Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38392e302e302f32322d3234203d3e20313333383030.roa
File:                     3130332e38392e302e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          e5CieJpiOBTuqPAuRTxhDNws2l/HvXN/d9pkL7P8Q/g=
Subject key identifier:   21:28:E2:30:7B:2A:2B:9C:D0:3C:1A:18:CC:58:FE:4E:DD:68:F0:04
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4158446522BFE7A9D6F5DC0D7C83A73DD723E88E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38392e302e302f32322d3234203d3e20313333383030.roa
Signing time:             Thu 07 Oct 2021 06:00:00 +0000
ROA not before:           Thu 07 Oct 2021 05:55:00 +0000
ROA not after:            Fri 07 Oct 2022 06:00:00 +0000
asID:                     133800
IP address blocks:        103.89.0.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:58:44:65:22:bf:e7:a9:d6:f5:dc:0d:7c:83:a7:3d:d7:23:e8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  7 05:55:00 2021 GMT
            Not After : Oct  7 06:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:72:8a:fe:66:38:40:49:81:3a:4b:61:9a:
                    3f:c3:1f:6f:0f:6f:66:1b:32:d3:03:d1:26:06:82:
                    cb:0c:67:7c:5d:db:06:1f:05:09:ea:d9:69:62:eb:
                    26:5d:b0:d7:69:a8:66:af:20:39:67:24:18:71:0c:
                    6f:58:0c:ce:b0:2d:10:89:5e:f8:bf:59:46:ec:9d:
                    38:87:f3:a6:20:3b:76:15:3b:a1:66:49:d3:f5:e7:
                    f0:ce:bb:3b:ce:e2:7c:ac:32:6a:63:22:a5:3a:9b:
                    dc:a9:ae:6f:69:67:07:9a:c3:3f:2b:ef:67:64:a8:
                    bb:f1:ec:84:36:11:da:f4:04:a3:20:14:c4:5c:a8:
                    c0:3a:b6:b3:16:3e:50:51:a9:ed:1b:50:cd:63:c9:
                    fd:25:a8:c2:57:da:70:46:03:47:63:df:64:37:5d:
                    ac:77:97:59:c2:5a:11:d7:71:56:e7:08:a0:6b:26:
                    85:d6:fe:65:54:fd:a0:9a:d8:b6:6d:90:60:d6:d2:
                    fc:ae:48:b0:1f:0d:df:17:db:9a:d2:a3:6b:9c:1f:
                    1a:d0:5c:e9:79:23:3a:06:7b:c0:1d:32:25:18:13:
                    c7:b0:79:d4:a5:bb:ed:81:8f:22:24:c4:ac:18:a4:
                    1e:c6:5e:8c:68:e3:92:20:23:b4:1a:2c:6d:ba:43:
                    a2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:28:E2:30:7B:2A:2B:9C:D0:3C:1A:18:CC:58:FE:4E:DD:68:F0:04
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38392e302e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:04:48:82:5d:76:62:24:8c:48:3d:77:b9:5f:f8:70:87:
         c9:a6:bb:43:ee:8e:61:a8:a5:5e:25:7f:42:d1:23:b5:cc:fa:
         3e:9e:d0:71:0d:0f:35:bd:be:70:7a:ba:8a:4e:68:83:1f:26:
         5b:30:09:a0:2c:41:ab:01:0f:25:27:4d:8b:b9:9a:78:8b:b4:
         2e:ce:c3:fb:53:e2:dd:6a:40:83:76:7e:a8:38:73:02:ba:27:
         4f:5b:55:a1:11:25:f6:66:c0:34:47:04:d8:32:0a:9f:2d:e6:
         7a:1a:18:0c:80:5c:b5:a1:81:2e:46:07:10:40:55:93:95:ba:
         41:a5:8f:6d:5a:42:ed:71:ba:0e:6d:f5:45:e7:8d:88:9f:1d:
         4f:c5:b6:88:3d:09:af:6d:d4:eb:ff:71:a7:6a:d6:4b:2f:33:
         5e:cd:1a:03:f0:8c:ee:fe:d2:f9:c0:27:94:97:4f:1c:e9:b4:
         72:43:2d:71:39:17:ab:89:a3:cd:2e:9c:89:32:46:9a:19:d2:
         27:ee:f5:1e:63:59:ce:56:9b:14:6f:0f:73:96:96:5d:05:d7:
         db:f3:b6:19:b4:0f:6e:b2:ea:62:75:63:83:74:12:0f:34:65:
         47:85:57:bd:ae:58:f5:f9:d7:67:b7:11:ee:e2:97:90:a0:65:
         76:a2:63:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-ams.rpki-client.org