Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3131332e31312e3132382e302f31392d3234203d3e2039333236.roa
File:                     3131332e31312e3132382e302f31392d3234203d3e2039333236.roa (raw, json)
Hash identifier:          a+gs2nX8GfnoqRSesz3QvmWrd7qOwFOcLsPyxcdFHUo=
Subject key identifier:   AF:57:D9:28:96:C2:43:41:F5:01:5C:05:31:D8:FA:96:F2:D6:A7:03
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       100CD243ADCBC1080EC80AA2909A66DF63F4DB22
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131332e31312e3132382e302f31392d3234203d3e2039333236.roa
Signing time:             Wed 28 Apr 2021 02:19:04 +0000
ROA not before:           Wed 28 Apr 2021 02:14:04 +0000
ROA not after:            Thu 28 Apr 2022 02:19:04 +0000
asID:                     9326
IP address blocks:        113.11.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0c:d2:43:ad:cb:c1:08:0e:c8:0a:a2:90:9a:66:df:63:f4:db:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 28 02:14:04 2021 GMT
            Not After : Apr 28 02:19:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:78:01:64:3d:39:70:83:ef:01:a2:00:b4:
                    10:76:12:e3:f5:07:20:b0:47:60:86:50:49:b0:97:
                    95:1d:0d:4f:1f:d9:92:89:f9:9f:fc:53:86:4b:c8:
                    80:6a:da:10:8f:a9:33:4f:85:65:db:51:51:1b:d4:
                    10:7b:82:4a:95:0f:3c:68:39:4d:4a:da:2d:ed:ed:
                    0f:3f:2b:ba:c4:d2:8d:e8:06:e9:8f:71:c3:66:b4:
                    3b:1d:7d:52:f5:5f:f2:87:1d:dc:da:2f:f4:c0:c8:
                    4b:75:49:16:90:24:33:e4:a1:56:e6:1e:6b:27:5a:
                    9d:7a:ab:a7:7b:66:47:1b:0f:8b:24:a0:6a:7c:34:
                    82:2d:ab:7f:8b:db:28:5e:b4:dd:e5:91:3c:5c:d9:
                    a1:e0:5d:e1:a5:4b:76:d7:6d:30:27:cc:dd:7e:df:
                    c3:0d:e5:1a:5a:c9:5b:f6:2b:c7:f0:5e:66:c8:c9:
                    79:90:95:72:ee:e5:95:a1:17:f0:13:27:8e:72:dd:
                    11:49:ba:41:47:cb:e7:5c:76:c9:37:20:87:fb:30:
                    16:82:c5:fc:ad:f7:39:33:5f:56:61:e2:62:d5:5b:
                    ec:51:da:1d:d7:3f:80:69:5c:3e:d0:68:31:bf:12:
                    db:08:4e:c5:be:ff:f3:e5:b5:45:be:ab:82:ee:cd:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:57:D9:28:96:C2:43:41:F5:01:5C:05:31:D8:FA:96:F2:D6:A7:03
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131332e31312e3132382e302f31392d3234203d3e2039333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.11.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:99:36:6b:8d:10:ec:33:5d:17:82:e2:f8:d0:57:7c:26:20:
         29:8c:0c:ef:dc:e9:70:d1:f5:29:2f:8f:d1:f5:c7:a6:b2:98:
         2e:90:4e:9f:ae:da:19:3b:e9:e8:c2:60:b4:70:64:f4:1e:a0:
