Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39382e33312e302f32342d3234203d3e20313336313239.roa
File:                     3130332e39382e33312e302f32342d3234203d3e20313336313239.roa (raw, json)
Hash identifier:          ySBl3VoQHcSrTes7JYvEIbEQUvIMBTdD1KsTKtxZ0nk=
Subject key identifier:   19:74:1B:CE:B3:5E:8E:EE:84:03:1E:BD:95:BF:96:64:7B:9A:73:3D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       26AE61CD0E04BF4B6BC3A17F8B1B4DB26E674C3F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39382e33312e302f32342d3234203d3e20313336313239.roa
Signing time:             Tue 05 Oct 2021 04:24:25 +0000
ROA not before:           Tue 05 Oct 2021 04:19:25 +0000
ROA not after:            Wed 05 Oct 2022 04:24:25 +0000
asID:                     136129
IP address blocks:        103.98.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ae:61:cd:0e:04:bf:4b:6b:c3:a1:7f:8b:1b:4d:b2:6e:67:4c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  5 04:19:25 2021 GMT
            Not After : Oct  5 04:24:25 2022 GMT
        Subject: CN=3082010A0282010100C68C3249C318493A85168E7B597EF27D9D7D2D688DC4F08BA77FFE454131C2905448076590E628DD4984D5393D28BB7678ED3BDF7419EC52E60BE230B81D1DA43B97EA331B87B678730F348E79D119E40DC8CA35C1794DE969A156495202B748538C44A7881198CEFEE9CBDDEAFCE0F15FF4678766FAEBEECF1B5A8A198AC8373A188719EE494B52FB6AEE6D08DC0E1A5A309B3A5517982CD94CF2CF37EC4B2CD8E92B665B0C234D7F35A7FB410037C8329DAAD606FD5DBA82EE83971ACCAB0248AD63036C82684F99F49B7AFD5AD5E4B6BF83B06BDA98B6A596738D7BBB04A14E3D7599D9FD492D9A775B1881C743E0ABFFF8616124F78310EAFEEAD72EBAD10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:32:49:c3:18:49:3a:85:16:8e:7b:59:7e:
                    f2:7d:9d:7d:2d:68:8d:c4:f0:8b:a7:7f:fe:45:41:
                    31:c2:90:54:48:07:65:90:e6:28:dd:49:84:d5:39:
                    3d:28:bb:76:78:ed:3b:df:74:19:ec:52:e6:0b:e2:
                    30:b8:1d:1d:a4:3b:97:ea:33:1b:87:b6:78:73:0f:
                    34:8e:79:d1:19:e4:0d:c8:ca:35:c1:79:4d:e9:69:
                    a1:56:49:52:02:b7:48:53:8c:44:a7:88:11:98:ce:
                    fe:e9:cb:dd:ea:fc:e0:f1:5f:f4:67:87:66:fa:eb:
                    ee:cf:1b:5a:8a:19:8a:c8:37:3a:18:87:19:ee:49:
                    4b:52:fb:6a:ee:6d:08:dc:0e:1a:5a:30:9b:3a:55:
                    17:98:2c:d9:4c:f2:cf:37:ec:4b:2c:d8:e9:2b:66:
                    5b:0c:23:4d:7f:35:a7:fb:41:00:37:c8:32:9d:aa:
                    d6:06:fd:5d:ba:82:ee:83:97:1a:cc:ab:02:48:ad:
                    63:03:6c:82:68:4f:99:f4:9b:7a:fd:5a:d5:e4:b6:
                    bf:83:b0:6b:da:98:b6:a5:96:73:8d:7b:bb:04:a1:
                    4e:3d:75:99:d9:fd:49:2d:9a:77:5b:18:81:c7:43:
                    e0:ab:ff:f8:61:61:24:f7:83:10:ea:fe:ea:d7:2e:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:74:1B:CE:B3:5E:8E:EE:84:03:1E:BD:95:BF:96:64:7B:9A:73:3D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39382e33312e302f32342d3234203d3e20313336313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:72:34:89:e4:51:31:ad:3d:e1:ac:f3:4f:2f:d9:7a:ab:12:
         c8:62:83:eb:1f:27:ec:9d:4c:4f:46:a0:1d:63:cb:fd:1b:28:
         a6:d0:e4:c2:04:68:9c:30:fc:b2:0c:22:9c:cb:2b:6a:2f:a2:
         8a:18:0a:12:e9:69:bc:aa:f7:4c:62:d3:eb:a1:68:fe:9f:dd:
         d5:b8:de:bb:a9:7a:03:88:79:39:b1:ed:20:ec:9a:41:6b:a3:
         5f:73:ca:f4:27:f2:68:04:74:3d:07:e7:60:38:b3:88:21:66:
         6f:c3:54:0c:d7:78:c8:c8:ed:90:84:25:1a:a5:41:a0:42:7c:
         e3:5d:dd:14:d0:f6:97:81:61:03:d0:a5:3e:74:cf:c7:e4:a0:
         a8:29:a1:95:c1:2a:f6:01:80:ae:f7:0a:e6:92:ea:5b:73:18:
         14:6c:61:d6:af:cd:99:53:b1:a9:5b:7a:7e:20:cc:ba:1c:6c:
         ac:d4:7e:cc:2b:f9:93:50:56:5a:fc:a5:7d:4e:f5:05:d7:eb:
         4c:3b:b2:de:8c:28:d3:bc:7a:67:85:69:2d:e8:21:da:3e:a9:
         af:f0:38:50:e0:36:db:0b:0f:e6:72:d6:80:7d:f1:0a:0e:96:
         71:db:44:69:39:2c:5e:55:91:8a:61:ea:30:36:39:44:af:89:
         89:cc:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-fra.rpki-client.org