Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e38382e302f32332d3234203d3e20313430343231.roa
File:                     3130332e3134382e38382e302f32332d3234203d3e20313430343231.roa (raw, json)
Hash identifier:          piakTP5QtFl1TO+zUhdV7QofxI7CqMi8kcmIErZP1xI=
Subject key identifier:   E9:36:7C:C2:1B:84:39:27:95:B6:73:01:B2:0C:8B:06:AC:7A:C8:FA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5829A1731AD68F865EBB3010CBDC129B47770312
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e38382e302f32332d3234203d3e20313430343231.roa
Signing time:             Fri 08 Oct 2021 08:00:01 +0000
ROA not before:           Fri 08 Oct 2021 07:55:01 +0000
ROA not after:            Sat 08 Oct 2022 08:00:01 +0000
asID:                     140421
IP address blocks:        103.148.88.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:29:a1:73:1a:d6:8f:86:5e:bb:30:10:cb:dc:12:9b:47:77:03:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  8 07:55:01 2021 GMT
            Not After : Oct  8 08:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:4e:b4:93:03:02:a3:98:ae:a1:0f:dc:b0:
                    cf:5d:75:34:f0:c2:20:0b:fe:3e:ec:b7:93:89:3a:
                    2e:b8:85:8c:ec:a4:dd:ba:4e:67:8e:d0:85:f8:06:
                    0d:a6:af:35:58:5d:a8:27:2f:8a:aa:42:6d:9a:45:
                    ac:c4:01:16:c2:73:e8:ad:0e:15:01:86:28:26:86:
                    c5:b7:63:64:ce:bc:b2:24:3d:58:23:5c:40:d8:68:
                    f9:83:82:d3:03:90:71:23:56:78:5c:0c:72:be:32:
                    be:42:2f:94:79:f3:84:2a:29:c0:08:99:ae:2a:c4:
                    c2:bc:4c:c3:5d:e0:a5:7d:c0:55:4b:67:4d:f4:34:
                    b1:87:86:38:65:9a:53:e1:be:6f:a1:ce:b0:20:e3:
                    30:b4:0c:9f:38:6a:e0:20:2c:9e:52:e0:13:ff:84:
                    05:a4:aa:6b:b7:9f:c3:c2:03:60:83:ee:88:e9:3f:
                    28:a1:bb:0c:bc:05:cd:6e:74:66:7a:a4:91:21:40:
                    98:d2:4e:a6:90:cd:b1:b4:f3:7c:57:e7:1f:89:d1:
                    25:48:d3:ff:e2:df:48:ea:01:8d:5c:94:0f:7c:96:
                    74:15:a8:2e:8e:e3:79:16:35:b0:9e:a1:ec:34:f4:
                    98:df:5d:40:c3:b8:e8:6d:1c:96:f2:6e:1b:33:8a:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:36:7C:C2:1B:84:39:27:95:B6:73:01:B2:0C:8B:06:AC:7A:C8:FA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e38382e302f32332d3234203d3e20313430343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:1d:e2:47:67:11:68:f7:d4:f9:3d:c2:6f:a5:90:e5:28:ab:
         78:5d:39:19:17:f0:66:c0:66:32:29:f3:5e:3f:39:80:cd:69:
         cd:a6:76:6a:89:d0:1b:9b:e4:09:93:c1:e2:60:5a:07:75:d6:
         21:6a:b7:06:c0:7f:b6:b8:86:48:20:0a:66:7e:57:d7:85:f9:
