Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39302e3231302e302f32342d3234203d3e20313336313033.roa
File:                     3130332e39302e3231302e302f32342d3234203d3e20313336313033.roa (raw, json)
Hash identifier:          X/b5hTUm8q3HGCHvZEQ/6uPDjduMYvZK3jPAFdH2xq8=
Subject key identifier:   BB:A3:C5:D7:A4:9A:7A:8E:24:9A:0E:4C:A1:40:EF:27:0C:45:90:69
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       652D99AD55858065961560475A5C6E681AA35209
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39302e3231302e302f32342d3234203d3e20313336313033.roa
Signing time:             Fri 03 Sep 2021 08:00:20 +0000
ROA not before:           Fri 03 Sep 2021 07:55:20 +0000
ROA not after:            Sat 03 Sep 2022 08:00:20 +0000
asID:                     136103
IP address blocks:        103.90.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2d:99:ad:55:85:80:65:96:15:60:47:5a:5c:6e:68:1a:a3:52:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  3 07:55:20 2021 GMT
            Not After : Sep  3 08:00:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7b:77:60:93:3b:68:f5:10:98:7b:a4:eb:f1:
                    90:f8:87:68:dd:a1:90:7b:63:c4:e6:a1:25:ef:3f:
                    2f:e0:cb:72:d5:53:fd:d3:62:73:4d:20:3d:0c:02:
                    11:44:65:5c:4f:4b:a2:6d:6e:1a:89:ac:71:f7:65:
                    f5:97:7e:03:f2:2c:9c:32:98:71:57:61:b1:04:a4:
                    55:9d:c9:f0:0d:4f:9e:68:5a:51:cc:1f:13:ea:c2:
                    e6:3a:e3:b5:25:89:1a:5f:17:b7:95:62:d1:2b:a0:
                    a3:5d:37:d8:a4:cc:d9:de:dc:21:a6:2d:2e:eb:18:
                    4a:d8:7c:72:37:73:65:49:01:7e:7b:48:9f:c7:9a:
                    09:a4:6a:c8:86:6b:e9:ce:6a:6d:59:6e:f2:ed:50:
                    72:b5:1c:ad:84:2c:98:47:8d:51:d7:8c:ae:12:36:
                    38:e8:0b:d8:07:81:23:fa:e5:9d:f2:a1:9e:2f:da:
                    6e:55:41:09:57:53:26:bd:cc:59:ca:12:21:0a:52:
                    86:64:c4:dd:4b:6e:49:9d:1d:32:ab:86:a8:0f:8c:
                    bd:ef:17:ee:36:5e:ab:6e:b0:d8:5a:ff:46:e5:8d:
                    5c:02:9d:c2:24:d1:cd:cb:dc:5d:3b:f0:d5:fb:e3:
                    f6:7d:10:1c:41:99:ea:9d:dd:e3:87:39:12:40:54:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A3:C5:D7:A4:9A:7A:8E:24:9A:0E:4C:A1:40:EF:27:0C:45:90:69
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39302e3231302e302f32342d3234203d3e20313336313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:1a:07:a0:3b:db:e6:5f:92:19:21:65:5a:d3:38:d6:1b:d3:
         5b:63:d2:2d:c3:63:97:d1:6d:f1:dc:95:9b:b8:78:9e:69:c6:
         fd:ae:f5:2a:7a:6e:ac:6a:cb:31:ca:f4:7a:0b:7b:91:aa:6d:
         05:ea:b0:6f:9f:f3:48:a2:f4:7f:45:a4:4a:5c:8f:88:c5:07:
         ba:cc:ef:b2:f3:2e:a3:3b:cb:63:d1:a8:46:51:72:cd:c1:8c:
         15:a5:ff:5d:43:97:4d:57:e5:47:c7:84:9b:fb:ac:6b:b7:48:
         55:03:ff:51:d1:b7:9b:60:b9:55:c9:9d:98:06:28:0f:6c:67:
         e7:15:f9:cf:7d:eb:bf:81:68:2b:87:52:3b:2b:41:15:54:21:
         26:65:7b:f8:99:3a:40:f9:2e:ec:82:2b:85:14:5d:79:f0:28:
         18:4b:b1:32:80:2a:a7:b5:b3:02:22:ac:ab:21:ca:74:7c:e0:
         5c:0d:3d:a6:3c:62:55:01:7e:22:89:48:38:e8:50:5f:42:7f:
         ad:d6:31:ce:ed:b8:b4:e1:40:92:dd:4b:3c:ac:61:70:d2:fd:
         8a:c9:ae:d9:72:fb:05:bd:23:33:99:fc:74:1d:8b:5b:c0:f8:
         9a:2e:71:63:d5:7b:5a:51:6b:05:0a:a7:df:7d:40:1b:94:48:
         c0:08:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----