Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3134362e3232342e302f31392d3234203d3e2039333236.roa
File:                     3230322e3134362e3232342e302f31392d3234203d3e2039333236.roa (raw, json)
Hash identifier:          pSznng0JpgZn8kNkwhIucv8z345ZECNuz+wjFinvnmQ=
Subject key identifier:   B9:DC:86:B4:9A:BD:07:3A:31:2D:3E:89:A7:68:98:ED:0B:D3:7F:0C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       682A55DFE279EDE345ABDEF524A5D0AC04B8790A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3134362e3232342e302f31392d3234203d3e2039333236.roa
Signing time:             Wed 28 Apr 2021 02:16:58 +0000
ROA not before:           Wed 28 Apr 2021 02:11:58 +0000
ROA not after:            Thu 28 Apr 2022 02:16:58 +0000
asID:                     9326
IP address blocks:        202.146.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2a:55:df:e2:79:ed:e3:45:ab:de:f5:24:a5:d0:ac:04:b8:79:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 28 02:11:58 2021 GMT
            Not After : Apr 28 02:16:58 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:3b:f6:ce:2b:31:10:1b:4a:01:34:72:29:
                    ee:65:4a:72:a2:5d:78:75:46:82:e2:9c:91:a0:b0:
                    35:62:68:7a:ff:c8:56:dd:23:b9:90:9c:18:4c:a1:
                    b4:d8:5f:2c:1e:0b:c7:e0:d7:0f:1f:17:f8:fa:11:
                    8e:73:76:df:01:d8:1d:8f:c8:82:db:e9:4b:aa:d8:
                    d1:7c:12:6b:91:e6:c2:5d:9c:1e:87:c0:ef:55:f0:
                    e1:69:bf:7d:24:23:4a:1f:5d:53:16:d0:68:3c:bd:
                    7c:78:de:1e:80:c8:d8:4c:f7:30:94:c0:c6:9b:3b:
                    37:d9:6f:2e:dd:42:cf:24:b7:a6:18:fe:d7:7f:02:
                    95:af:10:97:31:7b:da:58:a1:bc:c0:d3:ae:57:0b:
                    d9:d4:f4:70:2a:bc:76:cc:9f:68:0c:d1:9f:1c:23:
                    c5:cc:b2:fb:57:a7:08:78:9f:ee:5d:18:43:76:c3:
                    8c:d0:81:e6:d1:a9:eb:74:63:9e:5d:e2:a1:7d:6b:
                    32:dc:fe:de:e1:6a:72:91:1c:c6:7d:2a:4e:11:17:
                    24:c2:99:fe:45:20:38:c5:d5:e8:6d:7f:2a:3a:52:
                    e1:15:08:6a:b4:b6:8e:c2:b3:d2:a1:78:a9:9b:f8:
                    76:9a:3e:b8:6d:da:f6:af:61:c4:17:e7:78:06:6f:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DC:86:B4:9A:BD:07:3A:31:2D:3E:89:A7:68:98:ED:0B:D3:7F:0C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3134362e3232342e302f31392d3234203d3e2039333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.146.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:70:30:2a:7f:c6:55:b2:9a:25:fd:4a:61:6e:6b:2f:36:cd:
         d8:52:2e:31:1c:fe:3c:f0:bc:e1:21:94:dd:e9:3c:21:fe:c8:
         e3:88:ad:93:a4:92:b9:ee:2d:3a:67:d2:9e:44:52:79:85:87:
         c8:76:73:49:93:68:01:5f:1b:d1:2b:f4:11:47:01:3b:80:75:
         3a:4b:12:63:49:8f:8f:73:14:27:ab:a5:a8:5e:7e:58:e4:cd:
         8d:96:67:08:7e:b0:14:e1:19:fb:d1:65:9d:73:50:6c:a9:b3:
         01:79:91:f8:0b:c5:e6:ca:f3:49:6b:b0:cf:eb:4c:79:db:11:
         6e:37:85:c1:aa:ac:ca:ba:dc:56:f0:43:71:e3:dc:20:68:00:
         9b:84:1a:e7:4a:62:0f:80:09:a8:dd:78:e8:77:cc:ca:df:81:
         99:13:68:08:b9:07:71:37:d4:a9:17:73:68:6f:d7:b5:93:21:
         42:d6:9f:f3:99:47:95:b4:f2:3e:32:1f:ee:46:5f:2f:46:55:
         0c:91:c2:4b:29:fa:cd:0f:e2:72:81:15:a1:58:a6:72:99:d9:
         9e:b6:59:f5:d4:22:de:1e:5c:35:b9:10:59:63:bf:23:6f:81:
         52:69:d6:27:27:a5:dd:a3:0d:af:78:bf:aa:d8:2c:da:28:2c:
         75:5c:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----