Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa
File:                     3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa (raw, json)
Hash identifier:          fhQpkwEVcqCZ3/5YlJz+QEwyINIMO74uP3yGWyJlfHs=
Subject key identifier:   67:6E:EF:15:6A:20:61:66:E5:69:DC:B1:14:12:E3:8B:5F:37:F4:37
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6D63055BCAB7DF9B25F50B3C9882F6BD8E45EF96
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa
Signing time:             Fri 08 Oct 2021 08:00:01 +0000
ROA not before:           Fri 08 Oct 2021 07:55:01 +0000
ROA not after:            Sat 08 Oct 2022 08:00:01 +0000
asID:                     140416
IP address blocks:        103.148.86.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:63:05:5b:ca:b7:df:9b:25:f5:0b:3c:98:82:f6:bd:8e:45:ef:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  8 07:55:01 2021 GMT
            Not After : Oct  8 08:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fa:a9:8b:40:8e:38:ff:49:7a:97:c6:13:50:
                    56:cf:97:f7:e6:58:03:3d:db:63:fa:ac:ba:e4:91:
                    2b:af:49:eb:ef:06:b5:b6:d3:63:64:66:5c:2c:89:
                    27:2d:3b:56:33:36:84:e9:af:92:38:53:77:03:65:
                    0b:d6:57:69:a9:43:ee:ae:8b:d6:c4:ed:7c:ec:1e:
                    cd:81:e8:ad:65:54:8c:c1:a2:80:bd:09:e6:09:cf:
                    7e:73:af:1b:88:94:a7:b8:29:71:aa:d3:94:fe:4f:
                    ae:66:11:4a:b2:6f:23:6f:49:8f:b0:08:fe:2c:a9:
                    00:d9:14:2a:95:16:47:0c:31:af:d6:34:8d:9a:37:
                    83:6f:f8:b2:50:f3:cf:55:96:6a:cd:df:f8:99:27:
                    6e:43:76:6f:be:9f:8a:ef:ba:9e:6d:fa:76:e3:98:
                    a0:9e:01:98:7b:3c:a7:35:19:c3:f8:a6:24:42:3f:
                    55:59:a1:5b:7e:0d:60:7a:ec:62:19:d1:43:30:50:
                    11:4a:ee:d1:8d:b3:08:d0:0e:03:03:d4:14:33:b6:
                    ee:4e:91:12:68:d0:dc:d6:64:7f:91:5c:13:15:04:
                    d5:0d:ae:fb:8d:75:28:2d:e7:f7:53:d5:8f:f8:79:
                    7d:c2:d3:d8:95:09:9f:bf:04:26:9e:54:9c:0a:49:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6E:EF:15:6A:20:61:66:E5:69:DC:B1:14:12:E3:8B:5F:37:F4:37
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:9f:1f:59:26:c1:0a:83:65:3d:e8:30:36:6a:8f:45:0d:c3:
         98:f9:fa:18:12:64:03:92:20:b1:37:4a:9a:74:72:49:14:67:
         0e:24:20:7d:bb:c2:20:64:d0:dd:f0:f0:dc:c3:2f:00:18:a2:
         57:0e:3c:08:b2:54:cd:2b:bf:8a:b1:9a:e9:98:0f:9d:e5:53:
         a3:24:a2:ec:0f:ed:80:03:80:e2:c3:76:cf:e5:3c:8e:b8:c8:
         7c:43:e3:b1:df:ab:e5:2d:76:5c:7b:4a:11:eb:1c:d8:7a:3f:
         16:14:c7:09:7c:c9:89:ad:42:94:18:13:c6:5d:8e:e0:6c:a1:
         81:e2:fc:58:a2:8a:d3:4c:f0:bf:c1:d0:8c:fa:fc:f2:45:37:
         5c:8f:a3:ff:0d:82:c7:54:f9:f5:6d:76:23:b1:29:cc:51:bf:
         f8:50:30:10:08:86:3a:b2:70:29:c5:f4:50:80:9a:98:22:b4:
         9b:48:96:30:50:f2:5c:f8:1c:64:31:7a:24:0e:56:4e:44:f7:
         62:2c:d7:6c:3d:48:e0:2d:cd:e9:c1:88:e6:75:0c:9a:96:6b:
         4f:46:18:df:23:24:64:ed:40:91:4e:f4:da:c9:61:71:56:2e:
         3a:a4:05:33:4f:27:c0:b6:ca:54:dc:a4:03:6c:be:83:04:6d:
         52:27:ba:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-fra.rpki-client.org