Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3135332e3231362e302f32322d3234203d3e203435323931.roa
File:                     3230332e3135332e3231362e302f32322d3234203d3e203435323931.roa (raw, json)
Hash identifier:          QdrS9WI4itB0gh8VZ6KO6VU9vjU3xwGRoY4uVeZH7wA=
Subject key identifier:   37:75:55:35:CD:2A:C3:66:7F:E0:59:5A:FE:02:96:57:57:80:76:C7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       11066AB8C7975FB6188ADBB520C3FEAAE0A7B7BC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3135332e3231362e302f32322d3234203d3e203435323931.roa
Signing time:             Thu 28 Oct 2021 06:00:00 +0000
ROA not before:           Thu 28 Oct 2021 05:55:00 +0000
ROA not after:            Fri 28 Oct 2022 06:00:00 +0000
asID:                     45291
IP address blocks:        203.153.216.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:06:6a:b8:c7:97:5f:b6:18:8a:db:b5:20:c3:fe:aa:e0:a7:b7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 28 05:55:00 2021 GMT
            Not After : Oct 28 06:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:09:d3:bc:d1:18:53:bb:18:1c:4b:59:c3:
                    b8:b0:50:1c:7b:d0:aa:3a:d5:dd:c3:82:d5:5c:99:
                    1c:b3:a6:81:50:57:fa:f7:37:89:f6:57:4e:b3:32:
                    15:cf:30:d0:2c:f8:c2:67:b8:af:25:5d:83:7d:ec:
                    d1:56:ab:f8:b3:8c:51:d3:86:a9:c8:61:92:94:71:
                    c5:52:87:78:e6:0b:b0:be:ee:11:84:14:f4:f7:c5:
                    a8:c6:9a:69:f3:68:aa:80:dc:9d:20:02:35:e9:e6:
                    9d:6f:b5:b7:2e:9d:c4:62:3e:55:9c:81:74:d7:e5:
                    39:d8:48:d5:00:d4:df:f9:7c:34:9a:7f:ca:0a:66:
                    12:a2:10:f7:84:84:f4:3c:c2:e7:7e:41:e4:47:31:
                    00:f9:ed:ca:2c:99:5d:99:e9:d9:42:3e:fd:65:18:
                    a7:43:55:5b:d7:c2:c3:96:3c:21:4c:ad:f6:e5:af:
                    e4:51:ae:ae:5a:73:e0:ef:1d:0f:a2:aa:16:f5:a8:
                    7a:28:4d:8c:c6:60:1f:bb:c2:00:86:01:e2:8b:60:
                    eb:61:34:22:80:af:f1:ed:7f:f5:f2:35:72:5b:6d:
                    a5:2b:30:fc:ed:fc:80:b0:c7:67:89:ad:61:84:f7:
                    a7:ba:fc:87:e1:0f:d1:22:13:6a:02:53:7a:47:ce:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:75:55:35:CD:2A:C3:66:7F:E0:59:5A:FE:02:96:57:57:80:76:C7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3135332e3231362e302f32322d3234203d3e203435323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:e3:64:d5:c7:50:71:d5:4c:ef:d8:90:13:cd:66:c5:e8:aa:
         49:cb:77:b7:59:8b:d5:9c:5c:63:a8:1f:d1:bc:98:85:b1:14:
         72:fb:b2:06:6b:73:2d:df:7c:fb:ec:ed:b1:f8:ef:1d:78:6d:
         5b:71:bc:65:2d:a4:de:60:69:fd:92:5f:5f:11:99:92:93:82:
