrlgCGnCrfjyBtXSiDyOrICTc+KXqrLTEJq2Y/4B
-----END CERTIFICATE-----