Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e322e302f32342d3234203d3e20313339333835.roa
File:                     3130332e3134332e322e302f32342d3234203d3e20313339333835.roa (raw, json)
Hash identifier:          Mofc4x8x89g6M1hNw9rAl27gsCaAOzZpXtyzed9xasI=
Subject key identifier:   6B:A3:35:76:13:AC:37:4D:B6:27:03:80:2E:A8:10:F1:0C:3A:F3:50
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       65815282DDE90E8C45A7BB86F333EF98211F4688
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e322e302f32342d3234203d3e20313339333835.roa
Signing time:             Thu 04 Nov 2021 05:00:00 +0000
ROA not before:           Thu 04 Nov 2021 04:55:00 +0000
ROA not after:            Fri 04 Nov 2022 05:00:00 +0000
asID:                     139385
IP address blocks:        103.143.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:81:52:82:dd:e9:0e:8c:45:a7:bb:86:f3:33:ef:98:21:1f:46:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  4 04:55:00 2021 GMT
            Not After : Nov  4 05:00:00 2022 GMT
        Subject: CN=3082010A0282010100A738C89514B46F3707C0CED611884F50C7DDD19E4ECAC6D6F793877CD561467AB54114EBB036A1CC356BCFE0FD496A937CEDC09F5CC68EBC2B4FA76271C9F85DC871C5AC326B0CD39EC577187C99CB6D33DFF744D58C10F4EF8405D28C327EB6FCF5E0656813F840284D65BD3F6DC180E6A3977C068F718017D2DEBA25A4694FD5C2D7DD5E608708DBA166985B09108FA7703D911B1C389527326D6DC7DD0094F71C69C6A9B0EA643D59FCB0144FAC0F93FFFC920B845631F4B482585DD3BB15B46344C0A9DF869801448D0C3B89999164956575FF2FCBC7B852C551AB47448B79B1E74A2C623076CE8BE60E702F14B659582957FECF964CD40B1386CC797E590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:c8:95:14:b4:6f:37:07:c0:ce:d6:11:88:
                    4f:50:c7:dd:d1:9e:4e:ca:c6:d6:f7:93:87:7c:d5:
                    61:46:7a:b5:41:14:eb:b0:36:a1:cc:35:6b:cf:e0:
                    fd:49:6a:93:7c:ed:c0:9f:5c:c6:8e:bc:2b:4f:a7:
                    62:71:c9:f8:5d:c8:71:c5:ac:32:6b:0c:d3:9e:c5:
                    77:18:7c:99:cb:6d:33:df:f7:44:d5:8c:10:f4:ef:
                    84:05:d2:8c:32:7e:b6:fc:f5:e0:65:68:13:f8:40:
                    28:4d:65:bd:3f:6d:c1:80:e6:a3:97:7c:06:8f:71:
                    80:17:d2:de:ba:25:a4:69:4f:d5:c2:d7:dd:5e:60:
                    87:08:db:a1:66:98:5b:09:10:8f:a7:70:3d:91:1b:
                    1c:38:95:27:32:6d:6d:c7:dd:00:94:f7:1c:69:c6:
                    a9:b0:ea:64:3d:59:fc:b0:14:4f:ac:0f:93:ff:fc:
                    92:0b:84:56:31:f4:b4:82:58:5d:d3:bb:15:b4:63:
                    44:c0:a9:df:86:98:01:44:8d:0c:3b:89:99:91:64:
                    95:65:75:ff:2f:cb:c7:b8:52:c5:51:ab:47:44:8b:
                    79:b1:e7:4a:2c:62:30:76:ce:8b:e6:0e:70:2f:14:
                    b6:59:58:29:57:fe:cf:96:4c:d4:0b:13:86:cc:79:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A3:35:76:13:AC:37:4D:B6:27:03:80:2E:A8:10:F1:0C:3A:F3:50
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e322e302f32342d3234203d3e20313339333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:3f:49:86:77:68:b1:92:85:92:34:ad:83:2f:b3:62:77:79:
         15:df:a7:ef:57:cf:dc:41:21:bd:24:22:0e:53:3d:4e:18:cc:
         01:e5:73:af:c9:ba:75:fc:bb:f9:6f:d5:fc:af:ea:3c:f9:25:
         b9:6a:68:83:be:5c:7c:8b:70:e9:a4:14:bb:ed:05:80:bd:78:
         4e:8a:23:10:b7:cf:d3:38:0d:ca:43:ae:8e:84:ab:38:17:6c:
         a7:01:9f:12:5b:e7:75:71:ea:99:e7:4a:a8:e8:1e:7b:a9:55:
         8e:7e:6d:a5:41:1d:78:22:de:0f:da:0c:71:87:b9:a3:bb:c6:
         a2:be:6d:56:ac:7a:57:df:aa:d3:98:2d:ae:90:fa:9a:b2:91:
         f9:60:77:85:27:6a:ce:ad:58:6f:08:64:05:bc:87:9a:60:26:
         75:36:6e:4c:25:02:34:0d:88:53:1c:44:4d:af:c4:ff:e5:31:
         42:33:b3:9d:d7:87:25:d4:e7:9e:c1:00:09:08:12:e1:29:7b:
         9b:c0:9d:7b:81:b9:2b:a6:83:66:75:14:73:06:6f:2d:e0:64:
         18:6e:d9:05:bf:b4:9b:1d:da:7a:d3:e5:bb:7a:f1:1e:9d:04:
         59:f6:c5:a6:e7:fa:de:35:b4:80:1a:8c:6a:78:a7:4a:e3:c1:
         68:a1:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-fra.rpki-client.org