Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135392e3233322e302f32332d3234203d3e2039383735.roa
File:                     3130332e3135392e3233322e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          Lly1Sb0S0Bso3JDtoY295tmkVdyWjRHluK7qi0ahs6I=
Subject key identifier:   D3:0C:45:EA:5D:81:7C:AA:F7:38:21:67:7F:CB:62:6B:6D:F3:B4:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0DE47CFAE5FF2C3A151C86D1763FF075BB3A035F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135392e3233322e302f32332d3234203d3e2039383735.roa
Signing time:             Fri 12 Nov 2021 01:00:02 +0000
ROA not before:           Fri 12 Nov 2021 00:55:02 +0000
ROA not after:            Sat 12 Nov 2022 01:00:02 +0000
asID:                     9875
IP address blocks:        103.159.232.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e4:7c:fa:e5:ff:2c:3a:15:1c:86:d1:76:3f:f0:75:bb:3a:03:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 12 00:55:02 2021 GMT
            Not After : Nov 12 01:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:61:b6:6a:9a:60:c4:06:b1:c7:36:01:5d:
                    fe:63:da:54:d7:5e:10:43:b5:20:07:cf:d3:83:9d:
                    6b:54:1f:06:de:b1:45:50:d5:a0:e9:7f:93:b2:b6:
                    57:6b:d6:45:97:5d:17:a1:89:f3:34:d2:b7:60:7e:
                    02:df:56:dd:24:7c:d3:56:3a:5c:ed:34:f7:24:8b:
                    8a:11:1a:d0:a9:bb:f2:06:5f:25:f1:9a:54:ec:2d:
                    ce:91:08:e3:33:54:cc:ec:a7:f9:4e:11:d8:14:09:
                    8b:d7:b2:a3:9f:f2:a7:21:45:bd:e3:cf:1d:8f:d0:
                    1f:dc:3b:e2:e5:cd:56:28:ac:95:ac:e9:2a:5b:f7:
                    69:b8:21:40:b8:a5:ed:79:f3:2d:75:fe:49:05:3e:
                    d7:37:0a:f4:b9:cc:7d:38:79:4c:30:6c:1a:f7:1d:
                    26:44:a8:2d:ba:f3:c2:52:7e:50:e7:56:db:94:16:
                    31:cc:98:a5:f0:0c:9e:9b:22:2e:a2:96:a3:e6:50:
                    b6:7e:f8:f5:ec:1c:cf:7a:7c:d9:75:d8:9f:65:b3:
                    dc:ef:4c:c4:63:35:c1:b0:b0:0d:1e:c1:ec:fe:d7:
                    b0:bb:b7:87:aa:b4:55:f6:b8:38:2b:da:c2:06:e5:
                    0c:cb:36:eb:ae:ed:89:1f:45:bc:4c:5c:c0:b9:d5:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0C:45:EA:5D:81:7C:AA:F7:38:21:67:7F:CB:62:6B:6D:F3:B4:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135392e3233322e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:0e:99:39:bc:dd:34:b1:44:b5:51:23:7f:69:27:91:c4:10:
         cd:e0:0d:66:1d:7a:d7:09:24:13:4f:c7:6f:09:a5:b7:7a:3e:
         e1:38:e7:5e:cb:70:dc:60:dc:1f:25:cd:80:5a:38:5e:71:90:
         6c:ae:22:01:c7:3f:ac:9f:a7:d5:86:84:7e:4a:c2:8a:d8:b8:
         2a:02:06:1f:79:b2:0e:5b:2c:0b:ee:3f:cf:99:d8:de:25:41:
         b6:33:e9:e5:95:b5:15:50:35:f3:2d:b5:ea:3b:aa:9a:59:37:
         fc:2b:27:bd:b9:39:5c:e2:9c:b3:16:d0:91:af:57:17:6b:c4:
         dc:10:db:7d:89:40:fd:e5:d0:ef:3d:92:5f:88:be:57:35:8f:
         0d:44:fc:8b:66:be:24:88:ec:50:ca:b3:3d:47:24:56:cc:c7:
         3b:2c:0a:5c:0f:6e:c9:06:f4:30:08:b3:a9:06:41:8f:ea:6b:
         72:df:58:a5:78:79:4c:7d:0b:58:84:ba:71:3b:7c:40:69:47:
         7c:42:01:ce:0e:89:6e:35:6a:eb:31:a8:17:57:11:9d:31:90:
         d8:74:d7:d3:7f:57:53:7c:9b:7f:49:d8:7c:80:8c:48:d2:97:
         74:73:dd:dd:87:10:d4:23:6a:aa:d8:83:77:77:fa:12:98:d0:
         b2:71:9d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-fra.rpki-client.org