Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130382e3131392e302f32342d3234203d3e20313331373736.roa
File:                     3130332e3130382e3131392e302f32342d3234203d3e20313331373736.roa (raw, json)
Hash identifier:          CDhZJhSbLC8OnPl1ZJ0kwPNaDCWZq6jH4stUStL/vMY=
Subject key identifier:   85:B9:7B:47:93:6A:62:DE:1F:81:D8:26:BD:FD:53:FF:DC:D9:FD:B2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3F795438B08B07B823793353780ADA53E0B55817
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130382e3131392e302f32342d3234203d3e20313331373736.roa
Signing time:             Thu 02 Sep 2021 06:51:16 +0000
ROA not before:           Thu 02 Sep 2021 06:46:16 +0000
ROA not after:            Fri 02 Sep 2022 06:51:16 +0000
asID:                     131776
IP address blocks:        103.108.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:79:54:38:b0:8b:07:b8:23:79:33:53:78:0a:da:53:e0:b5:58:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  2 06:46:16 2021 GMT
            Not After : Sep  2 06:51:16 2022 GMT
        Subject: CN=3082010A0282010100AC8B6B74846889A2B33668638DF39B212C78A675485ABDBF85C791176DE6F24634B0E81C697034B79BD710BCC79ACF45B999528D0E227BCE0DF1C89DFDEFB8DB96CDE3D1EAFDE69A31591E5708521385FF65DDE0F4B57B4905ACE5197F044A90A33C49A32DDABAA9B243CCDFCA1F2051DC84BE78C11DDB97857984A71EE2357540806DCC3D12FF4331A2F7F1AA38E19BBCE7FA06B6294A311106B16766A135D43115911BEE25241A42528A655C3A715D93459B37559AB7F3D3F25D6AF0D8B7289BB214010C66522C832FB70A24D013987FAEE88A99FAF33931FCA4BDDCC42010CD86420EDD27F6823B8A19377CB2A2C8649A1A89E7A135F9911D9B65BA540B470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:6b:74:84:68:89:a2:b3:36:68:63:8d:f3:
                    9b:21:2c:78:a6:75:48:5a:bd:bf:85:c7:91:17:6d:
                    e6:f2:46:34:b0:e8:1c:69:70:34:b7:9b:d7:10:bc:
                    c7:9a:cf:45:b9:99:52:8d:0e:22:7b:ce:0d:f1:c8:
                    9d:fd:ef:b8:db:96:cd:e3:d1:ea:fd:e6:9a:31:59:
                    1e:57:08:52:13:85:ff:65:dd:e0:f4:b5:7b:49:05:
                    ac:e5:19:7f:04:4a:90:a3:3c:49:a3:2d:da:ba:a9:
                    b2:43:cc:df:ca:1f:20:51:dc:84:be:78:c1:1d:db:
                    97:85:79:84:a7:1e:e2:35:75:40:80:6d:cc:3d:12:
                    ff:43:31:a2:f7:f1:aa:38:e1:9b:bc:e7:fa:06:b6:
                    29:4a:31:11:06:b1:67:66:a1:35:d4:31:15:91:1b:
                    ee:25:24:1a:42:52:8a:65:5c:3a:71:5d:93:45:9b:
                    37:55:9a:b7:f3:d3:f2:5d:6a:f0:d8:b7:28:9b:b2:
                    14:01:0c:66:52:2c:83:2f:b7:0a:24:d0:13:98:7f:
                    ae:e8:8a:99:fa:f3:39:31:fc:a4:bd:dc:c4:20:10:
                    cd:86:42:0e:dd:27:f6:82:3b:8a:19:37:7c:b2:a2:
                    c8:64:9a:1a:89:e7:a1:35:f9:91:1d:9b:65:ba:54:
                    0b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B9:7B:47:93:6A:62:DE:1F:81:D8:26:BD:FD:53:FF:DC:D9:FD:B2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130382e3131392e302f32342d3234203d3e20313331373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:a3:c1:45:c6:90:2a:1c:43:7e:2c:5d:7c:4d:17:25:7f:7e:
         37:20:f2:d3:fa:a1:05:1a:6f:ca:17:c3:70:48:d8:d8:52:dd:
         11:10:3e:62:5e:ef:b4:6e:ab:12:f3:83:f0:b1:01:fc:42:18:
         90:d1:f2:2e:60:1a:fb:93:ec:b0:c2:8d:0e:8e:6a:f2:f8:04:
         aa:a7:0c:0f:89:b0:ad:43:82:7c:fd:d9:79:58:87:68:e4:b3:
         68:30:95:e7:5d:80:5b:2c:fb:29:10:95:ee:50:48:ef:c9:87:
         a3:09:fc:a3:fd:1c:6d:cd:41:08:e9:91:2f:c9:77:f6:74:c1:
         a1:2c:b1:31:2e:57:21:a0:c8:5c:fb:08:fc:24:e1:c1:90:ed:
         01:4c:a1:bd:85:fe:7c:48:fc:25:32:37:e2:84:f3:46:51:c9:
         df:d0:23:b0:15:ef:53:0e:e4:a6:db:e9:c9:0d:4b:08:e6:4d:
         d8:df:6b:16:f8:fb:ec:f6:be:db:c2:2d:48:7b:6d:50:bf:13:
         47:7b:71:c3:96:01:19:85:90:fa:10:d7:b3:59:15:79:53:b1:
         2a:3f:23:e5:0c:ed:7b:d4:d8:d6:ea:16:9a:f5:02:49:01:96:
         da:41:05:1c:26:06:4b:7d:bb:76:d9:77:da:6c:82:57:20:6a:
         f1:6b:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:48 2023 by rpki-client on console-fra.rpki-client.org