Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3137352e3131312e3130382e302f32322d3234203d3e20313336313139.roa
File:                     3137352e3131312e3130382e302f32322d3234203d3e20313336313139.roa (raw, json)
Hash identifier:          iVYG+uOItvlDX7VCXxKhFXIl6m5GdXidSUglWLlM1ws=
Subject key identifier:   77:2E:0B:C9:1E:3D:66:72:45:1E:E2:EA:7E:C8:A6:65:C0:37:F4:04
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       034CB3939B2525984466D925373AAA79CC2D02B2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3137352e3131312e3130382e302f32322d3234203d3e20313336313139.roa
Signing time:             Fri 19 Nov 2021 10:00:02 +0000
ROA not before:           Fri 19 Nov 2021 09:55:02 +0000
ROA not after:            Sat 19 Nov 2022 10:00:02 +0000
asID:                     136119
IP address blocks:        175.111.108.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4c:b3:93:9b:25:25:98:44:66:d9:25:37:3a:aa:79:cc:2d:02:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 09:55:02 2021 GMT
            Not After : Nov 19 10:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:b9:55:f4:f4:02:ed:b6:27:6a:02:c1:03:
                    f3:ac:f1:57:c1:23:65:b0:8d:28:09:90:4a:bd:72:
                    f5:c4:4e:b8:45:a3:5a:76:be:9c:41:dd:0b:ef:fd:
                    f1:db:22:4e:22:7f:eb:ac:a2:ee:c3:d8:47:b3:e9:
                    41:7d:ae:e6:aa:c5:35:c6:7e:04:16:c9:fa:3d:77:
                    1f:c8:30:44:1e:f1:cb:69:52:20:bf:ac:07:5b:f8:
                    43:e3:37:51:e8:53:18:88:07:6d:dd:65:fb:4a:55:
                    cb:55:25:bf:c8:4f:88:dc:01:16:d0:06:c6:a5:d2:
                    fd:ac:01:90:aa:9c:49:d7:a4:cb:c8:52:b7:79:bc:
                    ad:79:0a:7d:6d:49:6b:0f:a4:e1:ba:62:6e:88:37:
                    cc:a0:c6:75:06:2b:ee:d5:b3:d2:0c:ae:ee:36:51:
                    41:b5:33:a0:48:dd:85:35:f5:60:42:40:30:41:75:
                    3f:cc:dd:12:2c:e2:1c:be:b1:ae:e6:37:db:d8:13:
                    52:30:dc:4c:51:81:f2:91:07:bb:e1:2f:b0:26:d2:
                    64:25:8f:d8:47:6a:92:29:04:42:e4:88:91:df:89:
                    27:3e:34:6c:68:70:66:f2:0a:aa:0c:05:00:40:14:
                    e2:9b:cc:c7:6f:39:40:67:98:77:ba:88:81:bd:5f:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2E:0B:C9:1E:3D:66:72:45:1E:E2:EA:7E:C8:A6:65:C0:37:F4:04
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3137352e3131312e3130382e302f32322d3234203d3e20313336313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:f4:f7:80:38:d6:a1:55:41:68:d8:9f:c4:c2:09:14:83:97:
         80:cb:63:3b:4b:69:dd:ca:c4:cd:a1:08:3f:91:24:95:f0:6b:
         d7:5f:83:04:83:77:e9:1d:f0:68:5d:26:85:6f:8d:94:17:fb:
         e4:c8:79:97:d4:9f:57:c2:05:79:75:cc:9c:58:27:ec:25:4b:
