Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e37302e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3135322e37302e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          I21kdaWZjHedKOyiX77XIrW1tD2PHMqmtPbOJV1tdtg=
Subject key identifier:   B4:A8:5A:72:CE:1C:81:3A:B8:80:03:8B:98:60:47:D5:AD:30:24:A5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       294846582245B63BA9A051BE7F63D6AE45642197
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e37302e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:03 +0000
ROA not before:           Fri 05 Nov 2021 16:55:03 +0000
ROA not after:            Sat 05 Nov 2022 17:00:03 +0000
asID:                     133815
IP address blocks:        103.152.70.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:48:46:58:22:45:b6:3b:a9:a0:51:be:7f:63:d6:ae:45:64:21:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:03 2021 GMT
            Not After : Nov  5 17:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:9f:f2:c1:ef:fd:2e:22:76:f9:08:d6:b1:
                    12:24:a7:80:45:b4:ab:0c:79:bf:6e:cc:18:0b:72:
                    cd:ae:f8:e0:29:dd:33:60:d0:52:cb:9c:d2:7a:c8:
                    01:29:bc:d1:a8:81:ab:f1:37:52:83:ac:7a:ac:df:
                    fe:56:03:1b:b0:91:16:f4:3b:30:15:ce:c3:c2:b4:
                    ae:fb:27:7f:28:4d:3f:73:88:df:9d:36:6d:f2:2d:
                    46:89:a3:de:70:88:9b:e9:7d:06:39:6e:99:7f:86:
                    fe:e8:dd:fe:62:50:5d:99:84:12:56:80:15:c7:71:
                    a5:6e:ba:61:2d:3f:f5:fd:6e:1c:67:82:20:63:a6:
                    15:9f:e5:7c:a3:2a:03:05:10:f0:d1:8b:96:91:a0:
                    fc:7b:30:ce:dd:28:fa:7a:46:a8:48:7e:41:3d:8d:
                    fe:8c:0d:e9:e4:cf:e8:9a:6b:f9:a1:66:e2:6d:2b:
                    d2:10:e9:23:cb:94:ac:db:1f:37:fc:fe:0f:63:e6:
                    28:7d:af:87:69:cf:88:34:88:d3:77:c0:bb:11:d4:
                    91:60:42:74:6d:42:ef:1f:90:a2:b7:e4:dd:ef:64:
                    c9:7f:1e:13:11:8b:db:22:35:84:4f:5b:8f:b7:93:
                    a1:c1:11:eb:e1:4f:17:7f:0e:a5:63:d5:dd:79:c1:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A8:5A:72:CE:1C:81:3A:B8:80:03:8B:98:60:47:D5:AD:30:24:A5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e37302e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:3b:b6:d0:57:57:4b:b6:71:b7:45:dc:e3:2e:94:33:fc:
         ac:c7:19:46:93:d0:fb:aa:50:58:04:16:0c:2a:20:f3:a5:27:
         e7:66:54:e4:08:de:a7:c1:17:8e:bf:dc:df:9b:d8:f6:7f:33:
         d3:da:5e:fc:88:62:86:13:96:79:70:6d:bc:f8:df:8e:0c:a4:
         3c:77:3d:54:3b:9d:41:ec:5f:b5:ab:cb:6d:b0:0e:e3:23:1d:
         61:80:21:f0:10:0c:6f:21:8d:fb:bc:93:d9:d5:21:ec:4d:e2:
         92:1b:73:8f:18:eb:ae:32:bb:82:b0:2c:ef:11:d9:9e:7d:33:
         97:46:20:9f:8d:f2:43:2d:af:48:20:75:2d:69:66:54:ae:3e:
         fd:44:de:4e:a0:b8:92:1a:4c:aa:e0:24:c3:39:73:d4:1c:d3:
         8d:b3:b2:75:f2:ff:06:ab:72:f6:44:05:f9:19:36:e2:ee:5d:
         47:16:31:0b:68:b4:d9:a1:79:bc:36:29:cd:e2:1a:96:13:29:
         3f:c1:94:8f:76:56:de:4c:4a:9c:8b:46:ad:49:a6:20:22:bd:
         3f:7b:44:b0:7c:ca:9c:71:d4:7f:fc:e1:ae:25:1e:62:b6:8c:
         96:15:7a:bc:d5:7d:95:7b:b3:9d:7c:80:cf:c0:55:1d:48:ea:
         b9:a7:f5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-fra.rpki-client.org