Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3134342e34382e31322e302f32322d3234203d3e20313339333938.roa
File:                     3134342e34382e31322e302f32322d3234203d3e20313339333938.roa (raw, json)
Hash identifier:          2E/YtZA4MCBVNBxUwR/WEBfj737hBLFgbUBfFVGk8Cg=
Subject key identifier:   90:23:38:60:00:FF:18:DA:AB:E2:8C:DA:B0:9F:AD:19:14:A2:9B:38
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6E6FC2138B39CDDFF5D92F7579B1F5788BCE927D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3134342e34382e31322e302f32322d3234203d3e20313339333938.roa
Signing time:             Thu 22 Jul 2021 06:47:39 +0000
ROA not before:           Thu 22 Jul 2021 06:42:39 +0000
ROA not after:            Fri 22 Jul 2022 06:47:39 +0000
asID:                     139398
IP address blocks:        144.48.12.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6f:c2:13:8b:39:cd:df:f5:d9:2f:75:79:b1:f5:78:8b:ce:92:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 22 06:42:39 2021 GMT
            Not After : Jul 22 06:47:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b7:5c:e4:ca:51:3f:c2:a9:de:fa:db:4b:45:
                    d4:2d:ad:41:cb:23:7c:16:8b:75:04:5f:8d:47:96:
                    d5:fd:12:a7:b2:88:28:99:84:ec:07:11:3c:ca:58:
                    6c:44:16:53:ac:7d:f5:76:00:14:0f:0c:26:c8:da:
                    f5:f8:76:9a:75:8b:e7:ba:7e:6b:29:b3:85:67:be:
                    cb:92:c0:e9:a5:c6:a2:06:02:e6:e7:b1:96:c7:70:
                    84:fd:8e:8e:03:e8:cc:db:7d:4f:6a:49:6b:f8:63:
                    ec:89:0f:28:cc:b3:49:b8:06:6a:b3:8b:06:28:79:
                    0d:cb:f9:84:a3:15:d1:4c:1a:1e:6e:a9:53:af:14:
                    eb:64:c3:45:30:e3:79:12:a5:2a:6d:f2:96:b0:2c:
                    7e:fe:52:a5:cb:dd:00:a7:64:6b:e1:18:e3:5e:28:
                    33:ce:73:9a:06:59:8a:51:87:35:3b:03:20:3d:80:
                    5c:38:fa:9b:42:a3:e9:c1:3f:67:7f:c4:88:8f:53:
                    b2:35:a9:8c:f7:95:07:a0:4f:ba:11:ef:31:b8:66:
                    c9:c6:96:40:0e:f3:a4:33:4c:cb:20:62:76:a4:fa:
                    9f:69:e4:31:f1:51:91:19:12:c4:34:c7:7c:70:77:
                    07:4d:b3:a2:f3:7c:29:8e:ad:30:98:c9:04:6b:b3:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:23:38:60:00:FF:18:DA:AB:E2:8C:DA:B0:9F:AD:19:14:A2:9B:38
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3134342e34382e31322e302f32322d3234203d3e20313339333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:a1:f9:fb:59:33:dc:2f:80:dd:b0:68:51:b2:e8:44:20:47:
         d1:de:e5:57:5c:f4:9d:3c:dc:8f:78:30:2d:3a:35:d6:e5:e9:
         bc:08:0c:e8:4a:65:81:ef:4e:ea:cd:f5:6c:a5:95:7a:49:5c:
         0e:06:9f:f8:89:7d:25:0a:59:19:e9:ce:98:af:d9:2d:a7:e8:
         8a:18:3c:f7:78:9a:fe:6d:ee:e6:3e:30:a8:a6:86:d9:d1:9e:
         ff:c7:1b:11:c9:94:5f:06:af:55:6c:3f:d1:7e:ba:7f:2e:b9:
         a5:25:b9:5d:ea:1d:85:9f:20:17:11:79:63:60:9f:0c:3b:6f:
         e8:94:28:ac:66:54:e6:19:20:60:a7:a3:39:f1:7a:ee:8f:77:
         32:b3:cf:b2:6d:8a:4d:9f:11:ee:db:af:d3:ff:e1:28:51:7c:
         70:21:a0:ea:6e:bb:04:7f:9a:fd:c4:ea:1c:8f:7c:58:10:05:
         b7:30:58:7a:d7:5c:3b:ef:4c:c6:40:1a:ba:f8:33:41:74:d0:
         bc:91:a0:cf:8b:ed:33:dc:b4:da:71:23:04:59:43:69:f5:af:
         3b:5f:6b:64:43:9d:17:eb:22:29:c0:39:b0:d8:3e:65:69:09:
         60:74:3e:5d:8b:c9:65:89:03:f0:35:05:9a:18:e9:a6:2e:f6:
         59:3b:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----