Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37312e3136302e302f32322d3234203d3e2030.roa
File:                     3130332e37312e3136302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          qTAvqvgCU8TCCKA3FrgEOV2ExW3GAdZTFyTo9Zf7qZU=
Subject key identifier:   70:12:32:C2:AD:B8:6C:DF:5F:74:34:D7:25:2F:72:BA:1E:E2:B2:ED
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5471F6CC60B2A6DE4500481FB3C417B20F01055B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37312e3136302e302f32322d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:11:57 +0000
ROA not before:           Mon 31 Jan 2022 04:06:57 +0000
ROA not after:            Tue 31 Jan 2023 04:11:57 +0000
asID:                     0
IP address blocks:        103.71.160.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:71:f6:cc:60:b2:a6:de:45:00:48:1f:b3:c4:17:b2:0f:01:05:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 04:06:57 2022 GMT
            Not After : Jan 31 04:11:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:33:a3:f5:e6:bf:0f:12:55:2d:0d:15:61:
                    24:83:5f:2b:1f:af:7a:b2:da:84:67:31:eb:3c:e6:
                    fe:e2:c7:e4:08:c6:d2:6a:30:96:bb:eb:80:37:97:
                    39:a7:1b:ed:d1:37:3f:c1:19:fb:10:8e:e4:e7:7c:
                    e2:ba:36:41:48:a8:76:6f:dc:03:11:cd:4c:47:67:
                    ce:e6:a8:9c:b6:cc:57:40:29:6a:a5:39:28:3c:96:
                    c0:12:4b:37:51:87:5c:57:1f:93:19:5e:8d:2f:87:
                    6d:00:b0:be:e6:4b:53:21:14:60:77:14:eb:8c:19:
                    ba:fd:be:01:ed:c9:76:18:80:0f:48:9f:d9:d0:cb:
                    5b:a5:7e:c5:03:57:42:d0:53:d4:ac:c9:7c:02:eb:
                    be:15:85:c4:1e:c6:40:39:df:ab:ed:15:0a:75:7b:
                    9a:1c:23:75:97:86:55:d2:ff:6d:1a:33:33:0a:06:
                    18:3e:60:9f:27:18:b6:07:f5:de:1f:fe:26:56:4a:
                    fa:b9:f4:af:c7:d9:0a:ce:a2:3b:f7:97:4f:1e:f8:
                    3a:28:8b:53:06:c6:55:c4:04:3f:57:25:87:8d:aa:
                    2f:09:b0:68:88:31:89:e7:26:7a:29:90:7b:f2:9a:
                    4e:a5:af:29:80:b0:0a:0f:f5:d6:9c:d0:df:37:69:
                    21:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:12:32:C2:AD:B8:6C:DF:5F:74:34:D7:25:2F:72:BA:1E:E2:B2:ED
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37312e3136302e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:d0:bb:94:92:c6:bd:29:de:b8:cc:48:36:bb:10:7c:3d:04:
         6c:cb:42:d2:c5:6c:85:38:da:90:be:6c:a5:55:05:13:04:b3:
         99:06:95:a3:e7:c7:f8:c2:7b:14:a0:08:1d:af:6e:af:ee:6c:
         3a:27:d7:dd:da:b9:00:7f:d5:4c:39:3d:1e:71:11:90:48:61:
         a2:ab:5e:72:93:60:6d:89:eb:67:20:ec:ca:3d:49:e5:5f:4d:
         89:f7:12:13:c9:bd:00:82:7a:3a:b0:5d:11:5e:93:6e:2a:a1:
         15:5b:d9:74:13:fd:25:d6:3d:1a:b2:b7:86:0b:66:12:79:61:
         b9:a4:a8:5c:dd:39:ca:26:20:e1:b8:a6:7c:59:6a:8a:46:7b:
         20:31:6f:c5:c1:9d:fc:a0:a3:f9:08:6d:1a:a5:91:6c:69:0d:
         30:1d:83:67:4b:b2:5e:3e:64:5e:8e:34:75:d8:39:f6:3b:47:
         89:3d:b8:b5:cb:4a:da:ee:61:d6:d5:b2:e3:b4:75:0d:40:8e:
         8e:06:19:23:ea:d8:8f:b0:4e:bc:6f:4b:ed:61:3b:54:8e:34:
         cd:28:4a:2d:57:ee:b8:f1:02:6f:3f:ed:91:53:53:c0:d9:2c:
         00:63:7f:74:92:23:cf:08:7d:4f:9b:67:0b:31:f9:c6:f2:76:
         89:65:2e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----