Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133372e3235342e302f32332d3234203d3e20313338383333.roa
File:                     3130332e3133372e3235342e302f32332d3234203d3e20313338383333.roa (raw, json)
Hash identifier:          ho4nXLDZ2YY6jXDPGE7y7yUqsdHnmjCt/z8PPnO+PQg=
Subject key identifier:   6E:18:09:BB:74:BA:B5:E7:18:34:14:8A:E3:F5:2F:6F:5B:6D:74:C6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       42CD450886150FF8809C4FC357FFE81038B85DD1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133372e3235342e302f32332d3234203d3e20313338383333.roa
Signing time:             Fri 19 Nov 2021 05:00:02 +0000
ROA not before:           Fri 19 Nov 2021 04:55:02 +0000
ROA not after:            Sat 19 Nov 2022 05:00:02 +0000
asID:                     138833
IP address blocks:        103.137.254.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cd:45:08:86:15:0f:f8:80:9c:4f:c3:57:ff:e8:10:38:b8:5d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:02 2021 GMT
            Not After : Nov 19 05:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:d0:1d:98:4b:04:a5:68:e4:fe:d1:1c:5c:
                    d1:c3:7a:67:fd:ad:e3:52:6b:70:5d:5a:e5:1b:f8:
                    bc:2c:f5:31:83:f8:c9:16:d1:ce:d3:02:a9:d4:b5:
                    92:20:05:61:73:01:cb:0d:58:7a:36:98:e4:5a:0b:
                    e3:45:23:3d:00:af:28:d8:34:18:82:fe:76:5f:25:
                    2d:81:10:91:b8:0f:2a:89:14:db:28:72:79:2c:b6:
                    61:ab:e3:33:14:6c:14:f5:2b:2a:c2:5d:c4:93:c3:
                    95:94:e9:96:97:c3:30:54:57:26:6f:8b:7c:3f:5a:
                    61:92:dc:bd:97:f4:0a:f3:4a:4c:15:af:4f:6e:68:
                    6a:dc:88:b8:de:bb:df:ba:77:52:35:a5:de:9f:4f:
                    50:7d:ce:2c:5b:01:11:fb:fa:6f:0c:f9:ae:30:5c:
                    97:86:38:9e:e9:27:74:94:ee:cd:97:86:15:b0:a8:
                    87:40:e4:a0:28:40:dd:5d:21:10:28:e4:a2:94:3d:
                    97:ea:37:ba:da:4e:d5:85:55:f2:14:72:a1:af:41:
                    ba:5b:d0:be:1a:24:d9:31:d0:1e:78:36:24:f9:5f:
                    15:b1:6b:16:f6:36:50:62:62:ff:c6:ae:8d:2a:dd:
                    49:c2:06:52:c6:ad:75:04:73:6d:c0:5e:08:02:e4:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:18:09:BB:74:BA:B5:E7:18:34:14:8A:E3:F5:2F:6F:5B:6D:74:C6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133372e3235342e302f32332d3234203d3e20313338383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:fc:22:6e:b0:6a:91:31:a8:e8:6c:2c:b6:ca:38:ea:7d:
         1a:75:bf:46:b6:84:cc:71:02:f5:0b:71:02:63:03:86:00:c5:
         3b:68:5e:c2:f5:98:cc:05:94:cf:1e:d9:22:08:60:c4:a8:c4:
         c0:cd:e3:b7:a8:81:cf:6b:ef:32:b2:b4:47:62:13:a5:fc:5b:
