Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3231322e302f32322d3234203d3e203137393935.roa
File:                     3130332e3132352e3231322e302f32322d3234203d3e203137393935.roa (raw, json)
Hash identifier:          ZBgHgGJ1d7wH6bnjXC7sg4g5Amoa/f0VYQVXQcnWQYo=
Subject key identifier:   F8:A7:07:0B:08:B0:AE:9A:13:17:9C:BC:C5:B7:8E:B1:AF:5A:85:2A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2C83DAF0D2BA800C3ABBF72790FD8D9E00D5EC27
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3231322e302f32322d3234203d3e203137393935.roa
Signing time:             Sat 09 Oct 2021 02:00:01 +0000
ROA not before:           Sat 09 Oct 2021 01:55:01 +0000
ROA not after:            Sun 09 Oct 2022 02:00:01 +0000
asID:                     17995
IP address blocks:        103.125.212.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:83:da:f0:d2:ba:80:0c:3a:bb:f7:27:90:fd:8d:9e:00:d5:ec:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  9 01:55:01 2021 GMT
            Not After : Oct  9 02:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:56:eb:59:a2:69:b2:21:2f:ed:bb:3e:4d:
                    f7:34:65:fd:85:7a:a2:87:27:37:0e:15:67:b2:12:
                    7c:4e:f9:b6:c9:14:ae:53:41:20:cc:cd:9c:67:70:
                    eb:aa:05:05:79:e2:e4:3e:62:f9:89:8c:84:9e:25:
                    a4:0b:5d:81:3e:40:bc:30:76:e6:b5:be:f7:a5:23:
                    cb:74:62:ba:95:17:53:98:05:ea:51:1c:a3:2b:92:
                    31:81:60:28:19:df:04:4f:8c:73:b6:2c:2b:f7:72:
                    c9:15:78:63:f4:88:62:ec:c1:6f:7e:71:b2:4c:b4:
                    8a:b3:ea:6f:6a:94:d5:a7:73:3c:fb:80:3f:85:aa:
                    85:c8:c1:89:78:3b:49:96:58:4c:30:19:89:3c:0b:
                    b2:d8:2f:fa:19:03:29:73:50:55:90:4f:07:5a:be:
                    f8:23:5a:b5:40:80:83:44:3d:72:42:12:ff:01:5c:
                    77:d3:e3:29:b6:07:c9:24:aa:8f:75:a8:10:73:47:
                    81:62:bc:1b:fd:20:29:17:47:54:44:42:fa:03:5a:
                    0f:b8:54:ec:49:9c:5e:93:da:54:ab:10:c9:b5:bd:
                    2d:45:66:80:8a:1f:fe:a3:3e:04:07:ce:c6:b5:87:
                    09:46:34:91:2f:a6:21:a3:cf:71:1c:a8:27:cd:d8:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A7:07:0B:08:B0:AE:9A:13:17:9C:BC:C5:B7:8E:B1:AF:5A:85:2A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3231322e302f32322d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:43:6d:49:0e:ff:50:79:fb:21:ee:db:2b:b8:76:b1:f7:20:
         45:a5:06:20:a0:f7:b5:82:c4:09:d1:3b:c2:cf:9d:4a:be:ba:
         0f:9a:1f:a0:ec:c4:37:5e:0e:a3:01:39:68:30:7f:3d:6b:22:
         5c:0e:1b:45:55:ed:f3:c1:38:c3:91:1c:eb:0d:8d:64:78:86:
