Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3132382e302f32322d3234203d3e20313333383030.roa
File:                     3130332e39332e3132382e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          PunTpphdtZ8Raz1/MAZ0VcZHwTXED7yE8MqE56j1DrA=
Subject key identifier:   3F:9F:41:29:A7:65:35:47:19:8B:BA:3A:70:51:EE:40:9A:99:5A:A9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       10F50DC74EA4E1F8B9B0C494F433E8BE97F5A562
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3132382e302f32322d3234203d3e20313333383030.roa
Signing time:             Sat 09 Oct 2021 04:00:01 +0000
ROA not before:           Sat 09 Oct 2021 03:55:01 +0000
ROA not after:            Sun 09 Oct 2022 04:00:01 +0000
asID:                     133800
IP address blocks:        103.93.128.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f5:0d:c7:4e:a4:e1:f8:b9:b0:c4:94:f4:33:e8:be:97:f5:a5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  9 03:55:01 2021 GMT
            Not After : Oct  9 04:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:04:3e:b4:e8:2d:c7:e2:b4:d2:cb:c6:d6:
                    60:4c:d7:97:af:ae:17:5d:06:65:e3:0c:7e:31:70:
                    25:51:5d:f2:91:5f:9a:c7:2a:9d:b4:0c:75:f2:d4:
                    ae:3d:47:e8:05:c4:38:85:e1:9f:70:27:3e:91:7f:
                    e0:2c:19:2d:b1:ff:1e:f5:03:97:1e:f7:2e:8b:8d:
                    69:1b:08:40:2d:b6:7b:ed:9e:f7:02:e6:9c:40:27:
                    3c:bb:51:bc:55:c5:b9:ca:92:40:87:58:eb:d6:9d:
                    7b:31:b6:1e:8a:fb:d6:73:53:f6:78:d3:04:67:6a:
                    db:2e:96:f9:42:41:63:76:98:b6:21:69:91:ac:09:
                    3c:15:1a:cd:51:ea:21:73:f3:d1:fd:05:77:3a:46:
                    2a:94:02:c6:df:c6:a2:a9:68:18:87:d3:a7:62:b4:
                    36:01:f0:f8:be:a3:69:8a:51:28:4a:54:65:d1:fc:
                    02:42:52:a5:3e:88:7c:e5:a2:c5:f3:06:19:54:7b:
                    d8:e4:ea:67:1d:08:90:5c:93:8f:36:6e:1e:74:8d:
                    2a:6d:bc:b8:5e:96:a1:5a:ef:20:a3:d8:c7:26:12:
                    7c:0c:f8:da:7e:6c:56:85:6e:1a:55:17:28:38:02:
                    63:66:1d:3c:d6:f8:cf:ec:11:3d:d5:be:04:90:a9:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9F:41:29:A7:65:35:47:19:8B:BA:3A:70:51:EE:40:9A:99:5A:A9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3132382e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:35:69:21:e2:58:b6:8c:a2:8e:90:63:0b:6a:89:54:b4:
         bc:ef:53:4d:b8:c7:47:7e:af:4e:2a:e8:c4:df:2a:91:ab:c6:
         50:43:2f:28:ab:ae:ee:60:e7:e5:de:43:37:67:97:48:fe:21:
         69:29:28:a8:8b:8e:40:fc:f4:be:55:d3:bb:df:54:e1:94:9e:
         ed:7c:e6:e2:aa:b9:4d:7c:63:92:bd:4c:f1:79:54:04:f5:da:
         b3:64:1a:22:84:22:78:b4:b0:15:16:0f:54:2f:06:ba:5b:f6:
         7c:68:1f:ec:ec:c8:91:0d:93:40:cd:e2:7c:5d:61:12:6c:b2:
         a0:48:3f:f4:a2:f5:78:5a:ee:b1:2e:d2:38:65:96:5e:42:ae:
         d6:d7:c9:85:71:a6:4a:01:8f:81:7a:6f:01:86:51:20:99:5c:
         db:88:b2:d2:0b:47:f4:2d:5a:1b:cd:1c:71:be:ee:84:82:aa:
         3f:51:5d:0f:01:ca:49:a1:67:b9:6d:0f:4f:73:1c:1a:30:00:
         48:74:c9:6f:42:08:15:3e:84:a7:6e:8d:6e:14:08:f6:ab:6d:
         b3:d1:bd:00:e0:d3:dc:84:a1:16:6a:d6:3b:f2:89:64:3d:b9:
         f8:c2:79:88:53:ce:5c:45:2f:37:7a:59:ff:c8:17:13:07:8b:
         2e:8b:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-ams.rpki-client.org