Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e38382e302f32342d3234203d3e20313431303835.roa
File:                     3130332e3135362e38382e302f32342d3234203d3e20313431303835.roa (raw, json)
Hash identifier:          5A3No3eMMU81aTOdOw0ups9IN3wW6wxKBdP7zItyRV8=
Subject key identifier:   BB:2E:1E:38:58:0E:35:E2:EF:35:26:36:0D:E1:64:86:8B:D7:08:DB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1616BCF33A4274EB55B70D4EBA12C64F1E6C9E18
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e38382e302f32342d3234203d3e20313431303835.roa
Signing time:             Fri 08 Oct 2021 08:00:00 +0000
ROA not before:           Fri 08 Oct 2021 07:55:00 +0000
ROA not after:            Sat 08 Oct 2022 08:00:00 +0000
asID:                     141085
IP address blocks:        103.156.88.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:16:bc:f3:3a:42:74:eb:55:b7:0d:4e:ba:12:c6:4f:1e:6c:9e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  8 07:55:00 2021 GMT
            Not After : Oct  8 08:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:8f:cf:be:41:86:51:8a:98:bf:6b:7a:81:
                    9e:63:08:38:cb:4b:84:05:e1:12:f0:03:94:6c:a5:
                    d9:40:47:4f:45:74:14:6d:fa:7d:0b:74:a7:50:3c:
                    b4:70:97:6a:d2:2d:c2:9b:bf:08:a5:b4:59:5b:6a:
                    96:10:e5:df:a9:98:ff:b2:77:3d:13:c6:28:ed:bb:
                    6f:45:ad:c7:0d:4a:b1:ca:2d:79:3f:57:62:f7:79:
                    06:4e:1d:d3:31:2b:d4:13:86:18:30:41:55:5b:61:
                    50:05:d9:02:fa:21:e3:19:d8:fc:80:f6:cf:27:cd:
                    e7:06:5a:fd:0f:7b:d0:f0:fa:f4:20:54:cd:48:74:
                    a0:1c:f2:df:6f:6f:a1:2a:66:03:2e:7a:b5:83:90:
                    ef:1f:04:e3:b7:b9:f3:c1:2d:78:c5:71:6a:ad:4b:
                    a5:e7:d0:d0:b0:fe:b3:42:71:e0:7e:ff:f7:e8:ab:
                    0c:dd:40:a2:0a:ef:61:6d:68:a1:d6:1c:57:38:4d:
                    0c:fd:4b:ee:f8:b2:2a:64:8e:71:f7:66:7a:77:e1:
                    9a:c5:85:d5:14:1e:f1:22:f5:09:54:01:86:b8:9a:
                    dd:65:3a:b1:2b:d0:fd:df:1f:f9:d5:db:f8:6a:8e:
                    32:02:33:f8:0e:d8:25:fa:8e:2b:f3:05:c1:2f:ff:
                    01:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2E:1E:38:58:0E:35:E2:EF:35:26:36:0D:E1:64:86:8B:D7:08:DB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e38382e302f32342d3234203d3e20313431303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:b7:03:dd:55:80:66:e6:d8:49:b2:fc:eb:46:78:fd:be:da:
         bc:97:96:a6:77:17:66:3a:3f:bf:41:20:15:29:8d:3b:41:00:
         d8:56:31:5a:21:e3:bb:93:74:2f:44:b8:62:84:3c:8f:57:ed:
         1f:b0:f2:a6:b0:c4:8d:43:28:f2:d7:9a:ac:a3:b1:94:e7:65:
         93:66:9a:63:37:93:69:2b:58:2e:ce:bd:6b:22:20:dd:2d:b4:
         1f:07:24:b6:ec:f3:c4:0a:ca:a9:58:c2:84:d1:62:9a:9f:e5:
         db:ff:1c:19:b4:3d:aa:da:91:39:26:24:3e:2b:69:13:b7:86:
         b0:8a:92:bc:5c:0e:25:9a:ee:49:53:b6:cc:88:f5:86:fe:b8:
         ae:43:0b:4a:5f:60:36:f6:d5:ff:6d:21:2f:ec:2e:ec:d4:3d:
         e7:7a:de:21:5e:9d:58:b8:3a:e9:d6:a5:eb:06:a6:8f:cd:87:
         ac:c1:b7:11:00:16:ff:b4:d6:1d:98:67:e1:47:03:0b:75:2b:
         95:a8:0c:f4:1d:1c:d2:2b:62:a4:97:48:d6:6b:ff:b6:94:b4:
         34:13:f7:3c:7f:9d:b6:8b:ed:b5:0d:38:5f:75:04:38:bb:63:
         8e:24:82:8d:d6:ae:f3:16:62:b4:76:11:37:4f:4c:23:4e:88:
         2a:f7:2a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-fra.rpki-client.org