Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e3230362e3139362e302f32322d3234203d3e20313333383030.roa
File:                     3131362e3230362e3139362e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          aOK7p83rOf/lrASsPctbN46LVSifp/9D3VXHdArdFsM=
Subject key identifier:   AD:FA:2A:45:A2:20:FE:34:17:DD:EE:88:2E:B3:99:9C:F8:B5:9A:7A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       678A50C3C63378EC18B64E30B846E65CD801BA15
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e3230362e3139362e302f32322d3234203d3e20313333383030.roa
Signing time:             Sat 09 Oct 2021 07:00:00 +0000
ROA not before:           Sat 09 Oct 2021 06:55:00 +0000
ROA not after:            Sun 09 Oct 2022 07:00:00 +0000
asID:                     133800
IP address blocks:        116.206.196.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8a:50:c3:c6:33:78:ec:18:b6:4e:30:b8:46:e6:5c:d8:01:ba:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  9 06:55:00 2021 GMT
            Not After : Oct  9 07:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:55:b3:35:19:66:d6:07:ec:c2:a7:1a:98:c2:
                    bb:ca:6c:f1:91:45:bc:34:82:0a:35:04:b9:71:4e:
                    00:e0:ce:37:3e:21:56:e8:b0:47:67:6e:cc:ac:7f:
                    ae:fd:fe:17:41:51:f9:da:0c:a6:3f:84:e5:0f:a7:
                    00:ae:da:31:87:e7:5c:22:00:0b:45:cc:80:d0:a6:
                    43:3f:d7:fc:47:ee:04:d2:b5:c1:de:3c:97:8b:24:
                    d7:8f:63:c6:b7:92:0e:2b:41:85:13:0c:23:c1:02:
                    27:cc:9c:a3:fd:d0:e4:ae:51:cf:de:9e:bc:5a:c1:
                    96:4a:f2:63:64:8f:c3:9e:07:34:bd:07:bb:21:f4:
                    ca:8b:68:9b:20:20:fa:43:4c:49:5a:18:4d:d1:bb:
                    25:d0:83:db:b6:ed:0b:db:b7:36:9f:4e:8a:9f:d4:
                    17:c2:f8:a6:ea:f1:1b:92:91:8f:43:db:f9:2a:2c:
                    0c:85:87:de:e6:3b:f9:3b:a5:e2:7b:fb:4d:87:5e:
                    53:f0:34:b4:19:31:5e:50:44:f1:25:02:ce:7a:48:
                    46:14:80:ec:33:0f:e6:02:de:03:23:e9:63:53:ab:
                    66:f6:b7:9e:c5:80:86:08:70:f0:58:6b:f6:d9:97:
                    af:70:39:16:9a:bf:77:24:56:c5:2c:6e:4c:99:d5:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FA:2A:45:A2:20:FE:34:17:DD:EE:88:2E:B3:99:9C:F8:B5:9A:7A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e3230362e3139362e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:c6:16:c0:2a:09:c7:be:8c:3e:85:05:b2:38:45:51:a5:af:
         e0:d6:da:82:e0:f8:8e:b3:1b:5d:24:f0:00:e1:40:73:a4:58:
         14:4a:2d:39:92:54:48:0a:24:78:2f:74:09:40:19:45:0b:93:
         93:bd:c1:d3:ae:e2:d5:98:08:c0:41:38:6b:38:aa:1c:51:07:
         3e:a3:16:81:77:c8:ef:1e:97:5b:fb:98:5b:de:8b:57:9c:34:
         41:be:5d:f4:fc:49:2b:18:68:d6:b3:01:e8:73:36:ba:de:2c:
         10:71:ed:79:34:7e:0d:05:99:fb:08:a8:5b:43:e4:f6:4c:32:
         81:a5:ec:98:63:15:04:50:f5:67:c8:db:93:aa:76:c4:53:46:
         01:3d:f3:af:78:9d:fd:c8:c1:83:2a:43:6f:a7:97:b1:6e:46:
         d9:44:26:1d:ff:8a:05:2f:11:e3:14:6f:92:36:eb:6a:e1:f2:
         30:ef:a1:53:4f:26:0e:04:86:bb:2a:ef:eb:03:89:a7:c9:c5:
         cc:81:43:c4:e6:ec:14:8d:28:e4:87:74:92:ec:bf:3c:0d:8c:
         f6:a0:86:a5:e7:b5:73:03:f2:ee:95:e1:6d:73:e8:a3:51:31:
         bf:fb:94:a1:7c:ce:03:1b:86:d7:9f:ed:f1:06:5b:97:9c:40:
         22:90:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-fra.rpki-client.org