Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3132322e3132392e3139322e302f32312d3234203d3e2030.roa
File:                     3132322e3132392e3139322e302f32312d3234203d3e2030.roa (raw, json)
Hash identifier:          VJi9FoQjTfD5Q60Elhi0tfmHpoU+NXkn6ikgWU5zr3U=
Subject key identifier:   8E:B4:0D:9F:E0:26:EB:0F:E0:9F:EF:39:25:BA:95:F4:90:11:48:E1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       53DDDB59046EB5891B590755B184DF4E27B6DE35
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3132322e3132392e3139322e302f32312d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 03:57:35 +0000
ROA not before:           Mon 31 Jan 2022 03:52:35 +0000
ROA not after:            Tue 31 Jan 2023 03:57:35 +0000
asID:                     0
IP address blocks:        122.129.192.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:dd:db:59:04:6e:b5:89:1b:59:07:55:b1:84:df:4e:27:b6:de:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 03:52:35 2022 GMT
            Not After : Jan 31 03:57:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c5:08:41:1e:c9:3e:0c:4d:d1:a9:28:6f:c8:
                    fb:38:13:6a:b9:03:48:b6:cc:a9:47:d5:0a:e4:0f:
                    54:f1:76:93:78:c8:97:88:9d:24:87:15:49:18:1b:
                    61:13:a5:0f:66:a7:5e:d1:5e:5f:da:63:c1:bd:a6:
                    60:ba:d0:d8:e2:89:6d:a5:46:4a:48:a3:df:c1:fa:
                    13:b7:9a:b1:6e:a6:1f:76:6e:0d:99:5d:61:4d:de:
                    20:d9:63:f2:fa:d9:33:2f:a4:f4:81:9f:c2:f6:28:
                    19:63:63:6d:49:70:08:3b:9f:d1:ac:37:a9:c4:ad:
                    7d:6e:4f:4d:3d:53:40:c8:18:c1:00:2a:cb:59:ff:
                    de:f1:51:34:8b:bc:df:f4:d7:be:22:10:43:ab:18:
                    13:d7:91:88:e7:c4:c2:b9:ba:e1:c5:de:1b:77:17:
                    c3:5f:03:82:02:f1:d8:d7:4c:6d:8a:8a:fd:5f:4c:
                    89:26:b0:56:ce:e5:2f:75:da:17:f9:05:ac:eb:4e:
                    55:48:12:46:c5:e3:8a:0f:79:8d:e9:27:52:a8:d2:
                    7a:9a:22:b3:22:92:82:44:88:b3:46:ef:22:88:3d:
                    58:49:98:07:48:13:cd:c8:8d:74:70:c9:67:11:49:
                    d4:16:b7:d8:28:80:15:5b:b5:8b:a2:ac:51:be:be:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B4:0D:9F:E0:26:EB:0F:E0:9F:EF:39:25:BA:95:F4:90:11:48:E1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3132322e3132392e3139322e302f32312d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.129.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:97:8d:b8:4c:1f:c6:9b:cd:9c:e7:10:da:ae:d5:30:2b:6d:
         11:a3:07:97:73:32:66:49:79:54:1c:c5:3c:ff:ff:91:f6:94:
         8a:71:8d:64:14:30:e0:1b:0f:d1:5f:d8:1f:e2:ac:f4:67:ca:
         ef:2f:b9:20:0c:11:e4:07:75:eb:a2:38:38:f8:91:27:13:06:
         1a:c1:5d:80:7c:00:4d:8c:14:dd:ad:03:6b:0f:94:78:c1:13:
         ac:c5:40:cd:e6:1b:06:ba:74:13:20:83:13:53:d1:6f:66:05:
         e5:05:39:f1:3d:64:a4:be:d7:dd:30:97:75:6d:35:f5:ad:2c:
         e5:ed:be:11:e4:bb:2c:b3:50:5b:84:7b:9b:46:68:3a:a4:6f:
         bc:97:18:a7:1d:87:46:a8:f8:de:35:91:e6:95:01:b8:98:5c:
         1f:5f:35:3b:30:2a:1d:76:8e:bc:e4:a0:a7:56:c7:a3:e0:90:
         ae:74:6f:25:c9:e8:b8:35:5d:bb:f3:e0:19:4f:64:f9:e9:e3:
         e9:e8:e2:84:db:9a:bb:1e:73:b8:57:db:1b:0a:91:0a:2d:67:
         13:6b:b8:c5:f3:61:db:15:ef:67:94:07:6d:e2:5e:18:47:cc:
         35:4b:12:5a:c7:74:3b:6d:58:96:ca:74:12:4a:c1:7c:e4:45:
         f3:44:2b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----