Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134322e3131302e302f32332d3234203d3e203338373538.roa
File:                     3130332e3134322e3131302e302f32332d3234203d3e203338373538.roa (raw, json)
Hash identifier:          KnItDTsQB1dnGz882i2BhGslXwX+Jens8OQSRlpnxws=
Subject key identifier:   5F:40:06:44:1D:02:4E:77:1B:17:ED:AC:D6:CF:D9:86:A2:0E:A6:1D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       582B37965CCB3BBBDADE1381D44C2B486D987F03
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134322e3131302e302f32332d3234203d3e203338373538.roa
Signing time:             Thu 09 Dec 2021 09:57:29 +0000
ROA not before:           Thu 09 Dec 2021 09:52:29 +0000
ROA not after:            Fri 09 Dec 2022 09:57:29 +0000
asID:                     38758
IP address blocks:        103.142.110.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2b:37:96:5c:cb:3b:bb:da:de:13:81:d4:4c:2b:48:6d:98:7f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  9 09:52:29 2021 GMT
            Not After : Dec  9 09:57:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:6e:ed:49:24:41:fa:90:f7:61:08:50:df:
                    1b:6f:a4:6b:1c:ad:59:ee:3d:e6:ed:cd:bd:ec:1e:
                    5f:e8:b4:e2:af:c6:75:b6:e3:6b:68:3b:ff:42:b8:
                    c3:be:53:7c:6c:bd:f8:28:96:af:52:83:c0:8e:5b:
                    d9:11:d1:78:0c:c2:d2:83:78:e6:e3:b5:39:26:aa:
                    1f:56:1b:43:50:00:53:43:44:ac:82:ad:a0:7a:0e:
                    10:8a:d6:32:14:04:1c:53:92:09:0c:09:f8:66:c8:
                    79:39:85:b0:ed:1d:3a:8b:44:80:c3:19:23:88:16:
                    1d:b7:f2:9b:02:23:12:6b:bc:6d:26:e8:a9:d1:f0:
                    e2:d7:02:a7:9c:3e:46:56:62:26:2c:1d:f5:6b:d3:
                    80:0a:e6:da:f5:1c:bf:6e:ad:73:5e:6c:a4:2a:24:
                    79:18:8f:8d:03:a2:88:4f:f3:62:b6:0d:13:04:18:
                    9a:d6:ef:ab:1a:3a:e3:b8:2f:5f:4b:5e:17:aa:e6:
                    f7:86:0b:da:f0:c6:83:14:1f:bf:1f:90:b2:ef:14:
                    5e:20:45:93:81:53:7f:81:88:db:6a:4f:ed:7d:30:
                    b4:0b:3d:46:6a:27:a1:3a:ae:c2:7c:4d:5d:07:59:
                    9d:74:65:67:d0:79:63:d1:38:43:82:51:48:54:50:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:40:06:44:1D:02:4E:77:1B:17:ED:AC:D6:CF:D9:86:A2:0E:A6:1D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134322e3131302e302f32332d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:4f:de:29:06:85:6e:41:ed:06:99:8b:f8:f4:b9:ee:de:f7:
         ee:0f:3c:5c:f5:14:b7:f5:97:90:98:3b:1a:d0:a1:b2:e7:30:
         d4:29:38:b6:fc:03:79:af:58:c5:ef:6d:83:6f:48:34:b4:6e:
         59:08:0f:50:43:bd:93:c2:5f:65:99:b1:ac:5a:e4:f3:e0:5a:
         6f:78:33:31:44:ad:61:c4:ae:6a:7c:ab:c8:a0:2e:58:e3:75:
         10:1d:18:00:3d:fc:3e:97:d2:cb:ee:50:54:d6:b8:3b:90:04:
         a9:cd:d3:9b:6b:99:73:27:4f:4e:30:43:95:62:6d:d9:fe:00:
         9d:18:60:9e:44:19:d2:5b:90:3c:47:2e:d4:89:87:e8:4b:9b:
         ea:81:c1:05:2f:ab:97:34:12:1e:7b:a2:d3:35:38:53:3d:00:
         44:b4:f9:36:a9:59:f3:a0:a0:7a:9c:8e:00:06:ba:92:57:27:
         0c:7f:ac:6c:37:21:fa:8c:ec:5c:9f:a2:d9:04:63:43:7b:6e:
         88:b6:60:12:35:aa:85:00:60:d9:73:37:88:08:d2:27:30:47:
         3e:ef:d5:64:dd:79:1f:48:18:f0:54:1c:41:0b:c9:28:ad:43:
         69:b9:14:fb:7a:d7:83:dc:27:df:74:58:32:21:0e:2c:74:8b:
         3c:69:c2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-fra.rpki-client.org