Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e3233342e302f32342d3234203d3e20313335343739.roa
File:                     3130332e37352e3233342e302f32342d3234203d3e20313335343739.roa (raw, json)
Hash identifier:          5Udw+2AHMnJU3M3IWizVkQouFgeHP7aSaqplOspOYtw=
Subject key identifier:   B3:9F:9B:D8:26:74:13:AA:1A:6F:7F:C8:2C:A0:0C:BE:78:2F:4A:EA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       555FF5B9BC6118E6384077927074DCCE57E5B6D2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e3233342e302f32342d3234203d3e20313335343739.roa
Signing time:             Tue 12 Oct 2021 03:00:00 +0000
ROA not before:           Tue 12 Oct 2021 02:55:00 +0000
ROA not after:            Wed 12 Oct 2022 03:00:00 +0000
asID:                     135479
IP address blocks:        103.75.234.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5f:f5:b9:bc:61:18:e6:38:40:77:92:70:74:dc:ce:57:e5:b6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 12 02:55:00 2021 GMT
            Not After : Oct 12 03:00:00 2022 GMT
        Subject: CN=3082010A0282010100EC868B5767ADCCB088064514639A70ABC5308A1DFCB63D924CF3A1105EC5EC3B27DA223D5A2F39AD92082F05C11744BFB0A852AC4962EF2A38384B058FABA4EA24D3D001C79185558040A4231B5967CB0AAE58C035A06F0524EAE79951E8A8BB3DAE8A396F949FF2EB5753F86F192D5F7D3C6509D36EAC053EC501D0B090C2ACE6570AC4AA28F624DE58727C3CA225756E32A67E2EFB0B5E62182C8EB8454878BAE76BD6600A48A67C6BA6F6CB5439F580DB137F9A84195827207C45B1464CCD7DFEE88B13EAE0EA75E0A86C19A7F20C277C64D9F540DF095077149DC2E76922FAB00A4458AEB7F2AB4BC5B7A3DD6ECE48859C223F842CE3C44A81F8702F2B5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:86:8b:57:67:ad:cc:b0:88:06:45:14:63:9a:
                    70:ab:c5:30:8a:1d:fc:b6:3d:92:4c:f3:a1:10:5e:
                    c5:ec:3b:27:da:22:3d:5a:2f:39:ad:92:08:2f:05:
                    c1:17:44:bf:b0:a8:52:ac:49:62:ef:2a:38:38:4b:
                    05:8f:ab:a4:ea:24:d3:d0:01:c7:91:85:55:80:40:
                    a4:23:1b:59:67:cb:0a:ae:58:c0:35:a0:6f:05:24:
                    ea:e7:99:51:e8:a8:bb:3d:ae:8a:39:6f:94:9f:f2:
                    eb:57:53:f8:6f:19:2d:5f:7d:3c:65:09:d3:6e:ac:
                    05:3e:c5:01:d0:b0:90:c2:ac:e6:57:0a:c4:aa:28:
                    f6:24:de:58:72:7c:3c:a2:25:75:6e:32:a6:7e:2e:
                    fb:0b:5e:62:18:2c:8e:b8:45:48:78:ba:e7:6b:d6:
                    60:0a:48:a6:7c:6b:a6:f6:cb:54:39:f5:80:db:13:
                    7f:9a:84:19:58:27:20:7c:45:b1:46:4c:cd:7d:fe:
                    e8:8b:13:ea:e0:ea:75:e0:a8:6c:19:a7:f2:0c:27:
                    7c:64:d9:f5:40:df:09:50:77:14:9d:c2:e7:69:22:
                    fa:b0:0a:44:58:ae:b7:f2:ab:4b:c5:b7:a3:dd:6e:
                    ce:48:85:9c:22:3f:84:2c:e3:c4:4a:81:f8:70:2f:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9F:9B:D8:26:74:13:AA:1A:6F:7F:C8:2C:A0:0C:BE:78:2F:4A:EA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e3233342e302f32342d3234203d3e20313335343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:0e:18:9d:c9:a8:72:62:f2:7a:50:c5:f1:81:6c:dc:97:
