Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38332e3137382e302f32332d3234203d3e20313336303635.roa
File:                     3130332e38332e3137382e302f32332d3234203d3e20313336303635.roa (raw, json)
Hash identifier:          LgxV+F8zffnLDGQOZqR4hkFad0VIFY9wKa6ZnXR1MSs=
Subject key identifier:   7C:4B:3B:46:CF:01:D8:F4:83:CB:32:6A:79:72:7E:DE:DB:B7:C1:13
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       40B570665ED498E026FEA07E00EE89DCE6640876
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38332e3137382e302f32332d3234203d3e20313336303635.roa
Signing time:             Mon 26 Apr 2021 03:29:33 +0000
ROA not before:           Mon 26 Apr 2021 03:24:33 +0000
ROA not after:            Tue 26 Apr 2022 03:29:33 +0000
asID:                     136065
IP address blocks:        103.83.178.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b5:70:66:5e:d4:98:e0:26:fe:a0:7e:00:ee:89:dc:e6:64:08:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 26 03:24:33 2021 GMT
            Not After : Apr 26 03:29:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:f9:71:cb:26:e3:43:a1:dc:6a:49:3c:76:
                    4d:58:3d:a6:1c:b6:d4:fe:6b:7f:58:10:bc:af:c2:
                    cc:63:00:f7:e8:92:33:2a:d0:43:95:53:96:d9:48:
                    1a:26:42:4e:53:e6:8c:0e:76:f0:c9:47:84:82:2a:
                    74:92:2f:64:24:4b:9d:b1:7e:83:c6:f6:11:f5:39:
                    d7:51:53:91:16:b2:e2:56:b7:3d:de:d9:96:db:0a:
                    fe:f7:75:d0:c4:ab:1c:60:3c:57:04:0a:ef:7c:87:
                    21:aa:a9:3d:d8:5c:23:9a:0e:d2:ba:12:ef:29:ec:
                    9b:10:46:bd:19:da:29:7d:46:f9:c2:d5:eb:20:3f:
                    88:ae:23:18:b1:10:79:0c:d0:6e:85:b7:4f:eb:9c:
                    92:b7:7d:24:42:5e:46:5a:a6:11:39:b2:32:0f:66:
                    3d:2a:bc:77:0e:0b:0d:9e:31:54:a2:95:ae:79:81:
                    32:f9:b6:ca:7e:e5:04:29:1a:20:67:b7:c9:23:b6:
                    ae:e0:48:ab:c8:77:af:65:19:53:c3:8a:0f:17:ae:
                    94:ac:6e:21:30:54:77:33:36:bf:f5:90:47:97:45:
                    7c:71:df:23:34:2b:a2:8b:5f:f0:31:69:d7:c2:c1:
                    75:6d:a1:10:d1:a1:00:2e:72:ed:10:34:42:41:f4:
                    f1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4B:3B:46:CF:01:D8:F4:83:CB:32:6A:79:72:7E:DE:DB:B7:C1:13
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38332e3137382e302f32332d3234203d3e20313336303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:df:20:14:a1:e7:87:fd:fa:81:7c:91:e7:a7:b4:60:ae:89:
         13:0c:ea:10:71:83:ea:0f:57:ef:bf:bb:43:8c:f7:8e:be:eb:
         c3:ad:26:48:21:6c:f8:a6:d7:9e:36:1c:bc:c0:aa:01:85:21:
         3f:fd:fd:d5:2e:71:08:1a:a6:49:d1:19:b8:01:cb:c4:34:4f:
         5e:46:96:33:43:ee:6f:bd:4e:97:0c:7b:6f:a5:b1:40:9f:b7:
         70:74:4d:f2:d8:63:be:9f:14:5d:36:2a:90:13:ce:b7:a7:0c:
         71:56:3c:55:e6:b3:1a:08:f8:e0:88:02:29:f6:5c:07:1a:44:
         b5:55:19:9d:f4:7b:4d:35:c9:96:e0:58:44:6a:b1:b5:51:fe:
         50:99:d1:f1:1b:a3:32:1b:ea:e3:ea:ff:d2:1d:37:4d:28:ae:
         dd:df:f0:4a:4e:6e:3e:b2:47:a9:fd:be:22:eb:8e:b7:d5:23:
         fb:56:24:58:9c:85:8a:f6:bf:29:fc:53:40:69:a8:53:02:c0:
         81:94:5a:57:ca:df:c4:62:d8:fe:3d:03:51:22:bb:dd:85:46:
         8f:0c:15:4e:7a:d6:c5:b5:81:1f:51:80:c3:ab:b0:64:34:29:
         58:0a:18:19:b4:99:bf:64:fe:03:5c:f4:f1:d7:fe:18:a8:8d:
         0e:51:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----