         33:70:4b:90:5b:15:0e:51:49:5c:6b:04:55:a4:64:69:16:ff:
         f4:94:45:44:a3:78:e9:e7:95:7e:69:7e:d7:70:d1:c4:f2:b2:
         11:bf:04:6a:6f:f6:f4:e6:6a:ba:6e:fb:01:2a:49:13:4c:27:
         b5:e7:b2:78:4d:5d:52:56:e5:d9:f9:cc:f0:4b:1a:73:8a:74:
         fe:b2:90:ad:79:25:5e:72:e1:b5:d6:f0:91:9d:c5:df:f2:51:
         69:0a:41:54:66:c9:2b:4c:78:dd:da:42:ad:07:33:19:03:b4:
         e7:ef:c0:4d:3c:8a:01:88:c1:3a:8c:1e:c8:1d:b9:48:7b:c7:
         3e:64:82:ed:f2:a9:42:dc:c3:7c:11:af:7b:6c:73:65:f9:a4:
         24:a1:65:c0:51:71:73:11:ac:0e:95:52:8b:cd:3e:b9:e5:20:
         15:f9:df:21:97:d3:43:7c:ee:54:7b:ec:03:89:c4:dd:f2:e1:
         f2:5b:b2:b8
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUA0yzk5slJZhEZtklNzqqecwtArIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExOTA5NTUwMloX
DTIyMTExOTEwMDAwMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCNTM2Qjk1NUY0RjQwMkVEQjYyNzZBMDJDMTAzRjNBQ0YxNTdDMTIzNjVC
MDhEMjgwOTkwNEFCRDcyRjVDNDRFQjg0NUEzNUE3NkJFOUM0MUREMEJFRkZERjFE
QjIyNEUyMjdGRUJBQ0EyRUVDM0Q4NDdCM0U5NDE3REFFRTZBQUM1MzVDNjdFMDQx
NkM5RkEzRDc3MUZDODMwNDQxRUYxQ0I2OTUyMjBCRkFDMDc1QkY4NDNFMzM3NTFF
ODUzMTg4ODA3NkRERDY1RkI0QTU1Q0I1NTI1QkZDODRGODhEQzAxMTZEMDA2QzZB
NUQyRkRBQzAxOTBBQTlDNDlEN0E0Q0JDODUyQjc3OUJDQUQ3OTBBN0Q2RDQ5NkIw
RkE0RTFCQTYyNkU4ODM3Q0NBMEM2NzUwNjJCRUVENUIzRDIwQ0FFRUUzNjUxNDFC
NTMzQTA0OEREODUzNUY1NjA0MjQwMzA0MTc1M0ZDQ0REMTIyQ0UyMUNCRUIxQUVF
NjM3REJEODEzNTIzMERDNEM1MTgxRjI5MTA3QkJFMTJGQjAyNkQyNjQyNThGRDg0
NzZBOTIyOTA0NDJFNDg4OTFERjg5MjczRTM0NkM2ODcwNjZGMjBBQUEwQzA1MDA0
MDE0RTI5QkNDQzc2RjM5NDA2Nzk4NzdCQTg4ODFCRDVGQ0NCMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1NrlV9PQC7bYnagLBA/Os
8VfBI2WwjSgJkEq9cvXETrhFo1p2vpxB3Qvv/fHbIk4if+usou7D2Eez6UF9ruaq
xTXGfgQWyfo9dx/IMEQe8ctpUiC/rAdb+EPjN1HoUxiIB23dZftKVctVJb/IT4jc
ARbQBsal0v2sAZCqnEnXpMvIUrd5vK15Cn1tSWsPpOG6Ym6IN8ygxnUGK+7Vs9IM
ru42UUG1M6BI3YU19WBCQDBBdT/M3RIs4hy+sa7mN9vYE1Iw3ExRgfKRB7vhL7Am
0mQlj9hHapIpBELkiJHfiSc+NGxocGbyCqoMBQBAFOKbzMdvOUBnmHe6iIG9X8yz
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUdy4LyR49ZnJFHuLqfsimZcA39AQwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzczNTJlMzEzMTMxMmUzMTMwMzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzYzMTMxMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKvb2wwDQYJ
KoZIhvcNAQELBQADggEBAIX094A41qFVQWjYn8TCCRSDl4DLYztLad3KxM2hCD+R
JJXwa9dfgwSDd+kd8GhdJoVvjZQX++TIeZfUn1fCBXl1zJxYJ+wlSzNwS5BbFQ5R
SVxrBFWkZGkW//SURUSjeOnnlX5pftdw0cTyshG/BGpv9vTmarpu+wEqSRNMJ7Xn
snhNXVJW5dn5zPBLGnOKdP6ykK15JV5y4bXW8JGdxd/yUWkKQVRmyStMeN3aQq0H
MxkDtOfvwE08igGIwTqMHsgduUh7xz5kgu3yqULcw3wRr3tsc2X5pCShZcBRcXMR
rA6VUovNPrnlIBX53yGX00N87lR77AOJxN3y4fJbsrg=
-----END CERTIFICATE-----