Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38342e302f32332d3234203d3e20313333383030.roa
File:                     3130332e3135302e38342e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          oOpEXshmf80pdJ3QDCWjpqxK8WNqHhaX+ziAB2M8hCc=
Subject key identifier:   2F:64:94:27:51:15:0A:EE:9B:54:18:08:2F:E2:42:CF:3A:BA:93:4C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3B6B60DDEB1D02074E5FBEDF04A4FAAAB8A5A769
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38342e302f32332d3234203d3e20313333383030.roa
Signing time:             Thu 07 Oct 2021 14:00:00 +0000
ROA not before:           Thu 07 Oct 2021 13:55:00 +0000
ROA not after:            Fri 07 Oct 2022 14:00:00 +0000
asID:                     133800
IP address blocks:        103.150.84.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6b:60:dd:eb:1d:02:07:4e:5f:be:df:04:a4:fa:aa:b8:a5:a7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  7 13:55:00 2021 GMT
            Not After : Oct  7 14:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:0d:c1:96:4a:d9:9f:ab:9c:68:44:76:3a:
                    02:b4:21:55:b4:0f:50:41:e3:e9:13:ab:da:35:1e:
                    c6:03:f9:15:62:49:ca:85:ee:3e:09:5e:30:42:9b:
                    d3:70:37:b7:ce:02:02:64:ab:92:c8:e7:72:dd:5e:
                    d1:11:3d:ae:47:cd:05:9a:6e:7e:3e:c4:5c:98:02:
                    17:2f:18:db:2e:bf:a2:4a:5c:ae:76:d0:65:60:18:
                    d7:7d:85:88:34:a0:94:23:ff:ea:a2:6f:2f:85:38:
                    66:88:97:61:4a:4a:35:f0:eb:73:78:12:1b:76:0b:
                    7c:e7:de:66:a2:34:82:33:37:c4:37:6f:fd:6e:56:
                    3e:6e:64:65:09:30:cb:7e:5b:07:cd:59:d3:ff:05:
                    a5:02:e6:6f:6d:d4:6d:10:99:43:cf:92:4c:a6:4a:
                    ba:a2:fe:93:88:69:25:ff:b7:36:b6:b0:90:f6:1e:
                    f1:dc:3b:b3:cf:9b:17:09:fb:66:4c:cd:74:79:5a:
                    7c:40:f2:d2:5e:2f:0a:14:40:5c:96:78:a1:db:b1:
                    12:9f:36:39:fb:f5:f1:49:36:86:6d:6d:21:a5:76:
                    00:ae:27:25:14:ef:59:41:d5:e6:13:30:dc:3e:37:
                    d5:6f:54:c6:3f:de:3d:7c:a0:9c:5c:ea:33:c4:8e:
                    8b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:64:94:27:51:15:0A:EE:9B:54:18:08:2F:E2:42:CF:3A:BA:93:4C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38342e302f32332d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:5c:b0:ee:50:3b:f2:7c:c2:d2:a5:7f:cc:08:8c:56:d8:75:
         91:2a:b5:97:a9:ab:41:a6:eb:ed:46:dd:ea:57:fd:e3:38:b4:
         95:e9:24:5b:92:51:ac:df:0b:cc:93:c1:48:26:71:e1:7a:d4:
         49:75:6b:e5:66:9b:31:0f:6d:bd:2a:29:c6:9c:83:cb:28:09:
