Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38312e3234362e302f32342d3234203d3e203539323732.roa
File:                     3130332e38312e3234362e302f32342d3234203d3e203539323732.roa (raw, json)
Hash identifier:          AUy06LaOCNoef2Dc7COjJX1EQT75987wYcgoImCYptE=
Subject key identifier:   72:8C:6C:BA:4C:88:20:0C:50:E4:CA:1C:30:3E:A2:4D:2D:4E:2C:56
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3641B94EE384B9DD4E4851ED6966B5A1D71151DE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38312e3234362e302f32342d3234203d3e203539323732.roa
Signing time:             Tue 15 Feb 2022 10:00:00 +0000
ROA not before:           Tue 15 Feb 2022 09:55:00 +0000
ROA not after:            Wed 15 Feb 2023 10:00:00 +0000
asID:                     59272
IP address blocks:        103.81.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:41:b9:4e:e3:84:b9:dd:4e:48:51:ed:69:66:b5:a1:d7:11:51:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 15 09:55:00 2022 GMT
            Not After : Feb 15 10:00:00 2023 GMT
        Subject: CN=3082010A0282010100D33E584BC2C0F4CA965F1CD155EC5FC8C27AA9B2525D49A232608D7217C01F6A6DA27B8AFA776A67CEC8FDFDACC565C0116E23B14E8FF7E02EA807B51F00AEDFFAC3FAE63B3DA3CB27515CC7CC4CAA0BCF5F7B5F9D53C69B5C2A8FB9E2786E354382EEE45D8C0D51C7A40A75DD40999757AD0C7F23946A53EBECB5568176C3A1D25CF385F40C33FA3357C8E183C9F32053654EDD092774AA52E0895C7B07FC839EB6F55136B52BCE654C92D346BFE1D8F05BB790A73EA5B9367127D9456151E374D12886494B6B2520CD16B515BD2504790F8A5D8AA20788833B421D0C9D50D6D7E01EB598DA1778B43978DD67CDD7229394284D20EF828C1022373A553457FB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:58:4b:c2:c0:f4:ca:96:5f:1c:d1:55:ec:
                    5f:c8:c2:7a:a9:b2:52:5d:49:a2:32:60:8d:72:17:
                    c0:1f:6a:6d:a2:7b:8a:fa:77:6a:67:ce:c8:fd:fd:
                    ac:c5:65:c0:11:6e:23:b1:4e:8f:f7:e0:2e:a8:07:
                    b5:1f:00:ae:df:fa:c3:fa:e6:3b:3d:a3:cb:27:51:
                    5c:c7:cc:4c:aa:0b:cf:5f:7b:5f:9d:53:c6:9b:5c:
                    2a:8f:b9:e2:78:6e:35:43:82:ee:e4:5d:8c:0d:51:
                    c7:a4:0a:75:dd:40:99:97:57:ad:0c:7f:23:94:6a:
                    53:eb:ec:b5:56:81:76:c3:a1:d2:5c:f3:85:f4:0c:
                    33:fa:33:57:c8:e1:83:c9:f3:20:53:65:4e:dd:09:
                    27:74:aa:52:e0:89:5c:7b:07:fc:83:9e:b6:f5:51:
                    36:b5:2b:ce:65:4c:92:d3:46:bf:e1:d8:f0:5b:b7:
                    90:a7:3e:a5:b9:36:71:27:d9:45:61:51:e3:74:d1:
                    28:86:49:4b:6b:25:20:cd:16:b5:15:bd:25:04:79:
                    0f:8a:5d:8a:a2:07:88:83:3b:42:1d:0c:9d:50:d6:
                    d7:e0:1e:b5:98:da:17:78:b4:39:78:dd:67:cd:d7:
                    22:93:94:28:4d:20:ef:82:8c:10:22:37:3a:55:34:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8C:6C:BA:4C:88:20:0C:50:E4:CA:1C:30:3E:A2:4D:2D:4E:2C:56
