Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3233382e302f32342d3234203d3e2030.roa
File:                     3130332e39332e3233382e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          ZY1Ki+HyXcuhJi0wE08VPHpf/PxcRIwKz3SCY3GvmHI=
Subject key identifier:   25:7F:80:7E:F2:2F:28:61:F0:F4:51:58:9E:3F:4E:73:41:C2:05:C3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3A68A6266670BEE301D52A470D54568A57507ECE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3233382e302f32342d3234203d3e2030.roa
Signing time:             Fri 26 Nov 2021 07:18:15 +0000
ROA not before:           Fri 26 Nov 2021 07:13:15 +0000
ROA not after:            Sat 26 Nov 2022 07:18:15 +0000
asID:                     0
IP address blocks:        103.93.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:68:a6:26:66:70:be:e3:01:d5:2a:47:0d:54:56:8a:57:50:7e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 26 07:13:15 2021 GMT
            Not After : Nov 26 07:18:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:74:dc:02:9f:c9:59:75:4c:94:38:48:2b:
                    0e:f6:6f:1d:3e:85:e7:ff:04:3d:af:7d:f2:33:06:
                    a0:76:95:b1:e2:47:92:78:b1:e5:75:82:26:bf:fa:
                    79:e7:33:32:e2:17:bc:ac:8f:29:6d:0b:76:0d:1e:
                    bf:d7:d2:ab:39:6d:e7:d5:0f:89:e5:0c:58:bd:77:
                    18:72:73:f5:84:c9:03:7b:c5:da:9c:c8:1c:78:2a:
                    50:b5:7c:13:4c:de:ca:77:de:86:91:c3:b6:01:de:
                    9c:b1:e1:d5:91:63:6a:6a:a0:5e:b5:5f:ae:7c:33:
                    63:6a:ba:6d:ce:44:4e:db:3e:7b:8d:95:8b:6d:30:
                    f6:9c:df:61:4e:4f:68:25:61:55:7e:7b:d1:2c:98:
                    3a:4b:6a:cd:e9:da:48:1f:1f:ad:84:83:a5:a6:61:
                    97:0d:35:99:02:74:58:89:a0:6e:2b:f9:f6:5a:47:
                    74:a0:9e:28:57:ef:d9:85:38:4f:2d:ac:69:83:41:
                    68:fc:31:24:83:87:e2:76:f1:05:a2:34:fd:ba:d4:
                    73:2c:95:b5:fd:de:99:62:ec:9b:c5:db:90:d6:75:
                    55:2d:25:90:ea:67:ec:1b:12:4b:6a:e9:10:6a:eb:
                    c8:96:e2:b5:51:67:a5:43:4a:5d:d9:6f:1f:8b:a1:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7F:80:7E:F2:2F:28:61:F0:F4:51:58:9E:3F:4E:73:41:C2:05:C3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3233382e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b6:f0:93:71:4b:01:b7:ac:14:3e:d0:fc:e6:5d:6f:9a:8f:
         ba:fa:7d:03:4e:93:a3:84:ac:e7:40:e7:21:26:7b:af:07:d0:
         90:9e:cb:51:c3:44:51:ac:cb:ad:1f:ef:58:62:5e:09:a1:69:
         82:2d:4e:d9:3e:62:c4:4e:98:fb:a8:f9:6d:23:8b:f3:ed:67:
