Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3233322e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3134392e3233322e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          muyYzXWMPfbTxYt1ywAQ/faoA9W9/3S2dnmAwHmqiek=
Subject key identifier:   6A:98:90:2E:6C:63:B3:6A:E1:6F:09:2A:3C:8C:8D:44:CD:5E:6B:37
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6AD3AE236355E91DC191FBEA643516780A03330B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3233322e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:02 +0000
ROA not before:           Fri 05 Nov 2021 16:55:02 +0000
ROA not after:            Sat 05 Nov 2022 17:00:02 +0000
asID:                     133815
IP address blocks:        103.149.232.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d3:ae:23:63:55:e9:1d:c1:91:fb:ea:64:35:16:78:0a:03:33:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:02 2021 GMT
            Not After : Nov  5 17:00:02 2022 GMT
        Subject: CN=3082010A0282010100C471310A4560010753141589642E1F9D93AD5E88E0A8EF21D8E54854DAB1A1B405D982B15A9B3CDBA69CA5FC316ED7329A3D356DD172C8B2767D1A9390881C0FEE9CEE8377FCB421A5226C7966BB532F323858EA340D4E2086229D07897458B3A9C041C05435684540B1F093E55C58B4734D44ADF58FE5197B5D66AC1F0A10FD8FC09F4199B3E764B8C25DC2755CA0C3B2C4CF92BF43ED5AD0B4218E1C0968EBFB650CDB61658707F5AE61928B50D123BF809BF056B9794E417EE9F625D26E5FA5938B213FAAE5682927815C0B0ED517EB21703FC02EEEB83C1EA46C6340FEBEAE10F6F95501421E5BA73AD33F87D87E538C770A0F4409F19BBD0527E4BB842B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:31:0a:45:60:01:07:53:14:15:89:64:2e:
                    1f:9d:93:ad:5e:88:e0:a8:ef:21:d8:e5:48:54:da:
                    b1:a1:b4:05:d9:82:b1:5a:9b:3c:db:a6:9c:a5:fc:
                    31:6e:d7:32:9a:3d:35:6d:d1:72:c8:b2:76:7d:1a:
                    93:90:88:1c:0f:ee:9c:ee:83:77:fc:b4:21:a5:22:
                    6c:79:66:bb:53:2f:32:38:58:ea:34:0d:4e:20:86:
                    22:9d:07:89:74:58:b3:a9:c0:41:c0:54:35:68:45:
                    40:b1:f0:93:e5:5c:58:b4:73:4d:44:ad:f5:8f:e5:
                    19:7b:5d:66:ac:1f:0a:10:fd:8f:c0:9f:41:99:b3:
                    e7:64:b8:c2:5d:c2:75:5c:a0:c3:b2:c4:cf:92:bf:
                    43:ed:5a:d0:b4:21:8e:1c:09:68:eb:fb:65:0c:db:
                    61:65:87:07:f5:ae:61:92:8b:50:d1:23:bf:80:9b:
                    f0:56:b9:79:4e:41:7e:e9:f6:25:d2:6e:5f:a5:93:
                    8b:21:3f:aa:e5:68:29:27:81:5c:0b:0e:d5:17:eb:
                    21:70:3f:c0:2e:ee:b8:3c:1e:a4:6c:63:40:fe:be:
                    ae:10:f6:f9:55:01:42:1e:5b:a7:3a:d3:3f:87:d8:
                    7e:53:8c:77:0a:0f:44:09:f1:9b:bd:05:27:e4:bb:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:98:90:2E:6C:63:B3:6A:E1:6F:09:2A:3C:8C:8D:44:CD:5E:6B:37
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3233322e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:ae:7b:2d:ef:b5:0e:2f:67:78:20:5c:7a:f4:73:1e:dd:
         dc:95:e8:bb:8a:1e:bd:8e:9a:00:ae:af:2c:6a:9e:e4:55:ec:
         0b:99:06:ea:59:fb:24:fc:fc:ae:cf:89:f7:7b:9e:3f:a2:67:
         55:ba:84:f4:02:c4:9d:a3:ac:56:86:02:55:fc:64:20:ec:34:
         8b:ca:3c:d1:9c:0b:b2:6a:b9:aa:b1:f6:34:19:c5:29:3c:a7:
         02:19:9c:98:1c:4e:1e:5e:ee:0d:05:26:6a:dc:45:7e:66:84:
         d0:ec:55:98:60:6b:29:3a:ca:4f:72:90:e4:f9:e1:47:a6:71:
         3d:a3:10:b1:01:2e:20:ba:f8:20:d6:6d:d9:03:03:48:3e:75:
         4f:2b:ba:4a:1d:7f:36:df:32:d4:96:ff:72:d7:d4:bd:0c:a5:
         75:85:2e:15:1f:70:09:75:68:f4:31:65:ed:24:c2:45:8b:28:
         9a:af:f8:ba:2a:4c:f1:e6:de:8d:40:0f:22:83:78:b8:ba:32:
         d1:71:82:c4:78:98:68:3b:8a:26:2f:40:3c:5e:2f:93:eb:5c:
         d2:24:a6:3d:8c:22:6a:69:2f:9c:39:44:0a:09:cb:21:b2:1d:
         21:dc:86:ba:a4:c8:df:3a:36:33:fa:36:e3:e4:a2:37:06:79:
         f7:0a:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-fra.rpki-client.org