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38312e3234362e302f32342d3234203d3e203539323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:08:e1:f2:e5:b2:ac:58:6e:e6:a2:7e:ce:63:89:4a:95:
         ad:cd:5a:16:62:45:26:ee:d7:43:58:08:c9:b7:fb:ff:64:cb:
         61:22:a6:ed:27:da:c0:21:ec:fc:28:a5:58:c4:81:54:4b:74:
         33:93:e1:75:eb:21:82:c2:17:58:94:90:fa:a3:e3:22:8f:34:
         fd:c2:08:4b:9c:ba:6e:e1:b0:2e:95:92:93:18:57:fc:a9:13:
         c3:b4:ed:4a:20:b7:15:7b:98:2a:72:61:0c:2d:ce:6f:d7:00:
         7c:d3:bf:c7:eb:f5:27:51:6d:b0:94:2a:e8:3f:b1:b5:3f:62:
         5e:d6:cf:c3:2f:f5:b1:30:10:39:00:58:52:3f:40:a9:73:00:
         db:37:0e:04:fd:3e:ca:60:52:16:00:d8:08:1b:4d:8e:d7:5a:
         6c:dd:38:4c:4b:c8:e9:0c:76:61:d5:5f:b1:d5:14:a0:01:75:
         b1:32:bd:4a:5f:5a:74:40:ca:e2:f2:1b:fa:26:04:cf:f5:30:
         03:c1:0f:f3:7e:da:25:6f:60:fb:86:93:8b:11:9d:e1:0f:58:
         e0:e7:26:e7:af:da:a9:24:a6:0d:bb:af:b4:ba:14:cc:92:a3:
         22:6b:e1:c5:b2:87:43:d7:fe:1a:bf:38:b7:4e:52:22:56:ef:
         29:32:82:79
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUNkG5TuOEud1OSFHtaWa1odcRUd4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIxNTA5NTUwMFoX
DTIzMDIxNTEwMDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMzNFNTg0QkMyQzBGNENBOTY1RjFDRDE1NUVDNUZDOEMyN0FBOUIyNTI1
RDQ5QTIzMjYwOEQ3MjE3QzAxRjZBNkRBMjdCOEFGQTc3NkE2N0NFQzhGREZEQUND
NTY1QzAxMTZFMjNCMTRFOEZGN0UwMkVBODA3QjUxRjAwQUVERkZBQzNGQUU2M0Iz
REEzQ0IyNzUxNUNDN0NDNENBQTBCQ0Y1RjdCNUY5RDUzQzY5QjVDMkE4RkI5RTI3
ODZFMzU0MzgyRUVFNDVEOEMwRDUxQzdBNDBBNzVERDQwOTk5NzU3QUQwQzdGMjM5
NDZBNTNFQkVDQjU1NjgxNzZDM0ExRDI1Q0YzODVGNDBDMzNGQTMzNTdDOEUxODND
OUYzMjA1MzY1NEVERDA5Mjc3NEFBNTJFMDg5NUM3QjA3RkM4MzlFQjZGNTUxMzZC
NTJCQ0U2NTRDOTJEMzQ2QkZFMUQ4RjA1QkI3OTBBNzNFQTVCOTM2NzEyN0Q5NDU2
MTUxRTM3NEQxMjg4NjQ5NEI2QjI1MjBDRDE2QjUxNUJEMjUwNDc5MEY4QTVEOEFB
MjA3ODg4MzNCNDIxRDBDOUQ1MEQ2RDdFMDFFQjU5OERBMTc3OEI0Mzk3OERENjdD
REQ3MjI5Mzk0Mjg0RDIwRUY4MjhDMTAyMjM3M0E1NTM0NTdGQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPlhLwsD0ypZfHNFV7F/I
wnqpslJdSaIyYI1yF8Afam2ie4r6d2pnzsj9/azFZcARbiOxTo/34C6oB7UfAK7f
+sP65js9o8snUVzHzEyqC89fe1+dU8abXCqPueJ4bjVDgu7kXYwNUcekCnXdQJmX
V60MfyOUalPr7LVWgXbDodJc84X0DDP6M1fI4YPJ8yBTZU7dCSd0qlLgiVx7B/yD
nrb1UTa1K85lTJLTRr/h2PBbt5CnPqW5NnEn2UVhUeN00SiGSUtrJSDNFrUVvSUE
eQ+KXYqiB4iDO0IdDJ1Q1tfgHrWY2hd4tDl43WfN1yKTlChNIO+CjBAiNzpVNFf7
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUcoxsukyIIAxQ5MocMD6iTS1OLFYwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzgzMTJlMzIzNDM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzOTMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdR9jANBgkqhkiG
9w0BAQsFAAOCAQEAfiMI4fLlsqxYbuaifs5jiUqVrc1aFmJFJu7XQ1gIybf7/2TL
YSKm7SfawCHs/CilWMSBVEt0M5PhdeshgsIXWJSQ+qPjIo80/cIIS5y6buGwLpWS
kxhX/KkTw7TtSiC3FXuYKnJhDC3Ob9cAfNO/x+v1J1FtsJQq6D+xtT9iXtbPwy/1
sTAQOQBYUj9AqXMA2zcOBP0+ymBSFgDYCBtNjtdabN04TEvI6Qx2YdVfsdUUoAF1
sTK9Sl9adEDK4vIb+iYEz/UwA8EP837aJW9g+4aTixGd4Q9Y4Ocm56/aqSSmDbuv
tLoUzJKjImvhxbKHQ9f+Gr84t05SIlbvKTKCeQ==
-----END CERTIFICATE-----