Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3134352e302e302f32322d3234203d3e203137383834.roa
File:                     3230322e3134352e302e302f32322d3234203d3e203137383834.roa (raw, json)
Hash identifier:          ehkd4iYTVKp5U6kftt9Xs4NwSofq+VSDHG1ljVR+wiY=
Subject key identifier:   4F:0C:2A:BA:1D:44:02:77:08:32:44:C2:30:01:2D:42:3C:CE:BF:0B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7AE6887CA96D03770714690A63D989843386F048
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3134352e302e302f32322d3234203d3e203137383834.roa
Signing time:             Mon 23 Aug 2021 07:16:47 +0000
ROA not before:           Mon 23 Aug 2021 07:11:47 +0000
ROA not after:            Tue 23 Aug 2022 07:16:47 +0000
asID:                     17884
IP address blocks:        202.145.0.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e6:88:7c:a9:6d:03:77:07:14:69:0a:63:d9:89:84:33:86:f0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 23 07:11:47 2021 GMT
            Not After : Aug 23 07:16:47 2022 GMT
        Subject: CN=3082010A0282010100C23D32AD2C81577EF9358EC866431F51BD7BAF2249CE6E887098A7B83FD6937FA167C42EB8D63F27386E9E6EE07F112E7062924DF0C831C8C52BA69DA6D8AC555F8B37FB4CAEBCB2983315C37DADD5FC2D777144E3B0D2ABE16DF07046BE6A6B6CEF725B681DA77DEDA668C850A132E77A7222F799DF9AA65270BCDC8FFC8606D8CA4CA87443D129B7320E603BE70EBC4700087B22956F758D48B28D943D2E9D867CEAFD0C99ED2903E5D26ADE5B80E457D5D6AD9E8EE2D0D3FF1275DF8EEED72F53E3AC2EF33B2A52B45843494928A675B1616CA1D0615102DD3E4802FE9030171FAE402FF5B5BE24BB3174D9EE4BAC94DB87E2A52292452F240E68338AAC730203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:32:ad:2c:81:57:7e:f9:35:8e:c8:66:43:
                    1f:51:bd:7b:af:22:49:ce:6e:88:70:98:a7:b8:3f:
                    d6:93:7f:a1:67:c4:2e:b8:d6:3f:27:38:6e:9e:6e:
                    e0:7f:11:2e:70:62:92:4d:f0:c8:31:c8:c5:2b:a6:
                    9d:a6:d8:ac:55:5f:8b:37:fb:4c:ae:bc:b2:98:33:
                    15:c3:7d:ad:d5:fc:2d:77:71:44:e3:b0:d2:ab:e1:
                    6d:f0:70:46:be:6a:6b:6c:ef:72:5b:68:1d:a7:7d:
                    ed:a6:68:c8:50:a1:32:e7:7a:72:22:f7:99:df:9a:
                    a6:52:70:bc:dc:8f:fc:86:06:d8:ca:4c:a8:74:43:
                    d1:29:b7:32:0e:60:3b:e7:0e:bc:47:00:08:7b:22:
                    95:6f:75:8d:48:b2:8d:94:3d:2e:9d:86:7c:ea:fd:
                    0c:99:ed:29:03:e5:d2:6a:de:5b:80:e4:57:d5:d6:
                    ad:9e:8e:e2:d0:d3:ff:12:75:df:8e:ee:d7:2f:53:
                    e3:ac:2e:f3:3b:2a:52:b4:58:43:49:49:28:a6:75:
                    b1:61:6c:a1:d0:61:51:02:dd:3e:48:02:fe:90:30:
                    17:1f:ae:40:2f:f5:b5:be:24:bb:31:74:d9:ee:4b:
                    ac:94:db:87:e2:a5:22:92:45:2f:24:0e:68:33:8a:
                    ac:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0C:2A:BA:1D:44:02:77:08:32:44:C2:30:01:2D:42:3C:CE:BF:0B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3134352e302e302f32322d3234203d3e203137383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:99:cf:3c:0b:a1:08:0e:34:ae:ab:df:40:0b:d3:17:d8:ce:
         28:67:75:48:71:de:53:52:2c:ba:2b:5f:c3:c4:00:f9:5b:d8:
         05:7d:43:70:38:a4:bd:45:f8:9f:e2:86:02:e3:08:e2:aa:ca:
         d1:72:91:f5:e7:8f:14:dd:b4:51:82:da:1f:ce:21:9f:41:26:
         f8:21:64:3f:4d:01:60:e7:bd:56:e9:c2:1d:0f:fd:d4:9c:98:
         bc:d3:75:de:07:c4:18:4f:27:0b:a3:54:3a:7d:26:bd:4e:3e:
         e4:34:4f:22:d8:ee:a6:f5:eb:e4:d2:88:27:90:6a:bd:f9:d9:
         bb:77:58:3a:f9:37:a2:8a:66:d2:a1:1d:d9:0e:df:a2:e9:d4:
         5d:d4:54:bf:8e:06:bf:71:c7:10:d7:96:06:10:dd:fc:2d:b4:
         ec:e1:58:85:83:82:1f:c9:8e:1e:f9:fb:0e:ba:b2:bf:4e:2d:
         6d:d2:6b:96:0e:a4:e7:c6:7d:ec:46:78:2a:ed:6e:39:87:b3:
         f2:a7:9e:3a:49:da:2e:22:80:ef:e8:3a:e6:f4:2b:3a:bb:14:
         21:69:af:7b:0f:72:0f:b0:02:90:dd:0d:c8:6c:36:aa:62:94:
         da:90:2b:b9:b5:e0:86:ff:17:8f:c6:49:6f:74:1c:1e:fa:9a:
         b6:00:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----