Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39342e3233382e302f32332d3234203d3e2030.roa
File:                     3130332e39342e3233382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          D4Qh1LnRRQNONMHjELPs/C95PVnnBC1N1pjMeOadhRc=
Subject key identifier:   88:B8:6A:C2:8A:10:F0:4A:FB:D0:38:72:1E:16:B9:0D:EE:20:29:A0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2A0BE31EDFC4455A595CFCE6ADA34193D8247B16
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39342e3233382e302f32332d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 03:55:51 +0000
ROA not before:           Mon 31 Jan 2022 03:50:51 +0000
ROA not after:            Tue 31 Jan 2023 03:55:51 +0000
asID:                     0
IP address blocks:        103.94.238.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0b:e3:1e:df:c4:45:5a:59:5c:fc:e6:ad:a3:41:93:d8:24:7b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 03:50:51 2022 GMT
            Not After : Jan 31 03:55:51 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:32:9f:ad:c1:ea:16:b8:0e:1e:b0:92:2f:
                    90:3f:4f:1c:5d:3b:42:f8:5b:16:39:fb:a4:51:7f:
                    31:86:ed:c0:e6:a3:e3:5c:f7:55:3a:5f:f2:78:d6:
                    c1:b2:1e:de:d9:6d:1d:84:39:00:0d:fe:43:df:99:
                    04:31:41:f0:17:6f:f9:bb:0f:f0:c5:4c:6c:73:70:
                    77:7d:52:59:68:4d:3a:1b:75:e6:97:0e:36:19:f3:
                    83:d6:20:cd:0d:94:f3:07:31:5a:3a:2f:ea:d6:4a:
                    4e:e0:ce:90:25:bb:24:ba:ca:7a:83:07:7e:af:35:
                    94:90:84:6d:1f:cf:c9:14:f1:7e:61:cb:33:a8:c3:
                    00:6d:6c:15:a8:ed:01:81:7d:60:ff:c5:81:5c:fb:
                    5a:08:37:62:b3:95:c7:28:b2:97:a5:31:80:63:aa:
                    26:a5:1a:9b:62:df:b4:0b:b0:c4:55:90:9d:ca:6a:
                    c2:97:50:f7:3d:ea:14:4a:2f:6f:e7:14:ac:0d:ec:
                    c2:92:92:d4:ba:0e:b2:68:34:b4:02:25:62:d0:b0:
                    4b:9b:9f:dd:3b:44:24:a8:2c:83:88:ca:66:c7:12:
                    4d:e5:f7:63:bd:f9:d3:92:95:5d:a7:12:18:48:0c:
                    e0:84:c1:0e:47:44:74:b6:de:ff:23:e7:4a:47:11:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B8:6A:C2:8A:10:F0:4A:FB:D0:38:72:1E:16:B9:0D:EE:20:29:A0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39342e3233382e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:6a:05:96:83:09:cf:f8:36:8c:54:ea:1f:2c:d5:23:9f:85:
         72:18:1b:4e:9f:e8:ee:8e:32:93:d8:9d:d3:73:12:7a:45:58:
         00:21:4d:41:4a:98:0b:b1:77:85:71:ec:6f:e6:13:71:50:49:
         d8:b1:76:b7:2b:f6:87:08:d5:c3:4e:af:48:fa:b6:1f:4b:5b:
