Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39352e382e302f32322d3234203d3e2030.roa
File:                     3130332e39352e382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          +D5BXgv/6VS+gsE2pqyCFMx18aAYUB1ArUu5RR6/f+8=
Subject key identifier:   06:B0:9A:D0:71:EF:1F:D6:04:2B:1C:CC:A3:EB:49:F0:0A:53:63:AF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1329114637FA7A24390A6656FF15D5B8D7DD9DBF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39352e382e302f32322d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:07:43 +0000
ROA not before:           Mon 31 Jan 2022 04:02:43 +0000
ROA not after:            Tue 31 Jan 2023 04:07:43 +0000
asID:                     0
IP address blocks:        103.95.8.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:29:11:46:37:fa:7a:24:39:0a:66:56:ff:15:d5:b8:d7:dd:9d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 04:02:43 2022 GMT
            Not After : Jan 31 04:07:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:b1:2e:8e:19:1a:57:00:10:58:4d:88:ab:
                    cf:a0:b8:2a:bd:07:bc:5f:73:67:74:79:cf:7c:2d:
                    91:fa:a4:2e:60:e1:f7:04:76:c5:27:f4:b5:85:13:
                    90:51:e9:36:a5:37:ba:31:d9:7a:57:b2:6b:63:32:
                    69:c1:ae:b7:e3:0c:e2:7c:79:54:aa:f2:0b:52:00:
                    a0:ca:cf:c0:a8:dd:0d:57:e5:f7:6e:7b:75:ab:3e:
                    11:21:e7:9e:fe:e9:fb:a0:9d:be:d9:5a:7e:6c:68:
                    d5:62:66:46:47:8c:c2:79:32:8c:b4:e3:fd:7b:d7:
                    11:5a:b6:05:43:9d:d3:92:3e:9d:1e:3f:cf:80:78:
                    02:18:3e:5d:e0:9c:71:20:f3:82:e6:d7:18:97:4e:
                    39:5d:cb:72:2a:c0:95:10:04:e0:ad:ec:20:15:b9:
                    79:59:c1:c0:d7:0e:ee:96:15:f0:e2:75:5d:22:74:
                    87:36:ac:72:34:7c:a2:49:58:f1:75:09:63:af:73:
                    39:c2:e7:7b:25:80:b0:c6:75:0e:ad:5e:74:91:9d:
                    f1:39:ac:49:84:e9:1b:67:ea:2c:9e:b9:7c:82:8a:
                    a1:50:83:c6:f0:58:68:0b:1e:e5:a4:c8:10:c7:41:
                    c0:d4:d8:8c:b0:8e:c2:1d:56:a7:3b:12:93:3e:d3:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B0:9A:D0:71:EF:1F:D6:04:2B:1C:CC:A3:EB:49:F0:0A:53:63:AF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39352e382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:6f:c3:f1:26:80:89:77:a0:be:b7:22:f0:ac:0b:89:2c:7f:
         92:d1:08:b9:80:1e:ac:89:a1:74:26:15:36:5e:98:7f:b3:c1:
         e8:24:3a:1d:83:c8:d5:86:38:a9:09:d0:8f:e1:8e:0d:bb:8f:
         ca:ff:11:b6:dc:bd:40:cb:32:08:00:8a:cb:57:95:35:cf:6c:
         ca:de:4f:c7:50:95:44:6e:1c:42:1c:7b:a2:35:7e:01:4a:b9:
