Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e3139312e302f32342d3234203d3e203137393935.roa
File:                     3130332e3135372e3139312e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          3dbVR4l6Ql19Qws43D2LA88sN7D3yGlw9okzSonKgTU=
Subject key identifier:   AE:0B:4F:A9:43:E0:6D:36:87:47:7A:C6:BE:95:AA:CC:A8:75:1D:07
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1FC2FCB19992F4F5876DDB7992B52D9B490CED16
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e3139312e302f32342d3234203d3e203137393935.roa
Signing time:             Fri 05 Nov 2021 04:00:01 +0000
ROA not before:           Fri 05 Nov 2021 03:55:01 +0000
ROA not after:            Sat 05 Nov 2022 04:00:01 +0000
asID:                     17995
IP address blocks:        103.157.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c2:fc:b1:99:92:f4:f5:87:6d:db:79:92:b5:2d:9b:49:0c:ed:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 03:55:01 2021 GMT
            Not After : Nov  5 04:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:93:f5:41:f1:85:df:17:15:96:8d:b2:6d:
                    9b:2f:51:c8:1e:38:bc:bf:f7:55:6a:11:8c:9c:15:
                    13:0d:f5:ea:5d:f8:a6:35:a4:35:5a:49:19:b8:3c:
                    10:48:7f:62:68:2a:b6:4f:68:2f:9c:1e:f3:ab:8f:
                    eb:84:0a:26:19:27:57:51:c3:13:5b:72:c7:69:63:
                    46:9c:ee:b1:c9:20:ea:67:f9:7a:77:58:bd:12:ef:
                    77:97:85:79:0a:0b:2e:eb:10:ff:de:d4:1f:e3:56:
                    c2:11:f0:71:44:5c:0d:f9:8e:53:2f:0d:6b:b0:23:
                    de:db:46:c7:b8:46:8b:55:9d:79:31:cd:b3:96:a1:
                    d2:49:87:fb:66:7b:06:7e:cc:78:9d:a9:51:61:d3:
                    89:06:96:46:bb:91:d4:30:e2:47:83:3d:65:06:0a:
                    27:f1:c9:04:76:d3:f8:79:57:4c:d2:57:e4:b9:cb:
                    6e:34:ba:79:b0:3c:c9:08:bf:a9:a4:d3:36:1a:a1:
                    fc:68:96:40:7f:55:3f:ed:a6:17:89:b5:32:93:83:
                    1b:46:13:25:d2:36:94:97:f8:b0:c2:c8:ba:4e:6f:
                    6b:e3:d4:50:61:7f:d5:22:a7:74:bf:f5:54:34:e5:
                    85:ec:d1:08:4e:04:0d:12:17:b9:72:7d:9e:19:a8:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0B:4F:A9:43:E0:6D:36:87:47:7A:C6:BE:95:AA:CC:A8:75:1D:07
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e3139312e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:30:97:8c:ad:15:0d:8c:a7:ed:40:75:f7:52:dd:36:56:50:
         48:8c:0c:16:fa:db:72:e2:09:e7:2c:51:25:c4:a9:8a:d7:32:
         7b:42:b1:1d:e8:ef:3f:5a:5b:f1:e8:39:d3:1f:75:e7:e1:73:
         cb:89:79:13:06:40:d7:b1:a1:09:dd:a6:c8:86:91:28:a8:12:
         cb:c0:5e:de:18:82:9a:e3:94:e9:89:fb:52:4c:a8:ac:ed:80:
         a1:96:93:7a:32:6d:f7:2b:97:58:10:bd:f7:f2:59:ef:17:6b:
         a3:9b:84:6b:7e:ef:fa:c7:5b:ba:b2:9a:0c:f6:9d:1f:42:ce:
         07:a5:92:d3:18:7c:65:14:47:e0:17:b6:77:4e:61:a4:ce:41:
         29:8c:0b:fc:b7:8a:3f:07:92:9c:37:99:e7:67:b3:04:ac:b8:
         ae:aa:35:6a:5b:46:15:7e:d3:6e:ff:0e:c7:da:aa:e4:d7:f8:
         3f:ab:66:e4:14:ff:58:49:07:f5:25:f6:0f:c7:c9:0d:bd:77:
         27:7e:e5:63:bc:79:91:28:53:62:d0:51:01:18:23:2a:5a:9d:
         ae:da:c9:a6:30:b1:d9:5b:03:b4:37:64:bd:fd:14:81:82:17:
         07:89:24:ac:ca:c4:2f:34:e5:63:ba:19:59:1f:2e:0e:ac:89:
         42:df:81:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:05 2023 by rpki-client on console-ams.rpki-client.org