         52:3a:2b:85:02:60:5c:38:b5:b5:51:1e:69:6d:99:ec:f0:39:
         b6:5c:3f:71:ac:7f:d5:c6:c4:9c:c0:45:53:69:23:40:e2:43:
         0b:a1:d2:61:64:7a:ff:5d:4f:68:35:99:f2:a0:79:29:ee:6e:
         53:20:1e:19:44:0a:7f:b8:86:d4:9f:56:e5:88:a5:fa:25:50:
         7c:d1:df:56:01:ff:b8:09:9f:be:65:51:01:f8:eb:5e:d9:40:
         36:58:3b:7b:c3:3f:c8:33:4d:4b:3f:b7:bb:36:ea:a7:82:f4:
         2a:aa:e1:42:41:98:7d:6b:85:51:4f:ae:c7:36:d8:d1:d9:a1:
         3c:62:5f:95:c0:c5:d4:eb:5f:92:cd:88:a6:55:0b:e0:d7:ed:
         16:73:f5:e3:15:ed:41:1d:01:64:64:3d:f4:bc:6e:22:38:d8:
         3a:c5:7d:d9:cc:45:b7:17:f6:ea:3f:23:d2:85:95:99:da:06:
         19:40:b9:3c
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUQs1FCIYVD/iAnE/DV//oEDi4XdEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExOTA0NTUwMloX
DTIyMTExOTA1MDAwMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCQ0Q5RDAxRDk4NEIwNEE1NjhFNEZFRDExQzVDRDFDMzdBNjdGREFERTM1
MjZCNzA1RDVBRTUxQkY4QkMyQ0Y1MzE4M0Y4QzkxNkQxQ0VEMzAyQTlENEI1OTIy
MDA1NjE3MzAxQ0IwRDU4N0EzNjk4RTQ1QTBCRTM0NTIzM0QwMEFGMjhEODM0MTg4
MkZFNzY1RjI1MkQ4MTEwOTFCODBGMkE4OTE0REIyODcyNzkyQ0I2NjFBQkUzMzMx
NDZDMTRGNTJCMkFDMjVEQzQ5M0MzOTU5NEU5OTY5N0MzMzA1NDU3MjY2RjhCN0Mz
RjVBNjE5MkRDQkQ5N0Y0MEFGMzRBNEMxNUFGNEY2RTY4NkFEQzg4QjhERUJCREZC
QTc3NTIzNUE1REU5RjRGNTA3RENFMkM1QjAxMTFGQkZBNkYwQ0Y5QUUzMDVDOTc4
NjM4OUVFOTI3NzQ5NEVFQ0Q5Nzg2MTVCMEE4ODc0MEU0QTAyODQwREQ1RDIxMTAy
OEU0QTI5NDNEOTdFQTM3QkFEQTRFRDU4NTU1RjIxNDcyQTFBRjQxQkE1QkQwQkUx
QTI0RDkzMUQwMUU3ODM2MjRGOTVGMTVCMTZCMTZGNjM2NTA2MjYyRkZDNkFFOEQy
QURENDlDMjA2NTJDNkFENzUwNDczNkRDMDVFMDgwMkU0OEVDMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82dAdmEsEpWjk/tEcXNHD
emf9reNSa3BdWuUb+Lws9TGD+MkW0c7TAqnUtZIgBWFzAcsNWHo2mORaC+NFIz0A
ryjYNBiC/nZfJS2BEJG4DyqJFNsocnkstmGr4zMUbBT1KyrCXcSTw5WU6ZaXwzBU
VyZvi3w/WmGS3L2X9ArzSkwVr09uaGrciLjeu9+6d1I1pd6fT1B9zixbARH7+m8M
+a4wXJeGOJ7pJ3SU7s2XhhWwqIdA5KAoQN1dIRAo5KKUPZfqN7raTtWFVfIUcqGv
Qbpb0L4aJNkx0B54NiT5XxWxaxb2NlBiYv/Gro0q3UnCBlLGrXUEc23AXggC5I7D
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUbhgJu3S6tecYNBSK4/Uvb1ttdMYwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMzM3MmUzMjM1MzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODMzMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnif4wDQYJ
KoZIhvcNAQELBQADggEBAA6h/CJusGqRMajobCy2yjjqfRp1v0a2hMxxAvULcQJj
A4YAxTtoXsL1mMwFlM8e2SIIYMSoxMDN47eogc9r7zKytEdiE6X8W1I6K4UCYFw4
tbVRHmltmezwObZcP3Gsf9XGxJzARVNpI0DiQwuh0mFkev9dT2g1mfKgeSnublMg
HhlECn+4htSfVuWIpfolUHzR31YB/7gJn75lUQH4617ZQDZYO3vDP8gzTUs/t7s2
6qeC9Cqq4UJBmH1rhVFPrsc22NHZoTxiX5XAxdTrX5LNiKZVC+DX7RZz9eMV7UEd
AWRkPfS8biI42DrFfdnMRbcX9uo/I9KFlZnaBhlAuTw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-fra.rpki-client.org