         d2:6c:89:e0:72:12:59:bd:fc:1c:c6:73:7d:f6:72:50:ab:e1:
         5d:4d:fc:ac:92:69:50:4a:7e:b4:e2:c9:ae:ca:5b:e9:40:18:
         84:b2:8f:1e:85:32:52:b5:86:5b:f3:cf:f2:0a:01:5a:7e:b4:
         d8:43:0c:06:ca:20:b8:b4:23:c4:8d:80:d4:67:71:82:ae:17:
         9f:c8:70:c6:4b:b4:13:79:7b:b8:c0:3a:07:38:a9:72:ab:7b:
         7f:a2:27:50:d4:a6:a9:0a:6c:91:b0:6b:a5:b6:f5:41:7a:02:
         b7:b3:28:f3:c2:e9:a7:ed:0f:1d:ab:81:6d:1c:6d:0b:f5:07:
         60:76:91:21:29:d4:f9:d8:46:0c:40:96:51:0c:2a:2a:01:30:
         e9:bd:7c:fc:ae:08:70:1c:39:af:15:d3:45:4e:77:ee:b5:63:
         99:cf:a1:77:51:2a:67:24:30:28:72:06:ca:0e:0d:00:3a:9d:
         5f:06:b4:28
-----BEGIN CERTIFICATE-----
MIIG/zCCBeegAwIBAgIUKgvjHt/ERVpZXPzmraNBk9gkexYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDEzMTAzNTA1MVoX
DTIzMDEzMTAzNTU1MVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBRUY1MzI5RkFEQzFFQTE2QjgwRTFFQjA5MjJGOTAzRjRGMUM1RDNCNDJG
ODVCMTYzOUZCQTQ1MTdGMzE4NkVEQzBFNkEzRTM1Q0Y3NTUzQTVGRjI3OEQ2QzFC
MjFFREVEOTZEMUQ4NDM5MDAwREZFNDNERjk5MDQzMTQxRjAxNzZGRjlCQjBGRjBD
NTRDNkM3MzcwNzc3RDUyNTk2ODREM0ExQjc1RTY5NzBFMzYxOUYzODNENjIwQ0Qw
RDk0RjMwNzMxNUEzQTJGRUFENjRBNEVFMENFOTAyNUJCMjRCQUNBN0E4MzA3N0VB
RjM1OTQ5MDg0NkQxRkNGQzkxNEYxN0U2MUNCMzNBOEMzMDA2RDZDMTVBOEVEMDE4
MTdENjBGRkM1ODE1Q0ZCNUEwODM3NjJCMzk1QzcyOEIyOTdBNTMxODA2M0FBMjZB
NTFBOUI2MkRGQjQwQkIwQzQ1NTkwOURDQTZBQzI5NzUwRjczREVBMTQ0QTJGNkZF
NzE0QUMwREVDQzI5MjkyRDRCQTBFQjI2ODM0QjQwMjI1NjJEMEIwNEI5QjlGREQz
QjQ0MjRBODJDODM4OENBNjZDNzEyNERFNUY3NjNCREY5RDM5Mjk1NURBNzEyMTg0
ODBDRTA4NEMxMEU0NzQ0NzRCNkRFRkYyM0U3NEE0NzExQTc2RjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9TKfrcHqFrgOHrCSL5A/
TxxdO0L4WxY5+6RRfzGG7cDmo+Nc91U6X/J41sGyHt7ZbR2EOQAN/kPfmQQxQfAX
b/m7D/DFTGxzcHd9UlloTTobdeaXDjYZ84PWIM0NlPMHMVo6L+rWSk7gzpAluyS6
ynqDB36vNZSQhG0fz8kU8X5hyzOowwBtbBWo7QGBfWD/xYFc+1oIN2Kzlccospel
MYBjqialGpti37QLsMRVkJ3KasKXUPc96hRKL2/nFKwN7MKSktS6DrJoNLQCJWLQ
sEubn907RCSoLIOIymbHEk3l92O9+dOSlV2nEhhIDOCEwQ5HRHS23v8j50pHEadv
AgMBAAGjggH2MIIB8jAdBgNVHQ4EFgQUiLhqwooQ8Er70DhyHha5De4gKaAwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB6BggrBgEF
BQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzOTM0MmUzMjMzMzgyZTMwMmYzMjMz
MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWde7jANBgkqhkiG9w0BAQsFAAOC
AQEAcmoFloMJz/g2jFTqHyzVI5+FchgbTp/o7o4yk9id03MSekVYACFNQUqYC7F3
hXHsb+YTcVBJ2LF2tyv2hwjVw06vSPq2H0tb0myJ4HISWb38HMZzffZyUKvhXU38
rJJpUEp+tOLJrspb6UAYhLKPHoUyUrWGW/PP8goBWn602EMMBsoguLQjxI2A1Gdx
gq4Xn8hwxku0E3l7uMA6Bzipcqt7f6InUNSmqQpskbBrpbb1QXoCt7Mo88Lpp+0P
HauBbRxtC/UHYHaRISnU+dhGDECWUQwqKgEw6b18/K4IcBw5rxXTRU537rVjmc+h
d1EqZyQwKHIGyg4NADqdXwa0KA==
-----END CERTIFICATE-----