         30:02:60:7c:da:cf:ee:df:d7:ad:ed:7a:d1:5d:4c:0d:b5:47:
         fb:3c:18:c9:71:93:3a:f7:8f:01:b7:c7:ed:f7:72:79:92:4d:
         ec:99:a9:f7:5d:42:09:43:b5:95:76:b1:46:1d:9d:17:37:50:
         d9:3d:aa:46:46:56:98:2a:df:f9:b8:5a:08:82:a7:0f:d8:19:
         26:7a:ad:2d:9b:db:3e:f5:dc:84:b8:6c:62:a5:fe:61:01:e7:
         b1:73:ea:57:dd:65:c2:98:6d:e9:c7:19:c3:2d:43:dd:7e:70:
         0e:0b:52:c3:82:6b:44:2b:4f:7e:9d:82:9d:44:4c:62:0f:94:
         5a:8d:fa:8e:5c:67:81:7b:4a:fc:94:74:97:a7:a4:6d:73:9f:
         90:18:7d:f8:19:90:81:3c:80:b3:83:fe:5b:61:b5:08:75:27:
         f8:db:e4:12:26:58:c6:6a:1b:44:db:cb:c3:6e:17:e8:ab:2e:
         17:95:cf:27:43:03:a1:fe:55:6e:ef:0c:48:01:ca:e1:97:56:
         5c:f5:5e:88:ea:79:8f:c4:bd:ef:5e:4f:a5:b1:9c:1a:d8:7a:
         3b:c5:79:ef:2f:79:c0:4d:22:24:12:f9:33:5c:66:b7:2c:66:
         49:69:4e:56
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUVV/1ubxhGOY4QHeScHTczlflttIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAxMjAyNTUwMFoX
DTIyMTAxMjAzMDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFQzg2OEI1NzY3QURDQ0IwODgwNjQ1MTQ2MzlBNzBBQkM1MzA4QTFERkNC
NjNEOTI0Q0YzQTExMDVFQzVFQzNCMjdEQTIyM0Q1QTJGMzlBRDkyMDgyRjA1QzEx
NzQ0QkZCMEE4NTJBQzQ5NjJFRjJBMzgzODRCMDU4RkFCQTRFQTI0RDNEMDAxQzc5
MTg1NTU4MDQwQTQyMzFCNTk2N0NCMEFBRTU4QzAzNUEwNkYwNTI0RUFFNzk5NTFF
OEE4QkIzREFFOEEzOTZGOTQ5RkYyRUI1NzUzRjg2RjE5MkQ1RjdEM0M2NTA5RDM2
RUFDMDUzRUM1MDFEMEIwOTBDMkFDRTY1NzBBQzRBQTI4RjYyNERFNTg3MjdDM0NB
MjI1NzU2RTMyQTY3RTJFRkIwQjVFNjIxODJDOEVCODQ1NDg3OEJBRTc2QkQ2NjAw
QTQ4QTY3QzZCQTZGNkNCNTQzOUY1ODBEQjEzN0Y5QTg0MTk1ODI3MjA3QzQ1QjE0
NjRDQ0Q3REZFRTg4QjEzRUFFMEVBNzVFMEE4NkMxOUE3RjIwQzI3N0M2NEQ5RjU0
MERGMDk1MDc3MTQ5REMyRTc2OTIyRkFCMDBBNDQ1OEFFQjdGMkFCNEJDNUI3QTNE
RDZFQ0U0ODg1OUMyMjNGODQyQ0UzQzQ0QTgxRjg3MDJGMkI1RjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDshotXZ63MsIgGRRRjmnCr
xTCKHfy2PZJM86EQXsXsOyfaIj1aLzmtkggvBcEXRL+wqFKsSWLvKjg4SwWPq6Tq
JNPQAceRhVWAQKQjG1lnywquWMA1oG8FJOrnmVHoqLs9roo5b5Sf8utXU/hvGS1f
fTxlCdNurAU+xQHQsJDCrOZXCsSqKPYk3lhyfDyiJXVuMqZ+LvsLXmIYLI64RUh4
uudr1mAKSKZ8a6b2y1Q59YDbE3+ahBlYJyB8RbFGTM19/uiLE+rg6nXgqGwZp/IM
J3xk2fVA3wlQdxSdwudpIvqwCkRYrrfyq0vFt6Pdbs5IhZwiP4Qs48RKgfhwLytf
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUs5+b2CZ0E6oab3/ILKAMvngvSuowHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzczNTJlMzIzMzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0vqMA0GCSqG
SIb3DQEBCwUAA4IBAQBROw4YncmocmLyelDF8YFs3JcwAmB82s/u39et7XrRXUwN
tUf7PBjJcZM6948Bt8ft93J5kk3sman3XUIJQ7WVdrFGHZ0XN1DZPapGRlaYKt/5
uFoIgqcP2Bkmeq0tm9s+9dyEuGxipf5hAeexc+pX3WXCmG3pxxnDLUPdfnAOC1LD
gmtEK09+nYKdRExiD5RajfqOXGeBe0r8lHSXp6Rtc5+QGH34GZCBPICzg/5bYbUI
dSf42+QSJljGahtE28vDbhfoqy4Xlc8nQwOh/lVu7wxIAcrhl1Zc9V6I6nmPxL3v
Xk+lsZwa2Ho7xXnvL3nATSIkEvkzXGa3LGZJaU5W
-----END CERTIFICATE-----