Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3131342e3134312e34382e302f32312d3234203d3e203338373731.roa
File:                     3131342e3134312e34382e302f32312d3234203d3e203338373731.roa (raw, json)
Hash identifier:          fcL8XAcybo30NKIRYR5Cz5PISa6RdcTOx61CiqSd6Y4=
Subject key identifier:   07:D6:74:22:0B:69:EC:E4:A4:88:2A:6B:14:94:86:01:0A:E3:9D:EC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3BF8261627D8465E9A072739E18F3FDB13081885
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131342e3134312e34382e302f32312d3234203d3e203338373731.roa
Signing time:             Wed 18 Aug 2021 09:07:35 +0000
ROA not before:           Wed 18 Aug 2021 09:02:35 +0000
ROA not after:            Thu 18 Aug 2022 09:07:35 +0000
asID:                     38771
IP address blocks:        114.141.48.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f8:26:16:27:d8:46:5e:9a:07:27:39:e1:8f:3f:db:13:08:18:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 18 09:02:35 2021 GMT
            Not After : Aug 18 09:07:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:b9:7a:fe:12:ed:26:98:41:a6:cd:81:62:
                    e5:b4:fd:c6:63:05:50:cb:86:7a:f9:ac:2c:47:e2:
                    88:48:87:6c:df:79:60:90:fc:8a:ff:bd:f4:27:49:
                    0c:46:3a:6e:86:88:57:05:85:99:36:17:84:55:b2:
                    00:03:3f:28:b0:6e:06:b9:5e:d1:a1:0d:1e:a0:37:
                    8f:24:cc:ec:e2:5b:f7:88:84:a6:da:e4:7a:60:5e:
                    02:db:08:4e:67:a7:83:ae:59:dc:ce:d7:7d:82:f6:
                    de:b9:ef:5b:ac:3b:c8:d3:58:d3:74:97:5c:d2:0a:
                    d3:f1:22:6f:17:a2:9c:41:55:c7:b1:33:52:1a:14:
                    4a:9e:55:d7:f7:c6:1c:1c:cc:e8:0c:9b:47:a6:f6:
                    80:d0:08:74:c7:4b:3c:bf:d5:f8:7e:03:a1:25:ab:
                    07:6e:c5:fb:c2:97:f0:49:66:40:3b:c5:48:d1:da:
                    19:66:c6:4a:c9:30:61:c3:b1:7c:a8:6e:b4:21:1d:
                    52:c4:cc:8e:82:7c:df:65:73:f0:ec:0d:8f:ce:8e:
                    d5:af:73:94:0e:19:ae:cc:c7:b6:08:db:84:87:c3:
                    17:b9:2f:48:58:6a:33:73:24:78:01:33:4d:aa:88:
                    97:bc:26:06:2d:74:d1:67:a0:84:ed:25:74:db:e0:
                    8f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D6:74:22:0B:69:EC:E4:A4:88:2A:6B:14:94:86:01:0A:E3:9D:EC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131342e3134312e34382e302f32312d3234203d3e203338373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:9b:da:80:60:7a:b1:54:4c:66:1d:e1:6a:2b:c2:9f:57:
         fd:ae:24:9e:df:97:03:07:b1:02:b2:0c:9d:f3:83:da:5b:11:
         27:13:58:9f:1d:86:c7:10:35:40:ec:dc:13:3a:18:26:ec:af:
