Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/34392e3135362e32302e302f32332d3234203d3e20313334363330.roa
File:                     34392e3135362e32302e302f32332d3234203d3e20313334363330.roa (raw, json)
Hash identifier:          /azno5TnGBdX8/sVzImiMLoObHnPszUFskjgwnqbr1M=
Subject key identifier:   05:03:DA:36:D6:15:E3:18:18:1F:EB:75:00:99:14:33:64:7E:DA:82
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5245687F59C2E3D54200B3025617546DAEF46B2E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34392e3135362e32302e302f32332d3234203d3e20313334363330.roa
Signing time:             Mon 26 Apr 2021 03:11:23 +0000
ROA not before:           Mon 26 Apr 2021 03:06:23 +0000
ROA not after:            Tue 26 Apr 2022 03:11:23 +0000
asID:                     134630
IP address blocks:        49.156.20.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:45:68:7f:59:c2:e3:d5:42:00:b3:02:56:17:54:6d:ae:f4:6b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 26 03:06:23 2021 GMT
            Not After : Apr 26 03:11:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:08:97:41:a8:bc:31:4a:ca:e3:50:d4:23:
                    71:62:22:0d:5c:d6:76:4e:ff:e9:55:8c:2c:9f:ea:
                    b2:ef:90:04:1e:d2:75:73:37:ea:12:d6:b5:16:4f:
                    ab:a3:49:c9:79:f8:5f:e2:19:e4:b9:af:68:b5:8b:
                    44:e6:2a:83:5e:9d:e8:67:99:13:e3:04:00:4d:38:
                    78:ef:44:1a:00:52:6d:d8:40:49:98:ee:b0:b2:42:
                    96:e9:f4:56:bc:ef:17:b0:26:93:2e:82:7d:e4:e0:
                    0f:b1:1b:c5:34:86:34:fd:39:01:47:65:32:81:13:
                    61:88:0a:19:44:94:d5:6c:4c:8f:ad:5a:42:ad:45:
                    02:e2:cd:59:64:bd:15:28:c6:ac:ce:f1:f5:3e:ee:
                    02:10:ca:5a:81:ef:94:6e:42:26:e0:cf:ea:23:22:
                    58:22:9d:84:bf:17:6d:a0:e0:93:c4:bc:8c:c2:1e:
                    dc:d6:f7:f9:4c:95:26:14:8d:eb:84:27:6e:16:3e:
                    62:c7:1c:20:8a:98:cd:28:90:14:56:6b:9e:3c:49:
                    cc:17:56:f0:3d:2c:83:1d:a0:16:90:be:f2:72:c6:
                    05:02:67:a9:cf:69:df:71:90:71:59:d7:3d:29:88:
                    05:62:aa:36:68:f9:6d:3f:54:ec:29:b1:d5:06:8d:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:03:DA:36:D6:15:E3:18:18:1F:EB:75:00:99:14:33:64:7E:DA:82
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34392e3135362e32302e302f32332d3234203d3e20313334363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.156.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:8f:8c:a0:8b:10:40:5c:47:ab:c0:19:89:bc:55:8f:9c:9f:
         1f:5a:cb:1d:a5:d2:ee:2f:e4:39:00:e3:15:9f:3b:e7:98:ba:
         e6:de:4c:fd:ac:79:2e:14:16:fc:71:b4:1e:05:ee:00:ca:0c:
         b2:fe:4a:97:7e:9c:d7:8d:e4:4c:dd:6b:f9:35:1d:35:0b:fe:
         11:07:7b:f7:78:f6:21:6a:9a:85:4f:0e:7e:45:f2:49:67:f7:
         71:75:d6:0a:9e:3f:e6:72:e0:3e:e0:8d:4a:04:00:9c:f5:cd:
         1e:7f:de:9d:ec:b1:13:7e:4a:7c:6e:87:1e:01:fd:07:02:33:
         3a:c9:5d:54:84:64:4c:15:40:35:a1:78:1d:42:a9:6f:54:8f:
         87:45:72:0a:9e:8e:e4:9e:56:cc:2f:5c:8e:bd:99:6b:db:62:
         8d:23:39:1d:de:fd:c2:c1:c2:46:59:9d:e5:91:f9:f6:8e:22:
         f4:cc:12:c3:d0:84:6e:3f:fb:91:86:85:7c:fe:e8:a0:2a:37:
         b2:da:f0:2c:97:9f:27:29:ff:23:68:04:02:12:c3:03:fb:03:
         e3:57:c4:03:b8:39:3d:82:29:09:d7:3d:e1:57:34:92:a2:f1:
         4f:74:15:d1:dc:bf:cf:3c:04:e3:39:4b:6d:46:f4:b1:bf:28:
         ac:09:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----