         d9:ab:38:30:09:28:1b:86:32:41:13:09:d0:78:0a:9e:70:c3:
         38:e4:70:a2:8a:d9:5f:64:5b:39:62:9f:09:39:c6:fb:66:80:
         79:e8:e9:a4:57:dd:2c:85:59:12:6b:94:c4:1b:52:ea:72:58:
         c4:0b:54:53:c9:54:16:cd:85:f9:88:c0:b8:ab:7a:bb:2a:4d:
         47:3c:a1:f7:37:30:1e:f6:44:61:ed:19:ab:44:18:41:47:99:
         a5:72:13:78:d9:73:20:c4:81:4e:0e:3c:9f:59:6e:c2:73:2d:
         f2:eb:5e:64:79:cb:32:36:73:87:1b:d0:99:8a:67:7d:2c:7a:
         b1:a8:d6:26:a6:56:b0:08:50:b5:63:6c:d9:55:56:20:ab:ac:
         09:6f:4b:6f:6d:d1:fe:73:95:e6:d8:eb:cb:62:ad:76:e6:ae:
         d6:bf:73:32:62:a0:00:94:55:c9:64:3c:14:7d:69:1a:93:1e:
         fd:a6:89:10
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUWCmhcxrWj4ZeuzAQy9wSm0d3AxIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAwODA3NTUwMVoX
DTIyMTAwODA4MDAwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCRUQ0NEVCNDkzMDMwMkEzOThBRUExMEZEQ0IwQ0Y1RDc1MzRGMEMyMjAw
QkZFM0VFQ0I3OTM4OTNBMkVCODg1OENFQ0E0RERCQTRFNjc4RUQwODVGODA2MERB
NkFGMzU1ODVEQTgyNzJGOEFBQTQyNkQ5QTQ1QUNDNDAxMTZDMjczRThBRDBFMTUw
MTg2MjgyNjg2QzVCNzYzNjRDRUJDQjIyNDNENTgyMzVDNDBEODY4Rjk4MzgyRDMw
MzkwNzEyMzU2Nzg1QzBDNzJCRTMyQkU0MjJGOTQ3OUYzODQyQTI5QzAwODk5QUUy
QUM0QzJCQzRDQzM1REUwQTU3REMwNTU0QjY3NERGNDM0QjE4Nzg2Mzg2NTlBNTNF
MUJFNkZBMUNFQjAyMEUzMzBCNDBDOUYzODZBRTAyMDJDOUU1MkUwMTNGRjg0MDVB
NEFBNkJCNzlGQzNDMjAzNjA4M0VFODhFOTNGMjhBMUJCMENCQzA1Q0Q2RTc0NjY3
QUE0OTEyMTQwOThEMjRFQTY5MENEQjFCNEYzN0M1N0U3MUY4OUQxMjU0OEQzRkZF
MkRGNDhFQTAxOEQ1Qzk0MEY3Qzk2NzQxNUE4MkU4RUUzNzkxNjM1QjA5RUExRUMz
NEY0OThERjVENDBDM0I4RTg2RDFDOTZGMjZFMUIzMzhBNDA5NTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1E60kwMCo5iuoQ/csM9d
dTTwwiAL/j7st5OJOi64hYzspN26TmeO0IX4Bg2mrzVYXagnL4qqQm2aRazEARbC
c+itDhUBhigmhsW3Y2TOvLIkPVgjXEDYaPmDgtMDkHEjVnhcDHK+Mr5CL5R584Qq
KcAIma4qxMK8TMNd4KV9wFVLZ030NLGHhjhlmlPhvm+hzrAg4zC0DJ84auAgLJ5S
4BP/hAWkqmu3n8PCA2CD7ojpPyihuwy8Bc1udGZ6pJEhQJjSTqaQzbG083xX5x+J
0SVI0//i30jqAY1clA98lnQVqC6O43kWNbCeoew09JjfXUDDuOhtHJbybhszikCV
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQU6TZ8whuEOSeVtnMBsgyLBqx6yPowHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNDM4MmUzODM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5RYMA0GCSqG
SIb3DQEBCwUAA4IBAQAsHeJHZxFo99T5PcJvpZDlKKt4XTkZF/BmwGYyKfNePzmA
zWnNpnZqidAbm+QJk8HiYFoHddYharcGwH+2uIZIIApmflfXhfnZqzgwCSgbhjJB
EwnQeAqecMM45HCiitlfZFs5Yp8JOcb7ZoB56OmkV90shVkSa5TEG1LqcljEC1RT
yVQWzYX5iMC4q3q7Kk1HPKH3NzAe9kRh7RmrRBhBR5mlchN42XMgxIFODjyfWW7C
cy3y615kecsyNnOHG9CZimd9LHqxqNYmplawCFC1Y2zZVVYgq6wJb0tvbdH+c5Xm
2OvLYq125q7Wv3MyYqAAlFXJZDwUfWkakx79pokQ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-fra.rpki-client.org