Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e34362e3135322e302f32322d3234203d3e20313332363533.roa
File:                     3230322e34362e3135322e302f32322d3234203d3e20313332363533.roa (raw, json)
Hash identifier:          dIXczSnth+IssuqGfSB5YE5t3gp7qZNjEf6fNw0/4BA=
Subject key identifier:   52:BC:ED:B7:A7:8B:B7:0A:81:B4:9A:2B:87:0B:E3:B1:CC:78:22:47
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5DEAE682DE9B910449E2D64CAD3ABE3905C8B4F9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e34362e3135322e302f32322d3234203d3e20313332363533.roa
Signing time:             Tue 14 Sep 2021 06:09:23 +0000
ROA not before:           Tue 14 Sep 2021 06:04:23 +0000
ROA not after:            Wed 14 Sep 2022 06:09:23 +0000
asID:                     132653
IP address blocks:        202.46.152.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ea:e6:82:de:9b:91:04:49:e2:d6:4c:ad:3a:be:39:05:c8:b4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 14 06:04:23 2021 GMT
            Not After : Sep 14 06:09:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:a7:a3:2a:48:5b:e9:38:16:e8:f1:4d:a0:
                    10:ce:96:a7:91:b9:7d:53:ce:41:27:40:c7:0c:5a:
                    c0:14:4d:b9:a9:ce:f4:27:ba:7b:58:fb:62:03:ec:
                    c8:f8:1c:13:4c:0d:ad:54:68:6c:29:34:62:ad:57:
                    f2:4c:d1:39:00:fe:89:8e:22:78:95:d6:64:cf:5a:
                    42:9a:d1:d3:ae:65:39:3b:b6:45:2d:61:e3:7f:f9:
                    62:9a:b5:82:45:82:0d:cb:2c:6c:09:e1:db:60:4c:
                    a3:9a:bc:b2:6d:65:4c:86:72:76:4e:84:f0:57:35:
                    c7:9c:10:52:8a:b1:32:89:19:d8:d7:77:bb:c6:bb:
                    b1:3f:43:43:98:66:63:0c:13:ee:47:0d:3b:5f:ac:
                    49:f7:da:7e:b8:ae:61:78:fc:c1:92:3d:5a:32:05:
                    0f:25:92:0d:32:b1:b1:4c:1d:d5:90:8b:85:71:8b:
                    3e:ce:15:01:5c:1e:b6:fb:fd:e0:d8:2f:f5:20:6c:
                    92:70:da:da:be:98:9f:a5:66:18:10:b9:1b:5e:64:
                    7e:0c:81:c6:ba:f3:df:69:2b:a4:81:5a:3e:34:f4:
                    79:c3:8d:8d:4c:8e:b7:6e:98:51:df:5d:d8:08:95:
                    71:a4:78:52:6b:15:2f:65:03:91:48:9f:56:96:28:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BC:ED:B7:A7:8B:B7:0A:81:B4:9A:2B:87:0B:E3:B1:CC:78:22:47
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e34362e3135322e302f32322d3234203d3e20313332363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.46.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:83:29:ca:1b:0d:73:78:bf:23:31:31:54:07:cb:dd:34:86:
         2b:dd:58:b4:19:aa:9f:8a:e1:2d:57:c9:e0:66:7a:ae:d7:99:
         08:93:dc:e9:8a:a4:09:f5:80:fd:45:dc:26:34:20:78:54:97:
         77:9f:8b:ea:b1:68:e2:1d:4b:67:81:81:aa:be:75:a7:ec:35:
         72:32:b6:3a:7a:17:56:97:6e:c4:26:55:2a:c1:3d:9b:cd:37:
         36:5b:00:16:f0:8a:e5:e5:dc:6d:8d:2c:57:7c:76:29:08:f6:
         21:a9:b3:22:cc:52:b6:a8:61:1f:4d:77:67:51:1f:e4:2d:44:
         aa:1d:68:03:d1:b2:2d:87:d8:75:22:0f:54:ef:70:20:56:73:
         58:a2:fe:88:2c:0d:be:c4:fa:0c:02:ad:be:41:82:b1:17:18:
         75:ca:34:1d:22:64:07:be:34:3a:b2:53:05:55:37:69:44:d4:
         c4:3e:e3:ab:2f:e2:7e:f7:d3:57:25:c2:16:65:99:f6:72:c6:
         ae:e2:8e:98:82:86:5d:ac:81:b4:a5:55:cd:1f:a8:14:bf:03:
         b9:37:c9:77:dd:82:76:53:c0:97:60:19:c0:46:9d:f8:a2:fb:
         15:33:95:88:65:5d:d1:21:de:f4:e2:9b:db:b8:c3:03:ee:f0:
         b5:3f:c5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----