         fb:03:97:d5:7b:57:bb:ea:00:49:1a:55:90:99:a0:74:58:ce:
         4b:c4:e0:57:a2:5d:4b:1c:29:7d:4e:19:f9:00:ee:90:44:70:
         dc:34:9b:90:35:a8:37:99:c8:d2:50:51:cb:fb:2d:f3:1b:5d:
         d4:ae:37:69:be:d5:11:60:54:63:b7:2a:d5:b6:1e:5d:fb:3c:
         c8:2d:5c:a9:aa:03:68:93:d3:33:28:db:f3:a1:0c:b0:99:a6:
         ee:8d:04:8f:68:3b:38:00:76:74:b8:b2:df:b8:6f:b6:a1:30:
         ce:fa:c7:67:df:d8:5f:91:97:ed:1f:cf:df:ff:68:8a:c4:3f:
         d4:fb:4a:b7:7b:22:e5:28:0b:af:b7:25:93:75:8e:27:c0:49:
         e2:04:98:c7:4c:ed:ff:36:b3:4a:dc:82:89:c6:e6:ad:aa:d3:
         f0:e7:d8:0f:63:25:4c:9b:21:c5:9c:3a:67:2c:32:b3:8c:17:
         f7:ba:71:1d
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUEQZquMeXX7YYitu1IMP+quCnt7wwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAyODA1NTUwMFoX
DTIyMTAyODA2MDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCOTg4MDlEM0JDRDExODUzQkIxODFDNEI1OUMzQjhCMDUwMUM3QkQwQUEz
QUQ1RERDMzgyRDU1Qzk5MUNCM0E2ODE1MDU3RkFGNzM3ODlGNjU3NEVCMzMyMTVD
RjMwRDAyQ0Y4QzI2N0I4QUYyNTVEODM3REVDRDE1NkFCRjhCMzhDNTFEMzg2QTlD
ODYxOTI5NDcxQzU1Mjg3NzhFNjBCQjBCRUVFMTE4NDE0RjRGN0M1QThDNjlBNjlG
MzY4QUE4MERDOUQyMDAyMzVFOUU2OUQ2RkI1QjcyRTlEQzQ2MjNFNTU5QzgxNzRE
N0U1MzlEODQ4RDUwMEQ0REZGOTdDMzQ5QTdGQ0EwQTY2MTJBMjEwRjc4NDg0RjQz
Q0MyRTc3RTQxRTQ0NzMxMDBGOUVEQ0EyQzk5NUQ5OUU5RDk0MjNFRkQ2NTE4QTc0
MzU1NUJEN0MyQzM5NjNDMjE0Q0FERjZFNUFGRTQ1MUFFQUU1QTczRTBFRjFEMEZB
MkFBMTZGNUE4N0EyODREOENDNjYwMUZCQkMyMDA4NjAxRTI4QjYwRUI2MTM0MjI4
MEFGRjFFRDdGRjVGMjM1NzI1QjZEQTUyQjMwRkNFREZDODBCMEM3Njc4OUFENjE4
NEY3QTdCQUZDODdFMTBGRDEyMjEzNkEwMjUzN0E0N0NFODM0NzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5iAnTvNEYU7sYHEtZw7iw
UBx70Ko61d3DgtVcmRyzpoFQV/r3N4n2V06zMhXPMNAs+MJnuK8lXYN97NFWq/iz
jFHThqnIYZKUccVSh3jmC7C+7hGEFPT3xajGmmnzaKqA3J0gAjXp5p1vtbcuncRi
PlWcgXTX5TnYSNUA1N/5fDSaf8oKZhKiEPeEhPQ8wud+QeRHMQD57cosmV2Z6dlC
Pv1lGKdDVVvXwsOWPCFMrfblr+RRrq5ac+DvHQ+iqhb1qHooTYzGYB+7wgCGAeKL
YOthNCKAr/Htf/XyNXJbbaUrMPzt/ICwx2eJrWGE96e6/IfhD9EiE2oCU3pHzoNH
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUN3VVNc0qw2Z/4Fla/gKWV1eAdscwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMyMzAzMzJlMzEzNTMzMmUzMjMxMzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNDM1MzIzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCy5nYMA0GCSqG
SIb3DQEBCwUAA4IBAQBn42TVx1Bx1Uzv2JATzWbF6KpJy3e3WYvVnFxjqB/RvJiF
sRRy+7IGa3Mt33z77O2x+O8deG1bcbxlLaTeYGn9kl9fEZmSk4L7A5fVe1e76gBJ
GlWQmaB0WM5LxOBXol1LHCl9Thn5AO6QRHDcNJuQNag3mcjSUFHL+y3zG13Urjdp
vtURYFRjtyrVth5d+zzILVypqgNok9MzKNvzoQywmabujQSPaDs4AHZ0uLLfuG+2
oTDO+sdn39hfkZftH8/f/2iKxD/U+0q3eyLlKAuvtyWTdY4nwEniBJjHTO3/NrNK
3IKJxuatqtPw59gPYyVMmyHFnDpnLDKzjBf3unEd
-----END CERTIFICATE-----