Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e3131302e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3135322e3131302e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          R/qJox8/Zgbek7cin5c+FhChpxdJXLWFnM1zYL001NA=
Subject key identifier:   59:1F:90:52:77:B2:76:22:B6:CE:D9:CD:6A:BA:46:83:BE:BC:73:2C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3185D2D6066D0AA652667B4E88B4748208B013C0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e3131302e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:03 +0000
ROA not before:           Fri 05 Nov 2021 16:55:03 +0000
ROA not after:            Sat 05 Nov 2022 17:00:03 +0000
asID:                     133815
IP address blocks:        103.152.110.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:85:d2:d6:06:6d:0a:a6:52:66:7b:4e:88:b4:74:82:08:b0:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:03 2021 GMT
            Not After : Nov  5 17:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d0:3a:c4:61:2d:b8:92:f5:b5:ad:68:e6:b6:
                    f5:1a:0e:16:69:19:1a:48:9e:8b:3f:63:e8:e7:c9:
                    03:aa:b3:f2:f6:8b:20:27:f8:27:a6:41:de:63:a8:
                    1a:7c:9e:f2:33:36:f0:de:a5:74:f6:1c:d1:d5:55:
                    98:03:65:13:52:70:bc:41:5d:12:4c:2b:f6:55:42:
                    1a:d0:fa:dd:b4:78:ad:b8:84:be:54:0e:63:5f:15:
                    1e:75:bc:6d:98:5c:ec:6f:03:b5:77:ea:23:99:d9:
                    db:d7:0f:48:01:ec:d3:b1:80:ae:74:bf:f8:d2:a7:
                    cd:56:25:94:ba:35:9f:18:6c:a4:f2:f5:a3:cb:16:
                    d8:4c:cf:8b:00:3a:73:50:71:55:e8:b2:aa:f8:55:
                    7a:fc:1a:04:c7:db:d3:1d:4a:e4:ce:4a:a1:ae:ef:
                    e6:ac:6b:50:9d:53:2e:72:26:e1:8a:25:bc:ce:ea:
                    69:0e:72:03:94:0c:5f:ef:08:85:95:cc:9f:cb:d1:
                    76:6b:e2:9c:35:0f:5e:fe:82:18:29:9f:f8:e3:3f:
                    a1:ec:13:0a:72:5d:75:55:8a:48:c4:2d:16:7b:fa:
                    14:73:ce:5e:0f:1e:fb:15:10:c2:e9:61:54:51:8c:
                    06:b5:cd:4a:50:27:7e:b7:ed:f0:1f:51:31:4e:1f:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1F:90:52:77:B2:76:22:B6:CE:D9:CD:6A:BA:46:83:BE:BC:73:2C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e3131302e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:ae:00:ab:8b:b0:76:a7:c5:62:89:40:aa:d0:ae:f7:98:e3:
         06:68:ea:00:b5:cc:99:99:0e:2e:e5:53:be:3d:4f:9d:a2:c1:
         d1:69:d3:4c:fc:71:48:ba:e4:cd:d5:61:e2:88:78:b8:82:e1:
         ee:0a:b9:ac:d2:63:f4:f1:02:db:13:fd:30:9d:f2:39:fa:b3:
         f2:ea:a6:e8:c5:fb:dc:4b:c3:4d:4f:5e:bf:13:56:51:dd:c6:
         30:ec:b5:4f:ad:f7:93:84:a3:c8:61:c7:9b:05:20:3e:78:67:
         e9:d8:9f:d9:0a:a1:2d:26:d4:b0:21:b8:46:6d:15:2c:c4:63:
         32:c9:18:62:c3:fc:ed:10:d6:8a:58:7d:5c:76:62:16:10:0c:
         41:6b:05:11:c9:c1:ac:41:ae:4e:69:19:1e:fa:52:f0:90:e6:
         83:25:94:39:70:b7:47:1b:3e:dd:eb:f5:95:fe:8f:7d:2e:c2:
         1e:12:55:f9:48:0f:9e:2e:38:15:ab:a7:01:bd:4a:04:68:57:
         4f:11:a2:c6:df:95:fe:2b:ec:c2:ab:41:b5:8f:26:9b:42:3a:
         22:6b:cd:2d:1e:86:52:d5:5c:02:4c:40:fe:34:20:e9:9e:c8:
         0e:a2:ab:6d:fd:49:04:45:bb:d7:82:30:9c:24:99:5f:2a:e2:
         b0:e6:95:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-fra.rpki-client.org