         d2:06:ea:ee:a4:da:c4:ff:8e:0a:76:d9:9c:a1:f8:d5:bc:f9:
         81:74:ff:33:3e:96:9d:47:65:36:d8:1f:ea:49:8f:a3:79:1b:
         26:00:7f:86:31:63:e8:02:ca:87:a8:bd:69:39:6f:7a:a6:c4:
         e3:d3:15:b2:99:d5:1f:99:af:77:33:b0:01:6d:01:65:ed:43:
         43:a7:4b:25:28:29:51:09:47:0f:f8:58:8a:e8:c0:3d:f8:e2:
         00:2a:c7:fb:50:ab:78:29:c9:00:41:eb:97:e1:a8:67:be:18:
         c6:b6:4f:a3:65:c7:5b:20:89:ba:47:6a:75:a9:75:5b:70:7e:
         87:42:a6:fe:dd:dd:ff:c8:7b:e5:0f:e6:8e:b6:59:d5:e2:8e:
         7d:3e:a9:c3:b3:8d:88:a0:8d:df:99:73:cd:6a:e1:6b:82:38:
         27:ac:8e:f5
-----BEGIN CERTIFICATE-----
MIIG+zCCBeOgAwIBAgIUEykRRjf6eiQ5CmZW/xXVuNfdnb8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDEzMTA0MDI0M1oX
DTIzMDEzMTA0MDc0M1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDMUI3QjEyRThFMTkxQTU3MDAxMDU4NEQ4OEFCQ0ZBMEI4MkFCRDA3QkM1
RjczNjc3NDc5Q0Y3QzJEOTFGQUE0MkU2MEUxRjcwNDc2QzUyN0Y0QjU4NTEzOTA1
MUU5MzZBNTM3QkEzMUQ5N0E1N0IyNkI2MzMyNjlDMUFFQjdFMzBDRTI3Qzc5NTRB
QUYyMEI1MjAwQTBDQUNGQzBBOEREMEQ1N0U1Rjc2RTdCNzVBQjNFMTEyMUU3OUVG
RUU5RkJBMDlEQkVEOTVBN0U2QzY4RDU2MjY2NDY0NzhDQzI3OTMyOENCNEUzRkQ3
QkQ3MTE1QUI2MDU0MzlERDM5MjNFOUQxRTNGQ0Y4MDc4MDIxODNFNURFMDlDNzEy
MEYzODJFNkQ3MTg5NzRFMzk1RENCNzIyQUMwOTUxMDA0RTBBREVDMjAxNUI5Nzk1
OUMxQzBENzBFRUU5NjE1RjBFMjc1NUQyMjc0ODczNkFDNzIzNDdDQTI0OTU4RjE3
NTA5NjNBRjczMzlDMkU3N0IyNTgwQjBDNjc1MEVBRDVFNzQ5MTlERjEzOUFDNDk4
NEU5MUI2N0VBMkM5RUI5N0M4MjhBQTE1MDgzQzZGMDU4NjgwQjFFRTVBNEM4MTBD
NzQxQzBENEQ4OENCMDhFQzIxRDU2QTczQjEyOTMzRUQzMTlEOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBt7EujhkaVwAQWE2Iq8+g
uCq9B7xfc2d0ec98LZH6pC5g4fcEdsUn9LWFE5BR6TalN7ox2XpXsmtjMmnBrrfj
DOJ8eVSq8gtSAKDKz8Co3Q1X5fdue3WrPhEh557+6fugnb7ZWn5saNViZkZHjMJ5
Moy04/171xFatgVDndOSPp0eP8+AeAIYPl3gnHEg84Lm1xiXTjldy3IqwJUQBOCt
7CAVuXlZwcDXDu6WFfDidV0idIc2rHI0fKJJWPF1CWOvcznC53slgLDGdQ6tXnSR
nfE5rEmE6Rtn6iyeuXyCiqFQg8bwWGgLHuWkyBDHQcDU2IywjsIdVqc7EpM+0xnZ
AgMBAAGjggHyMIIB7jAdBgNVHQ4EFgQUBrCa0HHvH9YEKxzMo+tJ8ApTY68wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB2BggrBgEF
BQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzOTM1MmUzODJlMzAyZjMyMzIyZDMy
MzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ18IMA0GCSqGSIb3DQEBCwUAA4IBAQBz
b8PxJoCJd6C+tyLwrAuJLH+S0Qi5gB6siaF0JhU2Xph/s8HoJDodg8jVhjipCdCP
4Y4Nu4/K/xG23L1AyzIIAIrLV5U1z2zK3k/HUJVEbhxCHHuiNX4BSrnSBurupNrE
/44KdtmcofjVvPmBdP8zPpadR2U22B/qSY+jeRsmAH+GMWPoAsqHqL1pOW96psTj
0xWymdUfma93M7ABbQFl7UNDp0slKClRCUcP+FiK6MA9+OIAKsf7UKt4KckAQeuX
4ahnvhjGtk+jZcdbIIm6R2p1qXVbcH6HQqb+3d3/yHvlD+aOtlnV4o59PqnDs42I
oI3fmXPNauFrgjgnrI71
-----END CERTIFICATE-----