Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3231392e3139382e302f32332d3234203d3e20313335343431.roa
File:                     3130332e3231392e3139382e302f32332d3234203d3e20313335343431.roa (raw, json)
Hash identifier:          iDjBQbod8KqtHBGUmMIEV11u7JYXEBIoXA7ya9dnrqg=
Subject key identifier:   AE:D8:A1:CB:52:71:28:89:B7:30:FB:BE:C8:51:49:78:D2:EE:34:68
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2923BA2EC4427F35011CAB3DE65192764EB7E051
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3231392e3139382e302f32332d3234203d3e20313335343431.roa
Signing time:             Fri 19 Nov 2021 05:00:00 +0000
ROA not before:           Fri 19 Nov 2021 04:55:00 +0000
ROA not after:            Sat 19 Nov 2022 05:00:00 +0000
asID:                     135441
IP address blocks:        103.219.198.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:23:ba:2e:c4:42:7f:35:01:1c:ab:3d:e6:51:92:76:4e:b7:e0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:00 2021 GMT
            Not After : Nov 19 05:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:dc:0a:95:73:01:6b:ac:83:5b:8b:7d:37:
                    8a:f0:9e:87:80:37:49:d0:87:68:ce:e7:cd:5d:98:
                    8e:c4:a4:bb:9b:4e:33:38:63:27:1e:01:2d:b5:08:
                    99:7c:89:2a:42:1a:2e:72:b2:69:3b:30:a9:95:a5:
                    a8:bd:25:36:76:4f:b2:61:77:08:b0:b5:58:b1:52:
                    21:98:72:4b:99:63:bb:fd:d6:65:6f:96:1f:20:31:
                    16:7c:5f:3a:cb:02:52:1c:63:54:05:2c:56:00:a9:
                    79:b7:be:b1:d2:81:1a:14:b1:e1:24:3b:1e:86:27:
                    b8:be:17:3f:d9:c8:80:ba:98:ba:11:d0:32:b8:34:
                    d3:18:e1:88:40:55:bb:7d:1b:86:44:10:9a:96:a0:
                    1f:eb:9a:9d:f6:35:bd:3d:7b:a4:e2:7c:86:85:5b:
                    78:cd:f4:91:c4:37:cb:e8:3c:53:aa:ac:9f:3f:21:
                    11:18:05:12:15:ee:f1:fe:56:db:dd:67:04:8d:cb:
                    fa:5b:e1:f5:4b:7b:21:d3:7d:e0:f7:29:60:a7:7e:
                    a9:3b:d5:8c:27:95:3d:4c:ac:58:91:fa:94:61:d3:
                    72:6f:55:07:59:55:1d:57:36:de:c2:a1:70:80:26:
                    1d:52:6a:da:18:51:6e:6a:a2:26:bd:be:e0:c1:f7:
                    c0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D8:A1:CB:52:71:28:89:B7:30:FB:BE:C8:51:49:78:D2:EE:34:68
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3231392e3139382e302f32332d3234203d3e20313335343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:26:0c:a9:15:84:ca:fa:d7:7e:a2:1d:99:c7:77:b0:9c:ed:
         8c:33:15:b5:8b:ce:7e:a7:72:1f:fc:f1:75:bc:79:66:7d:b5:
         1d:6a:92:9b:c8:ff:67:10:88:75:1a:12:5f:9c:5d:aa:94:11:
         83:b7:77:26:1a:f9:66:24:f8:f2:90:7a:78:09:7b:2b:b6:cb:
         83:b9:fd:96:2e:d8:15:2d:fb:fb:2f:d9:c8:8f:79:2b:1e:a0:
         ed:8a:d0:ed:b3:14:17:45:de:78:ee:44:5e:26:20:38:dc:01:
         dc:5d:0f:af:1f:a0:89:28:e6:c4:82:e5:fa:ab:ae:32:d1:f4:
         05:5c:0d:86:2b:c6:b5:6d:e7:50:32:51:16:f7:4e:8e:84:d7:
         fb:34:c4:1b:01:9d:93:60:3f:22:70:be:83:90:ee:ca:63:94:
         6b:49:a7:19:a7:84:8d:96:25:42:01:f4:c4:8f:db:4a:11:f4:
         c3:a5:57:e3:de:5e:48:96:13:f4:08:5c:49:98:24:b4:dc:cd:
         12:c2:8a:a9:bf:38:7e:65:a5:0b:0f:cc:63:df:82:08:1b:df:
         aa:48:c7:90:c3:d3:36:01:76:b5:00:a6:0d:da:6a:a6:68:19:
         63:29:ff:fe:94:58:aa:a6:2a:a8:b5:fa:a1:f4:c1:69:db:36:
         60:58:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-fra.rpki-client.org