         93:48:47:d7:d6:c4:44:ce:6e:b5:27:fd:9c:92:eb:70:b3:86:
         e5:ad:7c:bb:e1:00:5c:15:97:46:11:ba:0c:78:7b:be:8e:d7:
         39:96:89:e9:83:f1:54:24:56:ce:06:1c:cc:25:88:d6:a2:85:
         d0:67:52:76:ca:db:e0:26:66:86:89:82:6c:74:88:6a:29:df:
         be:ce:f1:e8:f6:15:19:7f:7d:0a:2d:60:33:2f:9c:9c:72:bf:
         fb:2c:60:ba:b8:35:0b:fc:b0:93:11:12:fe:2d:25:28:2e:fa:
         ab:63:ef:aa:4d:9f:a4:46:41:b1:29:32:f8:56:80:cb:25:8b:
         b5:bc:49:29:56:35:bb:16:66:46:5d:02:cb:48:69:d7:eb:36:
         08:bd:ee:64:0f:67:7a:b3:ca:16:92:45:1f:82:fa:e1:52:2a:
         2f:39:f9:fc:4a:46:98:96:7e:c6:69:f6:21:85:f7:5b:cf:ff:
         24:1e:73:2f
-----BEGIN CERTIFICATE-----
MIIG/zCCBeegAwIBAgIUOmimJmZwvuMB1SpHDVRWildQfs4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTEyNjA3MTMxNVoX
DTIyMTEyNjA3MTgxNVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDOUJBNzREQzAyOUZDOTU5NzU0Qzk0Mzg0ODJCMEVGNjZGMUQzRTg1RTdG
RjA0M0RBRjdERjIzMzA2QTA3Njk1QjFFMjQ3OTI3OEIxRTU3NTgyMjZCRkZBNzlF
NzMzMzJFMjE3QkNBQzhGMjk2RDBCNzYwRDFFQkZEN0QyQUIzOTZERTdENTBGODlF
NTBDNThCRDc3MTg3MjczRjU4NEM5MDM3QkM1REE5Q0M4MUM3ODJBNTBCNTdDMTM0
Q0RFQ0E3N0RFODY5MUMzQjYwMURFOUNCMUUxRDU5MTYzNkE2QUEwNUVCNTVGQUU3
QzMzNjM2QUJBNkRDRTQ0NEVEQjNFN0I4RDk1OEI2RDMwRjY5Q0RGNjE0RTRGNjgy
NTYxNTU3RTdCRDEyQzk4M0E0QjZBQ0RFOURBNDgxRjFGQUQ4NDgzQTVBNjYxOTcw
RDM1OTkwMjc0NTg4OUEwNkUyQkY5RjY1QTQ3NzRBMDlFMjg1N0VGRDk4NTM4NEYy
REFDNjk4MzQxNjhGQzMxMjQ4Mzg3RTI3NkYxMDVBMjM0RkRCQUQ0NzMyQzk1QjVG
RERFOTk2MkVDOUJDNURCOTBENjc1NTUyRDI1OTBFQTY3RUMxQjEyNEI2QUU5MTA2
QUVCQzg5NkUyQjU1MTY3QTU0MzRBNUREOTZGMUY4QkExNkY3NTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJunTcAp/JWXVMlDhIKw72
bx0+hef/BD2vffIzBqB2lbHiR5J4seV1gia/+nnnMzLiF7ysjyltC3YNHr/X0qs5
befVD4nlDFi9dxhyc/WEyQN7xdqcyBx4KlC1fBNM3sp33oaRw7YB3pyx4dWRY2pq
oF61X658M2Nqum3ORE7bPnuNlYttMPac32FOT2glYVV+e9EsmDpLas3p2kgfH62E
g6WmYZcNNZkCdFiJoG4r+fZaR3SgnihX79mFOE8trGmDQWj8MSSDh+J28QWiNP26
1HMslbX93pli7JvF25DWdVUtJZDqZ+wbEktq6RBq68iW4rVRZ6VDSl3Zbx+LoW91
AgMBAAGjggH2MIIB8jAdBgNVHQ4EFgQUJX+AfvIvKGHw9FFYnj9Oc0HCBcMwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB6BggrBgEF
BQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzOTMzMmUzMjMzMzgyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdd7jANBgkqhkiG9w0BAQsFAAOC
AQEAirbwk3FLAbesFD7Q/OZdb5qPuvp9A06To4Ss50DnISZ7rwfQkJ7LUcNEUazL
rR/vWGJeCaFpgi1O2T5ixE6Y+6j5bSOL8+1nk0hH19bERM5utSf9nJLrcLOG5a18
u+EAXBWXRhG6DHh7vo7XOZaJ6YPxVCRWzgYczCWI1qKF0GdSdsrb4CZmhomCbHSI
ainfvs7x6PYVGX99Ci1gMy+cnHK/+yxgurg1C/ywkxES/i0lKC76q2Pvqk2fpEZB
sSky+FaAyyWLtbxJKVY1uxZmRl0Cy0hp1+s2CL3uZA9nerPKFpJFH4L64VIqLzn5
/EpGmJZ+xmn2IYX3W8//JB5zLw==
-----END CERTIFICATE-----