Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135392e3232302e302f32332d3234203d3e203538333639.roa
File:                     3130332e3135392e3232302e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          VddycZWOCGveyFEsjxfq1zdDSf2XUsXhpz+UOozlt+k=
Subject key identifier:   61:32:37:78:A8:10:AA:73:92:5A:03:29:6D:6F:FE:14:A8:6C:AF:66
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       01FF9308032F692409B0E9EED187B1AF6634FD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135392e3232302e302f32332d3234203d3e203538333639.roa
Signing time:             Thu 02 Dec 2021 04:13:02 +0000
ROA not before:           Thu 02 Dec 2021 04:08:02 +0000
ROA not after:            Fri 02 Dec 2022 04:13:02 +0000
asID:                     58369
IP address blocks:        103.159.220.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ff:93:08:03:2f:69:24:09:b0:e9:ee:d1:87:b1:af:66:34:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  2 04:08:02 2021 GMT
            Not After : Dec  2 04:13:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:11:49:82:c6:64:16:fc:4c:07:89:19:86:a7:
                    e4:43:4f:8b:a6:2b:4f:f9:24:ec:76:42:34:3e:40:
                    1f:99:e1:b4:17:48:79:ca:4e:89:d2:11:eb:88:2a:
                    3c:f5:fc:ff:f7:93:24:5a:52:52:d9:8a:50:40:41:
                    1f:cb:82:74:b0:c4:0c:11:3f:30:d8:c9:84:36:5c:
                    53:86:c6:29:0b:ce:b8:78:2d:00:ea:74:60:fc:94:
                    2d:9a:bf:12:23:c3:78:db:5a:d8:6b:0c:fd:67:4a:
                    a2:4d:4d:83:b1:65:f7:8e:7d:5c:a4:6d:24:82:59:
                    96:4c:f8:3b:36:03:7c:88:aa:c3:64:e0:09:dc:81:
                    5f:2d:89:c1:9e:3c:55:55:ee:40:97:f6:71:ed:04:
                    0f:9d:c6:55:a1:67:1d:4f:be:2c:90:39:32:b9:25:
                    a8:2d:0c:48:fd:cc:56:fd:b7:ef:46:5f:dc:29:0f:
                    c9:4f:0b:ba:b8:df:2d:25:8e:84:6a:11:35:6f:44:
                    b7:6e:0a:a0:81:c9:d7:5e:c9:ed:10:8a:eb:be:e8:
                    f4:b4:4d:81:15:04:f5:08:de:99:31:ab:af:0a:e9:
                    93:33:ab:3e:57:bf:16:e8:7e:40:f6:b5:37:d1:57:
                    03:1b:b6:88:90:18:66:82:10:a3:34:01:b4:79:da:
                    04:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:32:37:78:A8:10:AA:73:92:5A:03:29:6D:6F:FE:14:A8:6C:AF:66
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135392e3232302e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:de:95:23:ba:95:15:b5:39:fc:7a:26:70:23:e3:0c:72:42:
         67:f8:95:92:07:05:ca:bd:34:17:fe:66:f1:c5:8d:18:9f:9f:
         f7:af:46:d2:62:25:d1:0d:be:2e:bd:fd:04:dd:68:17:f7:ab:
         bd:51:2b:e7:d0:df:33:56:a2:9b:40:08:d5:76:40:f1:02:45:
         ba:34:ea:d4:55:87:00:5e:4a:e4:27:b7:43:be:91:36:a3:0f:
         0f:92:80:e7:81:a2:0f:40:84:46:91:6f:e6:16:88:a2:07:ba:
         df:b5:10:86:f3:39:47:a0:4b:09:23:c8:4b:e2:5c:6f:a7:87:
         f7:ce:c3:51:db:f5:1e:c7:1b:0e:5f:d6:f0:a1:7a:2a:31:3f:
         a6:84:e9:76:c4:74:ba:8e:e7:6b:7c:5c:c4:44:df:82:10:7d:
         52:da:fd:0f:4e:67:d4:14:95:83:69:9b:25:46:4a:ba:18:3a:
         be:20:3b:9f:f7:c7:34:fc:11:ad:7f:6c:d9:99:89:07:34:20:
         b5:52:0b:31:b9:16:2f:6e:08:4d:3d:bb:8e:dc:af:58:f9:14:
         24:74:67:cf:01:7c:6d:33:fd:b1:cf:fd:74:ff:58:18:c2:d5:
         77:a7:93:c4:af:8f:ca:78:c8:76:05:99:c9:0b:93:cb:7c:84:
         57:20:15:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:05 2023 by rpki-client on console-ams.rpki-client.org