Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38342e3134302e302f32322d3234203d3e203535363939.roa
File:                     3130332e38342e3134302e302f32322d3234203d3e203535363939.roa (raw, json)
Hash identifier:          4Pl7h22AkgK24km5SW9YIucfGWGXk/YSf6hUZWYgIMI=
Subject key identifier:   7C:7C:BF:3F:E0:F0:5A:C2:7A:91:14:F9:0D:86:25:9A:15:B7:B4:BB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       560F1BA4F9722134FFA03E933DAE13E7BEB38D2B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38342e3134302e302f32322d3234203d3e203535363939.roa
Signing time:             Wed 27 Oct 2021 09:00:01 +0000
ROA not before:           Wed 27 Oct 2021 08:55:01 +0000
ROA not after:            Thu 27 Oct 2022 09:00:01 +0000
asID:                     55699
IP address blocks:        103.84.140.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0f:1b:a4:f9:72:21:34:ff:a0:3e:93:3d:ae:13:e7:be:b3:8d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 08:55:01 2021 GMT
            Not After : Oct 27 09:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a0:77:f3:90:73:f3:58:bb:03:dc:91:10:38:
                    ab:23:12:af:61:b0:9c:ce:6f:c1:87:89:4b:19:bf:
                    86:83:1a:9c:03:a8:d4:40:49:e9:07:39:57:b1:c5:
                    05:96:bc:54:fe:ac:e1:8c:1e:e5:5d:fa:74:3c:b8:
                    f2:b7:cd:70:a2:db:2c:6f:b3:bd:7c:54:fa:be:6d:
                    4a:36:16:50:ae:fa:8e:e9:2a:aa:6b:bf:f7:77:f1:
                    f7:fd:5b:60:cb:a0:f3:df:6d:7a:ad:27:47:72:c4:
                    78:bc:bb:a1:8e:7b:2a:62:24:d0:47:75:41:e5:43:
                    a1:21:ba:b3:9a:33:8f:5b:9b:49:94:b8:f2:17:fc:
                    5f:6e:4d:b3:24:8b:03:7c:1b:88:47:41:96:7f:c9:
                    11:2d:b6:68:5c:4a:80:72:2d:cb:ce:10:ec:1f:bc:
                    02:a1:c8:a9:54:61:27:8f:c6:d1:b6:9a:ac:ea:82:
                    8f:ba:43:60:7a:9e:79:d4:c9:a8:a9:91:62:3c:f6:
                    e1:cd:41:f2:e0:3c:33:2c:db:f1:ed:4b:26:47:3e:
                    f6:16:d7:ed:47:9a:47:6a:79:db:0b:55:9b:bc:16:
                    87:fd:5c:9e:8a:40:11:2b:5b:52:f6:9d:24:69:f8:
                    d9:bd:69:2e:7b:6a:27:c8:4b:2c:de:bf:3a:0e:da:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7C:BF:3F:E0:F0:5A:C2:7A:91:14:F9:0D:86:25:9A:15:B7:B4:BB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38342e3134302e302f32322d3234203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:9e:a5:ab:d3:7c:54:21:5f:2a:84:2f:35:87:e9:cb:4c:55:
         69:ae:c3:36:ce:8d:0f:aa:8a:b1:98:6c:d5:3c:ee:a4:f7:81:
         c2:e2:9b:0d:3e:1a:00:e9:cc:b2:8f:04:53:16:4a:4c:e9:e4:
         52:65:2f:40:09:77:74:3d:c3:91:f4:dc:b0:6f:8b:ab:8e:5d:
         61:20:34:d8:8a:37:4b:29:ca:6d:f1:68:f1:16:02:d4:ba:60:
         3d:3e:50:51:86:f3:05:31:7a:9f:59:49:4c:7f:35:ad:4d:9b:
         4e:0c:fc:83:39:14:d7:7b:2b:d4:a5:dd:42:3c:f3:81:ff:1d:
         ea:ee:39:13:3a:4f:e2:78:f1:25:56:78:69:19:1c:f9:d9:35:
         1d:c7:9a:81:02:3a:8e:24:b0:aa:7d:02:7a:bb:cc:f8:25:54:
         9a:ab:18:0d:c8:94:83:51:60:98:f5:d7:5f:c8:2b:f4:1b:51:
         a3:c8:7b:44:38:45:6d:9d:40:b0:36:2f:01:3a:c2:92:d3:a1:
         00:a2:4d:81:01:7a:d0:08:ec:ef:ec:5f:28:93:4f:8f:67:30:
         73:af:3a:47:5b:49:22:4e:24:7e:51:d5:e3:18:94:8b:53:08:
         b6:d9:7b:2d:57:d6:0d:d9:db:91:a0:d9:7e:c3:07:c5:33:e9:
         37:3a:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----