Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e20313530353037.roa
File:                     3130332e35362e39322e302f32342d3234203d3e20313530353037.roa (raw, json)
Hash identifier:          NC73GzRaZxSNbcT7HOIIEIZCOtXYzEk4BerCFmnDWNI=
Subject key identifier:   9C:CA:2B:F8:F5:75:89:36:A9:3B:39:2F:CB:C6:30:A8:4F:D0:6B:0E
Certificate issuer:       /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
Certificate serial:       3FFDD834365AC7C8FCD60C554BDC0178D1E6D369
Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e20313530353037.roa
Signing time:             Fri 06 Jan 2023 10:10:46 +0000
ROA not before:           Fri 06 Jan 2023 10:05:46 +0000
ROA not after:            Fri 05 Jan 2024 10:10:46 +0000
asID:                     150507
IP address blocks:        103.56.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fd:d8:34:36:5a:c7:c8:fc:d6:0c:55:4b:dc:01:78:d1:e6:d3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
        Validity
            Not Before: Jan  6 10:05:46 2023 GMT
            Not After : Jan  5 10:10:46 2024 GMT
        Subject: CN=9CCA2BF8F5758936A93B392FCBC630A84FD06B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:67:5f:58:c3:b8:ed:f1:27:45:dc:a2:95:
                    b3:8d:69:38:d1:52:f6:ba:c1:c5:a6:f4:a4:65:5d:
                    80:e5:c1:35:05:ea:b9:84:2e:52:be:b0:ae:ba:79:
                    29:fb:6e:57:4e:bb:3a:6f:d8:ea:08:49:bc:9a:ee:
                    e3:ee:75:be:6b:20:63:a4:6f:e2:b2:00:b9:59:38:
                    a1:a1:0d:dd:77:1a:0d:b6:5c:f7:01:40:26:d2:c5:
                    12:db:4c:c4:59:9d:a4:47:3e:32:39:27:ca:be:fb:
                    27:b2:24:6a:1d:ee:b0:aa:5a:82:0b:57:8a:67:64:
                    3c:33:bf:e1:a5:d6:2b:db:a5:d9:db:25:07:2f:b6:
                    4f:e0:12:e4:38:8b:8c:cb:87:d0:e4:dd:13:4a:89:
                    eb:e8:7b:06:7d:5e:f7:e2:c0:8f:c7:65:de:fc:0d:
                    9f:1a:d4:0f:df:0f:a3:19:12:d6:b2:01:dc:4e:c0:
                    60:c0:14:7a:86:7f:45:dc:be:bc:2e:4a:e4:0a:85:
                    72:e3:8e:1a:cc:b9:b2:22:1d:5e:67:20:6d:e1:3f:
                    eb:b6:92:88:82:2c:d9:1d:62:8f:e0:5c:f5:cd:1e:
                    48:79:4f:fe:dd:ee:3c:55:00:9c:70:c6:51:83:5c:
                    3d:fa:0c:8b:6b:99:07:04:2a:e5:dc:f7:f4:d9:f9:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CA:2B:F8:F5:75:89:36:A9:3B:39:2F:CB:C6:30:A8:4F:D0:6B:0E
            X509v3 Authority Key Identifier:
                keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e20313530353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:c5:09:40:f4:24:e8:7e:ee:d3:5b:c7:05:62:2a:e1:e2:39:
         ef:7d:ea:de:60:1b:df:f7:c6:82:90:77:61:fe:70:97:1c:8f:
         57:27:e9:2c:62:9f:61:f9:c9:52:6f:95:69:9c:a3:95:a0:39:
         17:54:51:96:d4:e7:7a:f2:22:1a:e3:c9:b1:aa:af:43:e5:05:
         96:a6:34:ce:fd:4e:70:ae:ad:89:2d:1d:28:5b:c3:80:a1:de:
         e6:53:e9:22:3f:0b:cd:11:32:46:d5:dd:ef:dd:53:b9:57:cc:
         8a:f6:85:42:0d:b3:95:d8:21:a9:61:03:33:b8:ad:dc:71:e3:
         9d:a8:da:dc:24:dc:4c:a5:9e:de:e3:ec:99:27:fc:8b:b3:24:
         5b:8c:ed:08:32:4f:ae:bf:15:8b:53:97:bf:1e:c2:63:80:89:
         d9:08:70:03:d1:37:e2:b9:89:07:b3:90:70:bf:19:6f:ce:09:
         ab:b8:0e:34:21:ce:eb:49:44:24:1f:ac:4d:97:25:33:ce:52:
         d5:dd:dc:75:66:d6:58:4d:10:5b:c6:53:26:91:94:93:79:42:
         33:d4:5e:0b:1d:50:99:fa:a4:9f:61:63:97:69:46:d0:ed:08:
         74:d5:c5:9c:6a:52:f9:ae:52:48:7e:57:2a:a5:b6:de:11:e8:
         98:8f:c7:e4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUP/3YNDZax8j81gxVS9wBeNHm02kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy
NTExMkNFQjAeFw0yMzAxMDYxMDA1NDZaFw0yNDAxMDUxMDEwNDZaMDMxMTAvBgNV
BAMTKDlDQ0EyQkY4RjU3NTg5MzZBOTNCMzkyRkNCQzYzMEE4NEZEMDZCMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hWdfWMO47fEnRdyilbONaTjR
Uva6wcWm9KRlXYDlwTUF6rmELlK+sK66eSn7bldOuzpv2OoISbya7uPudb5rIGOk
b+KyALlZOKGhDd13Gg22XPcBQCbSxRLbTMRZnaRHPjI5J8q++yeyJGod7rCqWoIL
V4pnZDwzv+Gl1ivbpdnbJQcvtk/gEuQ4i4zLh9Dk3RNKievoewZ9XvfiwI/HZd78
DZ8a1A/fD6MZEtayAdxOwGDAFHqGf0XcvrwuSuQKhXLjjhrMubIiHV5nIG3hP+u2
koiCLNkdYo/gXPXNHkh5T/7d7jxVAJxwxlGDXD36DItrmQcEKuXc9/TZ+cTlAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUnMor+PV1iTapOzkvy8YwqE/Qaw4wHwYDVR0j
BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2
NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx
MkNFQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyNmNkMjZmLWZiZGEtNGNkOC1h
MDFjLWIwMTU1NTEzMDE1Zi8wLzMxMzAzMzJlMzUzNjJlMzkzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4XDANBgkqhkiG
9w0BAQsFAAOCAQEAh8UJQPQk6H7u01vHBWIq4eI5733q3mAb3/fGgpB3Yf5wlxyP
VyfpLGKfYfnJUm+VaZyjlaA5F1RRltTnevIiGuPJsaqvQ+UFlqY0zv1OcK6tiS0d
KFvDgKHe5lPpIj8LzREyRtXd791TuVfMivaFQg2zldghqWEDM7it3HHjnaja3CTc
TKWe3uPsmSf8i7MkW4ztCDJPrr8Vi1OXvx7CY4CJ2QhwA9E34rmJB7OQcL8Zb84J
q7gONCHO60lEJB+sTZclM85S1d3cdWbWWE0QW8ZTJpGUk3lCM9ReCx1Qmfqkn2Fj
l2lG0O0IdNXFnGpS+a5SSH5XKqW23hHomI/H5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org