         ac:77:fa:a9:ee:a0:18:e5:23:c2:f5:71:d2:2e:d1:06:f9:fb:
         68:77:19:25:df:4e:b7:0b:7d:d5:95:59:f9:9d:ae:47:dd:b7:
         a3:46:7a:61:04:11:62:f9:4a:08:97:41:a4:c7:59:e4:ff:f4:
         7e:eb:26:2b:f3:bb:43:78:59:34:39:a4:dd:d9:a5:09:cb:d2:
         78:1e:93:62:91:e6:85:2f:3c:fd:0d:4d:4e:a1:ee:bf:55:41:
         45:49:a9:6d:b4:5f:32:f9:dc:94:9f:6d:7c:f7:60:71:74:1c:
         66:4e:e6:4b:cd:86:45:f7:a8:9c:0a:6d:ee:04:69:2f:34:d0:
         ee:41:23:e5:17:37:ca:a5:6d:c4:3e:b2:69:1c:4e:3c:3f:0e:
         f7:88:dc:5c:10:53:95:69:56:cc:a0:f2:26:a0:dd:2a:1f:da:
         fa:38:0d:f0:16:0e:1f:07:32:3f:1a:f3:69:6a:21:2b:c3:12:
         3b:4a:dc:25
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIULIPa8NK6gAw6u/cnkP2NngDV7CcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAwOTAxNTUwMVoX
DTIyMTAwOTAyMDAwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBOTdENTZFQjU5QTI2OUIyMjEyRkVEQkIzRTRERjczNDY1RkQ4NTdBQTI4
NzI3MzcwRTE1NjdCMjEyN0M0RUY5QjZDOTE0QUU1MzQxMjBDQ0NEOUM2NzcwRUJB
QTA1MDU3OUUyRTQzRTYyRjk4OThDODQ5RTI1QTQwQjVEODEzRTQwQkMzMDc2RTZC
NUJFRjdBNTIzQ0I3NDYyQkE5NTE3NTM5ODA1RUE1MTFDQTMyQjkyMzE4MTYwMjgx
OURGMDQ0RjhDNzNCNjJDMkJGNzcyQzkxNTc4NjNGNDg4NjJFQ0MxNkY3RTcxQjI0
Q0I0OEFCM0VBNkY2QTk0RDVBNzczM0NGQjgwM0Y4NUFBODVDOEMxODk3ODNCNDk5
NjU4NEMzMDE5ODkzQzBCQjJEODJGRkExOTAzMjk3MzUwNTU5MDRGMDc1QUJFRjgy
MzVBQjU0MDgwODM0NDNENzI0MjEyRkYwMTVDNzdEM0UzMjlCNjA3QzkyNEFBOEY3
NUE4MTA3MzQ3ODE2MkJDMUJGRDIwMjkxNzQ3NTQ0NDQyRkEwMzVBMEZCODU0RUM0
OTlDNUU5M0RBNTRBQjEwQzlCNUJEMkQ0NTY2ODA4QTFGRkVBMzNFMDQwN0NFQzZC
NTg3MDk0NjM0OTEyRkE2MjFBM0NGNzExQ0E4MjdDREQ4ODI5MTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpfVbrWaJpsiEv7bs+Tfc0
Zf2FeqKHJzcOFWeyEnxO+bbJFK5TQSDMzZxncOuqBQV54uQ+YvmJjISeJaQLXYE+
QLwwdua1vvelI8t0YrqVF1OYBepRHKMrkjGBYCgZ3wRPjHO2LCv3cskVeGP0iGLs
wW9+cbJMtIqz6m9qlNWnczz7gD+FqoXIwYl4O0mWWEwwGYk8C7LYL/oZAylzUFWQ
TwdavvgjWrVAgINEPXJCEv8BXHfT4ym2B8kkqo91qBBzR4FivBv9ICkXR1REQvoD
Wg+4VOxJnF6T2lSrEMm1vS1FZoCKH/6jPgQHzsa1hwlGNJEvpiGjz3EcqCfN2IKR
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQU+KcHCwiwrpoTF5y8xbeOsa9ahSowHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMjM1MmUzMjMxMzIyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ33UMA0GCSqG
SIb3DQEBCwUAA4IBAQAgQ21JDv9Qefsh7tsruHax9yBFpQYgoPe1gsQJ0TvCz51K
vroPmh+g7MQ3Xg6jATloMH89ayJcDhtFVe3zwTjDkRzrDY1keIasd/qp7qAY5SPC
9XHSLtEG+ftodxkl3063C33VlVn5na5H3bejRnphBBFi+UoIl0Gkx1nk//R+6yYr
87tDeFk0OaTd2aUJy9J4HpNikeaFLzz9DU1Ooe6/VUFFSalttF8y+dyUn21892Bx
dBxmTuZLzYZF96icCm3uBGkvNNDuQSPlFzfKpW3EPrJpHE48Pw73iNxcEFOVaVbM
oPImoN0qH9r6OA3wFg4fBzI/GvNpaiErwxI7Stwl
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:04 2023 by rpki-client on console-ams.rpki-client.org