Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135362e302f32332d3233203d3e20313339393636.roa
File:                     3130332e3134372e3135362e302f32332d3233203d3e20313339393636.roa (raw, json)
Hash identifier:          82y60zinWo0zCsqO7dmqMOvgS255WSKLwV5RmqZ3k1k=
Subject key identifier:   4A:26:D1:BC:2A:D0:DC:72:63:4D:6E:94:F0:F9:15:38:8C:52:75:24
Certificate issuer:       /CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
Certificate serial:       219AAD648DD99FE8EE12B102F56FCBE9A529E2A5
Authority key identifier: 0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135362e302f32332d3233203d3e20313339393636.roa
Signing time:             Tue 11 Oct 2022 05:00:00 +0000
ROA not before:           Tue 11 Oct 2022 04:55:00 +0000
ROA not after:            Tue 10 Oct 2023 05:00:00 +0000
asID:                     139966
IP address blocks:        103.147.156.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9a:ad:64:8d:d9:9f:e8:ee:12:b1:02:f5:6f:cb:e9:a5:29:e2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
        Validity
            Not Before: Oct 11 04:55:00 2022 GMT
            Not After : Oct 10 05:00:00 2023 GMT
        Subject: CN=4A26D1BC2AD0DC72634D6E94F0F915388C527524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:05:1f:9d:92:13:1a:eb:15:33:43:a0:4a:
                    51:b1:57:85:a6:e1:45:de:66:cf:b3:af:ac:7a:b4:
                    a8:d9:1a:be:74:11:18:f1:a8:4e:dd:a9:55:26:e0:
                    6f:4d:03:61:5f:e6:bc:ae:68:9c:da:d3:1a:11:0a:
                    5b:35:40:32:e4:1d:ee:4f:e8:92:bb:8b:8e:20:bc:
                    5f:1b:ca:7c:23:e9:2d:5c:a9:3e:81:d1:4b:40:22:
                    b1:92:01:49:81:55:4e:d0:06:20:17:ee:e6:a3:67:
                    82:95:34:c7:1f:68:5e:9c:9c:bd:f8:d0:28:84:4d:
                    94:71:57:11:d8:9a:e8:c3:29:5c:79:6c:26:5d:4d:
                    69:df:ce:31:08:65:88:e8:67:fe:c7:54:40:e1:8c:
                    b8:3b:79:43:78:9d:7b:4a:27:79:80:e0:5e:d9:96:
                    16:31:62:cc:c3:de:bf:1d:c6:80:ad:1e:50:0d:91:
                    27:ec:86:0d:97:ed:db:88:17:c6:1e:4d:5d:61:f4:
                    fd:79:a2:64:1c:5f:16:0f:49:cf:a9:8b:ca:aa:10:
                    f5:e8:5e:9b:06:34:2f:b6:2e:f6:51:2b:fc:94:07:
                    7b:bc:48:a1:5e:22:5a:8c:14:82:16:67:7f:37:0d:
                    0e:da:c8:d3:2d:7e:4a:ad:0b:ee:f4:77:12:0a:97:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:26:D1:BC:2A:D0:DC:72:63:4D:6E:94:F0:F9:15:38:8C:52:75:24
            X509v3 Authority Key Identifier:
                keyid:0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135362e302f32332d3233203d3e20313339393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:cb:6a:e1:d6:07:53:28:45:80:bb:0f:d3:9f:5d:a4:9c:
         7c:fe:26:9c:d9:2a:57:9e:c0:25:be:fa:91:13:0d:b5:9f:13:
         6e:f2:09:ad:83:9d:8b:ec:98:04:35:a2:12:46:b5:12:b7:0c:
         56:3d:52:fe:c8:bc:82:fe:a6:cb:23:0e:b8:36:22:8d:9f:8c:
         3f:f2:c2:44:92:86:f5:f3:b4:0c:81:96:fc:8e:1c:6d:95:8e:
         55:82:52:95:27:1f:df:75:60:08:8b:96:c1:3a:f3:2f:da:90:
         7f:e8:ea:a1:c6:9a:2e:8e:f4:65:03:41:61:6e:da:21:1b:07:
         33:2a:67:9b:2e:b1:98:a0:b1:7d:48:69:da:6b:04:24:d7:36:
         1c:1e:d8:4c:ee:81:79:db:c6:28:4f:3b:13:66:df:6e:28:10:
         40:13:d3:9f:37:58:50:57:3e:c1:53:9f:43:80:6d:f2:61:be:
         cf:f7:03:7c:30:e5:2d:b1:02:21:53:35:d2:aa:8f:fc:15:31:
         2d:3b:ae:cd:52:7e:69:0d:3c:cd:c4:74:7e:23:a7:88:6e:cb:
         37:3e:6e:a5:82:17:c3:e1:e7:2c:3c:b3:16:01:26:6d:b0:65:
         72:2e:b3:f7:7e:4f:cf:e2:77:c1:4e:9a:89:2d:ae:c3:72:04:
         13:04:44:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org