Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e3136362e302f32332d3234203d3e20313338383633.roa
File:                     3130332e3133392e3136362e302f32332d3234203d3e20313338383633.roa (raw, json)
Hash identifier:          cNFRAHUQoW+Tg0Tc33C8WAHPlberA72Kt7pMYUz12RI=
Subject key identifier:   F9:E2:F4:13:04:2B:8F:5B:88:16:99:06:EA:3E:B9:4D:98:60:08:B0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6057E4F810C40457D2873D882D84394E3F60AAD9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e3136362e302f32332d3234203d3e20313338383633.roa
Signing time:             Fri 08 Oct 2021 06:00:02 +0000
ROA not before:           Fri 08 Oct 2021 05:55:02 +0000
ROA not after:            Sat 08 Oct 2022 06:00:02 +0000
asID:                     138863
IP address blocks:        103.139.166.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:57:e4:f8:10:c4:04:57:d2:87:3d:88:2d:84:39:4e:3f:60:aa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  8 05:55:02 2021 GMT
            Not After : Oct  8 06:00:02 2022 GMT
        Subject: CN=3082010A0282010100E215D436A917ECFD6E57384873AB03A915C8AB661202B7E61FC13AA094DC60BE5DE72271AAE86DE9FC31990EABFB55C2275FEDADD70899D35754B577C51B0B303C161E6FEE9CD680830197B7D0BD6634AF895A081169AA3DE6479D3122F19BEA58180B1B9C970E88A4619EF96559AC2A81D923A375F398297FD41FD5C8440D36D3499042E2762CEA2631E9D07F856FCF87A33A2E6F779D9536C23080AC2B72D5290F0266509369CB8E96A9BC37F01CB7C3FDDC2C99187995D725F3AA6FC8E6C55DE8BB7EF657A46E093FF065188E72C7484AC7C807C61AED56C5BB83119044F6ED310F4F158F973115EA5890E90B85E38DE1B2CB534BDABC17B0B8F5AE9BB8D70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:15:d4:36:a9:17:ec:fd:6e:57:38:48:73:ab:
                    03:a9:15:c8:ab:66:12:02:b7:e6:1f:c1:3a:a0:94:
                    dc:60:be:5d:e7:22:71:aa:e8:6d:e9:fc:31:99:0e:
                    ab:fb:55:c2:27:5f:ed:ad:d7:08:99:d3:57:54:b5:
                    77:c5:1b:0b:30:3c:16:1e:6f:ee:9c:d6:80:83:01:
                    97:b7:d0:bd:66:34:af:89:5a:08:11:69:aa:3d:e6:
                    47:9d:31:22:f1:9b:ea:58:18:0b:1b:9c:97:0e:88:
                    a4:61:9e:f9:65:59:ac:2a:81:d9:23:a3:75:f3:98:
                    29:7f:d4:1f:d5:c8:44:0d:36:d3:49:90:42:e2:76:
                    2c:ea:26:31:e9:d0:7f:85:6f:cf:87:a3:3a:2e:6f:
                    77:9d:95:36:c2:30:80:ac:2b:72:d5:29:0f:02:66:
                    50:93:69:cb:8e:96:a9:bc:37:f0:1c:b7:c3:fd:dc:
                    2c:99:18:79:95:d7:25:f3:aa:6f:c8:e6:c5:5d:e8:
                    bb:7e:f6:57:a4:6e:09:3f:f0:65:18:8e:72:c7:48:
                    4a:c7:c8:07:c6:1a:ed:56:c5:bb:83:11:90:44:f6:
                    ed:31:0f:4f:15:8f:97:31:15:ea:58:90:e9:0b:85:
                    e3:8d:e1:b2:cb:53:4b:da:bc:17:b0:b8:f5:ae:9b:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E2:F4:13:04:2B:8F:5B:88:16:99:06:EA:3E:B9:4D:98:60:08:B0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e3136362e302f32332d3234203d3e20313338383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:11:ee:44:e5:41:4d:c9:4a:0f:0d:d0:20:01:c8:f8:d7:ea:
         52:64:0b:d5:3c:14:f3:3a:00:91:d2:fa:aa:ed:9b:4e:a9:11:
         ef:f0:97:54:d4:f3:db:3e:6d:b8:79:65:61:38:92:ea:61:0f:
         6a:ba:d1:d7:da:53:31:a9:10:c5:86:61:4f:97:46:d8:f2:aa:
         b5:86:5c:01:eb:ea:c2:73:21:e3:75:54:09:83:8d:db:65:d4:
         9a:ab:07:b5:39:e0:c1:db:74:e3:68:2b:1f:24:ac:df:42:54:
         b7:3c:7a:4d:17:12:eb:19:1f:61:6a:d0:ac:38:33:ac:7e:f7:
         64:01:ec:f9:04:95:90:3a:ed:b2:a2:ab:3a:13:46:01:4d:9a:
         79:c9:7c:02:0d:22:84:9b:44:ae:50:16:05:a1:4a:d3:5f:56:
         7a:df:9a:9f:22:54:10:e1:f6:12:95:bd:10:5a:ef:85:0c:aa:
         ae:b0:11:28:f1:53:e6:5f:56:77:fd:5f:ec:3a:bf:be:87:4d:
         50:dc:42:ef:6c:cf:ee:e1:bc:55:9f:ac:73:2d:b6:4e:76:10:
         2e:ff:d5:aa:1f:69:41:34:9d:ed:05:37:21:c3:bc:8a:c3:51:
         d1:6f:fe:01:87:ad:f6:1b:0f:a1:65:ec:ec:ec:4e:5e:2c:fb:
         c7:55:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-fra.rpki-client.org