Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3231302e302f32342d3234203d3e203234323033.roa
File:                     3131322e3231352e3231302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          683M+Ps/RUipWy4Da4OvPbMDk7J2zy4FEp1NR/kqcsY=
Subject key identifier:   D0:04:FD:55:CF:BF:50:E3:E5:55:49:94:A5:CD:54:4D:8F:17:11:54
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       479BDF271B3A32854E4DBC53314CF6BB80205219
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3231302e302f32342d3234203d3e203234323033.roa
Signing time:             Tue 12 Apr 2022 08:00:00 +0000
ROA not before:           Tue 12 Apr 2022 07:55:00 +0000
ROA not after:            Tue 11 Apr 2023 08:00:00 +0000
asID:                     24203
IP address blocks:        112.215.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9b:df:27:1b:3a:32:85:4e:4d:bc:53:31:4c:f6:bb:80:20:52:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Apr 12 07:55:00 2022 GMT
            Not After : Apr 11 08:00:00 2023 GMT
        Subject: CN=D004FD55CFBF50E3E5554994A5CD544D8F171154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:5a:be:93:04:f7:09:47:9b:0d:82:4d:9c:
                    7f:7f:22:b1:d8:4b:97:cf:e6:e5:b0:9d:cb:6e:3b:
                    19:f0:43:ff:b1:e5:97:d6:3c:15:4f:36:2e:5a:5c:
                    e0:f8:61:a4:f1:ce:d6:ef:44:4e:46:21:46:56:3b:
                    e2:ff:d0:86:48:97:ea:a3:e6:05:37:02:53:44:5f:
                    56:d0:ed:8b:b4:18:bd:dc:71:2d:bd:08:7a:1c:55:
                    cc:3f:1a:5e:01:f2:44:9d:ca:af:fa:82:35:77:fd:
                    e4:b3:40:60:89:10:fe:2f:f1:95:08:66:f4:ea:b0:
                    50:e1:34:33:c6:f7:37:d6:aa:d0:a9:a8:6e:2b:c8:
                    3d:00:f7:25:ac:6f:8e:c8:3e:49:f3:13:c7:31:a0:
                    7d:d0:87:40:72:52:b8:73:dd:6f:77:d0:fc:95:12:
                    bd:fe:a3:07:35:15:07:20:71:67:b3:7b:b8:1c:fd:
                    bf:13:49:21:e7:5b:ac:e7:6f:b1:b1:ca:d8:48:5f:
                    b2:10:d0:14:23:c3:28:ad:85:91:93:39:df:a4:0b:
                    49:b6:7a:6c:17:1f:cf:7b:38:a5:c4:57:8d:35:11:
                    42:e7:4f:79:4e:ba:13:d3:37:7b:f6:30:13:b5:57:
                    c8:71:a3:9e:c4:79:49:75:25:91:5a:e4:e2:ae:ea:
                    aa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:04:FD:55:CF:BF:50:E3:E5:55:49:94:A5:CD:54:4D:8F:17:11:54
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3231302e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.215.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d9:11:ae:36:1c:4e:a0:94:04:09:42:50:59:f8:0d:00:84:
         80:ca:3c:36:60:ab:9d:b5:aa:cc:f6:60:c9:3a:74:00:fb:6a:
         f1:50:7a:73:f6:25:d9:d1:2e:a8:0d:13:17:87:04:f7:7b:be:
         c8:a2:c6:2c:97:12:e2:c9:f2:cc:35:a7:04:c5:6d:9e:46:9e:
         26:0e:e1:c9:31:28:93:84:26:25:a5:ba:2a:0e:e9:6c:92:28:
         69:c3:c7:a1:fe:48:87:d5:d5:eb:fd:cb:69:87:8d:7a:65:e3:
         e0:98:ce:30:3a:07:48:36:5b:b4:66:63:bb:b0:fa:d8:77:50:
         a1:17:32:7a:9a:d6:99:86:40:34:48:40:1b:96:a1:e0:19:e1:
         d9:d3:79:73:2a:11:55:2e:1e:fa:d7:24:19:40:a1:0e:c3:50:
         96:cf:1c:b4:15:58:29:08:f0:39:8c:71:53:c9:01:b7:37:a9:
         14:29:a8:e5:a6:25:e7:98:fa:35:43:59:24:86:f4:bf:f6:8f:
         f3:7f:f6:41:cc:91:88:52:8e:7f:41:ac:fb:64:77:88:a8:ca:
         a5:4e:01:3f:20:c2:08:72:69:cf:37:27:2d:6e:85:e7:66:50:
         71:86:bf:28:7a:44:3b:fc:a1:81:01:02:dd:5a:2e:46:2c:1c:
         86:ab:fa:79
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUR5vfJxs6MoVOTbxTMUz2u4AgUhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MTIwNzU1MDBaFw0yMzA0MTEwODAwMDBaMDMxMTAvBgNV
BAMTKEQwMDRGRDU1Q0ZCRjUwRTNFNTU1NDk5NEE1Q0Q1NDREOEYxNzExNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EVq+kwT3CUebDYJNnH9/IrHY
S5fP5uWwnctuOxnwQ/+x5ZfWPBVPNi5aXOD4YaTxztbvRE5GIUZWO+L/0IZIl+qj
5gU3AlNEX1bQ7Yu0GL3ccS29CHocVcw/Gl4B8kSdyq/6gjV3/eSzQGCJEP4v8ZUI
ZvTqsFDhNDPG9zfWqtCpqG4ryD0A9yWsb47IPknzE8cxoH3Qh0ByUrhz3W930PyV
Er3+owc1FQcgcWeze7gc/b8TSSHnW6znb7GxythIX7IQ0BQjwyithZGTOd+kC0m2
emwXH897OKXEV401EULnT3lOuhPTN3v2MBO1V8hxo57EeUl1JZFa5OKu6qrzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU0AT9Vc+/UOPlVUmUpc1UTY8XEVQwHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzMjMxMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzIzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcNfSMA0GCSqG
SIb3DQEBCwUAA4IBAQBi2RGuNhxOoJQECUJQWfgNAISAyjw2YKudtarM9mDJOnQA
+2rxUHpz9iXZ0S6oDRMXhwT3e77IosYslxLiyfLMNacExW2eRp4mDuHJMSiThCYl
pboqDulskihpw8eh/kiH1dXr/ctph416ZePgmM4wOgdINlu0ZmO7sPrYd1ChFzJ6
mtaZhkA0SEAblqHgGeHZ03lzKhFVLh761yQZQKEOw1CWzxy0FVgpCPA5jHFTyQG3
N6kUKajlpiXnmPo1Q1kkhvS/9o/zf/ZBzJGIUo5/Qaz7ZHeIqMqlTgE/IMIIcmnP
NyctboXnZlBxhr8oekQ7/KGBAQLdWi5GLByGq/p5
-----END CERTIFICATE-----