         cf:4e:d9:be:00:93:16:32:d5:e2:7f:ff:41:49:61:07:97:2d:
         08:aa:83:31:bd:c4:04:bc:f2:da:45:53:90:48:0c:fd:a0:2d:
         34:8b:16:32:ec:6a:d8:8a:34:ad:5a:3f:0e:18:41:b1:d4:a3:
         3b:b4:c4:55:aa:45:a9:f6:96:d7:56:6d:44:d7:c3:48:00:ce:
         18:5a:d1:61:ec:45:11:f3:ef:3c:95:d4:03:f4:eb:ff:31:86:
         6b:cd:73:eb:cf:63:49:a4:d6:98:01:ee:c6:e9:ed:7d:21:f2:
         3c:49:c3:b8:15:6a:20:82:42:bd:34:d6:64:56:c6:3a:00:49:
         54:13:ce:70:46:20:e0:0c:f7:4b:7d:a8:a0:cd:28:eb:91:b8:
         84:da:2c:79:cf:81:bc:c4:28:d8:1e:b7:7c:5f:ff:e0:37:a3:
         0d:6a:94:20:89:56:fc:9e:ec:02:f9:6d:de:e1:8b:bf:7e:47:
         22:b3:76:c6:0d:c4:66:87:85:14:bd:54:42:37:19:1a:41:f5:
         03:10:a5:60
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUEAzSQ63LwQgOyAqikJpm32P02yIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDQyODAyMTQwNFoX
DTIyMDQyODAyMTkwNFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCQ0NCNzgwMTY0M0QzOTcwODNFRjAxQTIwMEI0MTA3NjEyRTNGNTA3MjBC
MDQ3NjA4NjUwNDlCMDk3OTUxRDBENEYxRkQ5OTI4OUY5OUZGQzUzODY0QkM4ODA2
QURBMTA4RkE5MzM0Rjg1NjVEQjUxNTExQkQ0MTA3QjgyNEE5NTBGM0M2ODM5NEQ0
QURBMkRFREVEMEYzRjJCQkFDNEQyOERFODA2RTk4RjcxQzM2NkI0M0IxRDdENTJG
NTVGRjI4NzFERENEQTJGRjRDMEM4NEI3NTQ5MTY5MDI0MzNFNEExNTZFNjFFNkIy
NzVBOUQ3QUFCQTc3QjY2NDcxQjBGOEIyNEEwNkE3QzM0ODIyREFCN0Y4QkRCMjg1
RUI0RERFNTkxM0M1Q0Q5QTFFMDVERTFBNTRCNzZENzZEMzAyN0NDREQ3RURGQzMw
REU1MUE1QUM5NUJGNjJCQzdGMDVFNjZDOEM5Nzk5MDk1NzJFRUU1OTVBMTE3RjAx
MzI3OEU3MkREMTE0OUJBNDE0N0NCRTc1Qzc2QzkzNzIwODdGQjMwMTY4MkM1RkNB
REY3MzkzMzVGNTY2MUUyNjJENTVCRUM1MURBMURENzNGODA2OTVDM0VEMDY4MzFC
RjEyREIwODRFQzVCRUZGRjNFNUI1NDVCRUFCODJFRUNEMzJDNzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8y3gBZD05cIPvAaIAtBB2
EuP1ByCwR2CGUEmwl5UdDU8f2ZKJ+Z/8U4ZLyIBq2hCPqTNPhWXbUVEb1BB7gkqV
DzxoOU1K2i3t7Q8/K7rE0o3oBumPccNmtDsdfVL1X/KHHdzaL/TAyEt1SRaQJDPk
oVbmHmsnWp16q6d7ZkcbD4skoGp8NIItq3+L2yhetN3lkTxc2aHgXeGlS3bXbTAn
zN1+38MN5RpayVv2K8fwXmbIyXmQlXLu5ZWhF/ATJ45y3RFJukFHy+dcdsk3IIf7
MBaCxfyt9zkzX1Zh4mLVW+xR2h3XP4BpXD7QaDG/EtsITsW+//PltUW+q4LuzTLH
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUr1fZKJbCQ0H1AVwFMdj6lvLWpwMwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzEzMzJlMzEzMTJlMzEzMjM4MmUzMDJmMzEz
OTJkMzIzNDIwM2QzZTIwMzkzMzMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVxC4AwDQYJKoZIhvcN
AQELBQADggEBAD6ZNmuNEOwzXReC4vjQV3wmICmMDO/c6XDR9Skvj9H1x6aymC6Q
Tp+u2hk76ejCYLRwZPQeoM9O2b4AkxYy1eJ//0FJYQeXLQiqgzG9xAS88tpFU5BI
DP2gLTSLFjLsatiKNK1aPw4YQbHUozu0xFWqRan2ltdWbUTXw0gAzhha0WHsRRHz
7zyV1AP06/8xhmvNc+vPY0mk1pgB7sbp7X0h8jxJw7gVaiCCQr001mRWxjoASVQT
znBGIOAM90t9qKDNKOuRuITaLHnPgbzEKNget3xf/+A3ow1qlCCJVvye7AL5bd7h
i79+RyKzdsYNxGaHhRS9VEI3GRpB9QMQpWA=
-----END CERTIFICATE-----