         57:05:49:04:da:e5:83:4a:38:5f:7c:b5:f0:c4:dc:be:e6:d5:
         cf:53:64:cd:82:2d:f2:66:b8:d9:9c:e6:48:4f:b6:48:6e:67:
         90:51:59:79:c9:14:a2:48:af:f7:2b:aa:d6:f9:b8:46:43:41:
         02:59:ec:3f:c8:57:96:ab:dd:2c:9f:e2:da:1b:5b:c7:bc:8c:
         d3:25:e6:31:93:5d:71:31:ae:6c:d1:77:2b:32:02:96:ba:e5:
         dd:bb:5c:3d:c9:bf:80:35:0d:07:1d:08:a4:ba:7f:9a:43:d9:
         a6:7f:21:44:94:87:bf:5d:4c:6f:81:dd:6b:90:fc:b6:ee:47:
         41:4a:74:77:56:9c:99:a8:b7:27:d2:59:ee:b7:dc:d0:96:9e:
         ef:95:32:62:99:78:9b:3d:11:41:61:fe:29:f8:a1:51:a5:10:
         27:df:5c:70:7c:02:57:07:3a:f7:dc:54:b9:2e:e4:bb:f7:32:
         bd:4e:23:ca
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUO2tg3esdAgdOX77fBKT6qrilp2kwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAwNzEzNTUwMFoX
DTIyMTAwNzE0MDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDMTUxMERDMTk2NEFEOTlGQUI5QzY4NDQ3NjNBMDJCNDIxNTVCNDBGNTA0
MUUzRTkxM0FCREEzNTFFQzYwM0Y5MTU2MjQ5Q0E4NUVFM0UwOTVFMzA0MjlCRDM3
MDM3QjdDRTAyMDI2NEFCOTJDOEU3NzJERDVFRDExMTNEQUU0N0NEMDU5QTZFN0Uz
RUM0NUM5ODAyMTcyRjE4REIyRUJGQTI0QTVDQUU3NkQwNjU2MDE4RDc3RDg1ODgz
NEEwOTQyM0ZGRUFBMjZGMkY4NTM4NjY4ODk3NjE0QTRBMzVGMEVCNzM3ODEyMUI3
NjBCN0NFN0RFNjZBMjM0ODIzMzM3QzQzNzZGRkQ2RTU2M0U2RTY0NjUwOTMwQ0I3
RTVCMDdDRDU5RDNGRjA1QTUwMkU2NkY2REQ0NkQxMDk5NDNDRjkyNENBNjRBQkFB
MkZFOTM4ODY5MjVGRkI3MzZCNkIwOTBGNjFFRjFEQzNCQjNDRjlCMTcwOUZCNjY0
Q0NENzQ3OTVBN0M0MEYyRDI1RTJGMEExNDQwNUM5Njc4QTFEQkIxMTI5RjM2MzlG
QkY1RjE0OTM2ODY2RDZEMjFBNTc2MDBBRTI3MjUxNEVGNTk0MUQ1RTYxMzMwREMz
RTM3RDU2RjU0QzYzRkRFM0Q3Q0EwOUM1Q0VBMzNDNDhFOEIzQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUQ3BlkrZn6ucaER2OgK0
IVW0D1BB4+kTq9o1HsYD+RViScqF7j4JXjBCm9NwN7fOAgJkq5LI53LdXtERPa5H
zQWabn4+xFyYAhcvGNsuv6JKXK520GVgGNd9hYg0oJQj/+qiby+FOGaIl2FKSjXw
63N4Eht2C3zn3maiNIIzN8Q3b/1uVj5uZGUJMMt+WwfNWdP/BaUC5m9t1G0QmUPP
kkymSrqi/pOIaSX/tza2sJD2HvHcO7PPmxcJ+2ZMzXR5WnxA8tJeLwoUQFyWeKHb
sRKfNjn79fFJNoZtbSGldgCuJyUU71lB1eYTMNw+N9VvVMY/3j18oJxc6jPEjos7
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUL2SUJ1EVCu6bVBgIL+JCzzq6k0wwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTMwMmUzODM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5ZUMA0GCSqG
SIb3DQEBCwUAA4IBAQA5XLDuUDvyfMLSpX/MCIxW2HWRKrWXqatBpuvtRt3qV/3j
OLSV6SRbklGs3wvMk8FIJnHhetRJdWvlZpsxD229KinGnIPLKAlXBUkE2uWDSjhf
fLXwxNy+5tXPU2TNgi3yZrjZnOZIT7ZIbmeQUVl5yRSiSK/3K6rW+bhGQ0ECWew/
yFeWq90sn+LaG1vHvIzTJeYxk11xMa5s0XcrMgKWuuXdu1w9yb+ANQ0HHQikun+a
Q9mmfyFElIe/XUxvgd1rkPy27kdBSnR3VpyZqLcn0lnut9zQlp7vlTJimXibPRFB
Yf4p+KFRpRAn31xwfAJXBzr33FS5LuS79zK9TiPK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-fra.rpki-client.org