         44:e3:88:68:f0:0b:6d:1e:6f:36:d2:8d:e7:0c:46:b5:e3:87:
         4b:2b:31:95:cd:73:c1:22:7a:b1:4e:60:e1:e8:a5:81:31:bc:
         5f:06:8d:6f:26:86:4c:5a:93:74:4f:14:c8:5c:9a:29:ad:be:
         26:18:ad:26:9c:67:f6:58:bb:8f:13:0d:74:84:5c:c5:20:15:
         ea:3d:fc:45:a2:60:b8:91:94:98:a5:10:8f:4e:ed:41:9b:df:
         0d:98:d3:89:ea:64:86:de:28:d4:43:2b:47:b1:74:01:36:a6:
         9d:31:6d:b9:12:9d:68:77:64:44:8e:e4:0d:e2:fe:ba:27:98:
         97:00:eb:a3:73:4e:0e:06:eb:8a:bc:0f:41:31:30:78:b4:a7:
         ae:c6:87:59:29:53:f2:34:5b:8e:f9:00:07:14:c0:da:1b:26:
         5f:79:bc:5a:99:d8:e6:e1:a0:90:a2:00:63:c5:85:42:a4:a2:
         6e:2a:23:64:0a:1f:40:c9:2a:c5:7d:b8:68:7c:c0:e5:fe:c5:
         a0:7b:55:b8
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUO/gmFifYRl6aByc54Y8/2xMIGIUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDgxODA5MDIzNVoX
DTIyMDgxODA5MDczNVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMzQ4Qjk3QUZFMTJFRDI2OTg0MUE2Q0Q4MTYyRTVCNEZEQzY2MzA1NTBD
Qjg2N0FGOUFDMkM0N0UyODg0ODg3NkNERjc5NjA5MEZDOEFGRkJERjQyNzQ5MEM0
NjNBNkU4Njg4NTcwNTg1OTkzNjE3ODQ1NUIyMDAwMzNGMjhCMDZFMDZCOTVFRDFB
MTBEMUVBMDM3OEYyNENDRUNFMjVCRjc4ODg0QTZEQUU0N0E2MDVFMDJEQjA4NEU2
N0E3ODNBRTU5RENDRUQ3N0Q4MkY2REVCOUVGNUJBQzNCQzhEMzU4RDM3NDk3NUNE
MjBBRDNGMTIyNkYxN0EyOUM0MTU1QzdCMTMzNTIxQTE0NEE5RTU1RDdGN0M2MUMx
Q0NDRTgwQzlCNDdBNkY2ODBEMDA4NzRDNzRCM0NCRkQ1Rjg3RTAzQTEyNUFCMDc2
RUM1RkJDMjk3RjA0OTY2NDAzQkM1NDhEMURBMTk2NkM2NEFDOTMwNjFDM0IxN0NB
ODZFQjQyMTFENTJDNENDOEU4MjdDREY2NTczRjBFQzBEOEZDRThFRDVBRjczOTQw
RTE5QUVDQ0M3QjYwOERCODQ4N0MzMTdCOTJGNDg1ODZBMzM3MzI0NzgwMTMzNERB
QTg4OTdCQzI2MDYyRDc0RDE2N0EwODRFRDI1NzREQkUwOEZCMTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSLl6/hLtJphBps2BYuW0
/cZjBVDLhnr5rCxH4ohIh2zfeWCQ/Ir/vfQnSQxGOm6GiFcFhZk2F4RVsgADPyiw
bga5XtGhDR6gN48kzOziW/eIhKba5HpgXgLbCE5np4OuWdzO132C9t6571usO8jT
WNN0l1zSCtPxIm8XopxBVcexM1IaFEqeVdf3xhwczOgMm0em9oDQCHTHSzy/1fh+
A6ElqwduxfvCl/BJZkA7xUjR2hlmxkrJMGHDsXyobrQhHVLEzI6CfN9lc/DsDY/O
jtWvc5QOGa7Mx7YI24SHwxe5L0hYajNzJHgBM02qiJe8JgYtdNFnoITtJXTb4I+x
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUB9Z0Igtp7OSkiCprFJSGAQrjnewwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzEzNDJlMzEzNDMxMmUzNDM4MmUzMDJmMzIz
MTJkMzIzNDIwM2QzZTIwMzMzODM3MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3KNMDANBgkqhkiG
9w0BAQsFAAOCAQEAH6Cb2oBgerFUTGYd4Worwp9X/a4knt+XAwexArIMnfOD2lsR
JxNYnx2GxxA1QOzcEzoYJuyvROOIaPALbR5vNtKN5wxGteOHSysxlc1zwSJ6sU5g
4eilgTG8XwaNbyaGTFqTdE8UyFyaKa2+JhitJpxn9li7jxMNdIRcxSAV6j38RaJg
uJGUmKUQj07tQZvfDZjTiepkht4o1EMrR7F0ATamnTFtuRKdaHdkRI7kDeL+uieY
lwDro3NODgbrirwPQTEweLSnrsaHWSlT8jRbjvkABxTA2hsmX3m8WpnY5uGgkKIA
Y8WFQqSibiojZAofQMkqxX24aHzA5f7FoHtVuA==
-----END CERTIFICATE-----