Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39352e3136322e302f32342d3234203d3e20313336313233.roa
File:                     3130332e39352e3136322e302f32342d3234203d3e20313336313233.roa (raw, json)
Hash identifier:          ug1FTuVlNytQQZdUeseLxOhRjlKsFdckPOwthYjrb+M=
Subject key identifier:   CF:F7:94:85:EA:9E:1C:F5:28:D0:4C:95:19:93:82:3C:54:A5:22:9D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       311DE3A8497902EB6D1B841A7817D12300B8685D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39352e3136322e302f32342d3234203d3e20313336313233.roa
Signing time:             Fri 19 Nov 2021 05:00:01 +0000
ROA not before:           Fri 19 Nov 2021 04:55:01 +0000
ROA not after:            Sat 19 Nov 2022 05:00:01 +0000
asID:                     136123
IP address blocks:        103.95.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1d:e3:a8:49:79:02:eb:6d:1b:84:1a:78:17:d1:23:00:b8:68:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:01 2021 GMT
            Not After : Nov 19 05:00:01 2022 GMT
        Subject: CN=3082010A0282010100E06BD77955339584411F859D459FAF21E3924799EB31D117F1460D4DF012CDF361654326BDADF87C7C4A3DB93C6FDCE50C5B70185F3FEED5E7F00268744CF1396008C5DBF272C35576A08CED75C4BE798C33D46EF223FAFC4C6DCE8FC3953C4281BA82D5C6D343FD093588ADF02E327617D2E8CD06CED163F128171C58F2E68A26CFE1D4B694BDA0A56E4F7418AAFA9687E17409487D7F2E0672A8C01D9FD201E738AD45E7B3A1110A0E3BCAF1E45B3DC1678DE3300BF052676F6B4D2A32EA629480AEDDDA1D4DE08EB27668C805129A99CB07D3D21593CA16CAA3A9C12D655ACC86B60CDDD3B9A85B25C2A2C7E8E3B26CF177998B55AF9961D2B33A49C52FF10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6b:d7:79:55:33:95:84:41:1f:85:9d:45:9f:
                    af:21:e3:92:47:99:eb:31:d1:17:f1:46:0d:4d:f0:
                    12:cd:f3:61:65:43:26:bd:ad:f8:7c:7c:4a:3d:b9:
                    3c:6f:dc:e5:0c:5b:70:18:5f:3f:ee:d5:e7:f0:02:
                    68:74:4c:f1:39:60:08:c5:db:f2:72:c3:55:76:a0:
                    8c:ed:75:c4:be:79:8c:33:d4:6e:f2:23:fa:fc:4c:
                    6d:ce:8f:c3:95:3c:42:81:ba:82:d5:c6:d3:43:fd:
                    09:35:88:ad:f0:2e:32:76:17:d2:e8:cd:06:ce:d1:
                    63:f1:28:17:1c:58:f2:e6:8a:26:cf:e1:d4:b6:94:
                    bd:a0:a5:6e:4f:74:18:aa:fa:96:87:e1:74:09:48:
                    7d:7f:2e:06:72:a8:c0:1d:9f:d2:01:e7:38:ad:45:
                    e7:b3:a1:11:0a:0e:3b:ca:f1:e4:5b:3d:c1:67:8d:
                    e3:30:0b:f0:52:67:6f:6b:4d:2a:32:ea:62:94:80:
                    ae:dd:da:1d:4d:e0:8e:b2:76:68:c8:05:12:9a:99:
                    cb:07:d3:d2:15:93:ca:16:ca:a3:a9:c1:2d:65:5a:
                    cc:86:b6:0c:dd:d3:b9:a8:5b:25:c2:a2:c7:e8:e3:
                    b2:6c:f1:77:99:8b:55:af:99:61:d2:b3:3a:49:c5:
                    2f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F7:94:85:EA:9E:1C:F5:28:D0:4C:95:19:93:82:3C:54:A5:22:9D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39352e3136322e302f32342d3234203d3e20313336313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:66:59:7b:f3:65:a1:3c:ec:46:73:8d:aa:bc:2c:c4:6b:54:
         11:07:e8:96:51:2c:72:8a:d9:63:b0:75:6f:0f:1e:ee:f2:4f:
         1f:31:53:0f:64:70:63:5f:dd:6a:23:f4:48:2b:98:dd:bb:63:
         f7:49:41:44:67:c9:5e:b3:98:a0:53:32:d1:cc:59:22:03:3e:
         bd:b6:3e:36:2c:1b:6c:29:85:0e:7c:5a:3d:c2:38:e4:09:45:
         35:55:e4:de:86:cc:5a:33:11:20:f1:7a:d8:5a:56:c5:77:18:
         a9:07:d1:61:26:c3:73:27:77:e8:b9:51:d7:7f:2d:ed:16:53:
         b5:4a:81:29:76:a3:ca:07:7e:50:4d:fa:40:20:27:e3:58:34:
         00:6f:b7:7f:12:73:19:51:2c:48:4c:2e:b7:e8:e2:dd:29:78:
         cd:52:36:f5:f1:99:b8:66:ad:89:24:cc:9a:90:11:1f:b7:0e:
         2c:f6:06:c7:8b:71:b1:2a:6c:e9:fa:89:ae:06:b1:76:50:87:
         f2:ac:10:dc:0a:78:ca:41:74:17:da:03:58:95:da:36:9c:86:
         fd:c3:05:ea:8c:32:61:b2:b0:aa:ea:31:64:f2:9c:8d:3d:d5:
         e1:64:59:22:16:d9:cc:64:97:39:04:a5:cd:7f:a4:f7:a8:29:
         53:49:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----