Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63488.roa
File:                     AS63488.roa (raw, json)
Hash identifier:          fq6eHyoPzkgf3wLtP2vSMt0YrQLaWsKO5M7BGDvl9m8=
Subject key identifier:   AB:59:24:2D:3F:6D:35:59:12:0A:EF:5E:2F:FA:FC:93:44:43:70:A7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       23100222A4D4DE0C80A6B17CA144F29EF3B6B5D0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63488.roa
Signing time:             Tue 08 Mar 2022 02:15:19 +0000
ROA not before:           Tue 08 Mar 2022 02:10:19 +0000
ROA not after:            Tue 07 Mar 2023 02:15:19 +0000
asID:                     63488
IP address blocks:        103.131.216.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:10:02:22:a4:d4:de:0c:80:a6:b1:7c:a1:44:f2:9e:f3:b6:b5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  8 02:10:19 2022 GMT
            Not After : Mar  7 02:15:19 2023 GMT
        Subject: CN=AB59242D3F6D3559120AEF5E2FFAFC93444370A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:6d:56:4d:e5:2a:12:41:95:1c:be:b6:ca:
                    03:97:e0:9a:c2:a3:33:98:a9:15:e0:9e:26:cb:39:
                    49:1a:43:77:d1:48:cc:c4:c9:81:a3:88:e2:ef:b7:
                    8b:01:b8:42:c7:81:7b:5c:12:ca:45:ae:ff:9d:28:
                    de:f8:ba:dc:0a:89:ba:f4:ee:11:ef:0e:4b:af:32:
                    aa:7f:33:60:55:98:3b:a4:7b:f1:9c:f6:62:84:ce:
                    8d:b3:8a:80:07:47:73:88:7b:40:7b:df:da:7d:2a:
                    f5:b7:1b:70:12:df:d9:cb:ec:29:7f:1e:09:e8:b9:
                    2b:32:81:17:c4:b8:85:02:62:c4:00:49:40:04:15:
                    c8:f5:d1:fc:f7:0d:78:e7:c5:ef:2d:22:ab:a1:7f:
                    f6:00:77:63:6a:b2:a1:c8:ea:d2:19:a9:0a:ab:8a:
                    ce:7c:cc:16:a3:dd:79:b1:d3:55:01:e5:d4:59:95:
                    24:df:07:bd:9c:4f:19:26:ba:f9:68:b7:29:c5:86:
                    44:8b:ef:a1:c6:68:a6:4a:c3:11:39:f1:4f:43:ea:
                    87:be:99:95:26:ac:5e:e0:b2:a4:48:b7:4f:9a:6d:
                    86:8d:0e:6b:b1:7c:f5:67:13:ac:d1:29:91:24:0e:
                    d5:7d:4f:a5:4f:8e:f8:cd:91:08:75:3e:fe:32:4d:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:59:24:2D:3F:6D:35:59:12:0A:EF:5E:2F:FA:FC:93:44:43:70:A7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63488.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:ab:27:7a:b6:56:2e:25:98:b1:3b:f7:41:df:61:32:a0:bf:
         7d:6f:96:1c:52:dd:6a:35:36:32:b4:39:85:af:21:be:fd:5b:
         c0:4a:12:64:05:f9:19:d7:b0:72:b2:f8:78:af:b7:3d:65:09:
         f3:86:98:88:52:1f:8b:4b:f2:13:ff:ec:94:91:49:a7:87:44:
         c3:a4:24:6a:6e:c3:26:49:73:1c:73:61:f1:3c:a6:33:42:a7:
         ae:7a:33:8f:f8:14:7b:90:63:07:0f:9c:7e:dd:aa:d2:56:47:
         51:b8:e9:81:56:89:73:ec:75:f3:c2:15:3d:50:f1:0b:e5:95:
         17:fe:6b:60:10:97:ac:cf:d0:04:3c:2a:9d:38:e7:cf:fa:04:
         48:61:7e:89:48:c9:91:c1:07:53:e7:e4:e7:9b:b8:51:d9:7a:
         35:d2:b4:11:67:11:67:24:74:54:b5:aa:dc:97:6b:22:1c:93:
         3d:61:51:95:34:a4:b3:be:ef:7f:17:29:75:85:a9:1c:6d:20:
         c6:9b:7c:3e:de:ad:0d:67:fd:ea:d7:e3:04:c8:a9:63:da:54:
         45:b3:ba:61:20:55:20:fd:1e:d3:ad:0c:ac:35:1c:cf:cb:1f:
         66:66:e6:0f:c5:f0:26:e4:4c:4e:aa:e4:40:8f:3b:03:b3:6c:
         9c:ed:4a:4c
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIUIxACIqTU3gyAprF8oUTynvO2tdAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwODAyMTAxOVoX
DTIzMDMwNzAyMTUxOVowMzExMC8GA1UEAxMoQUI1OTI0MkQzRjZEMzU1OTEyMEFF
RjVFMkZGQUZDOTM0NDQzNzBBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/5bVZN5SoSQZUcvrbKA5fgmsKjM5ipFeCeJss5SRpDd9FIzMTJgaOI4u+3
iwG4QseBe1wSykWu/50o3vi63AqJuvTuEe8OS68yqn8zYFWYO6R78Zz2YoTOjbOK
gAdHc4h7QHvf2n0q9bcbcBLf2cvsKX8eCei5KzKBF8S4hQJixABJQAQVyPXR/PcN
eOfF7y0iq6F/9gB3Y2qyocjq0hmpCquKznzMFqPdebHTVQHl1FmVJN8HvZxPGSa6
+Wi3KcWGRIvvocZopkrDETnxT0Pqh76ZlSasXuCypEi3T5ptho0Oa7F89WcTrNEp
kSQO1X1PpU+O+M2RCHU+/jJNyIUCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSrWSQt
P201WRIK714v+vyTRENwpzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzYzNDg4LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ4PYMA0GCSqGSIb3DQEBCwUAA4IBAQAyqyd6tlYuJZixO/dB32Ey
oL99b5YcUt1qNTYytDmFryG+/VvAShJkBfkZ17Bysvh4r7c9ZQnzhpiIUh+LS/IT
/+yUkUmnh0TDpCRqbsMmSXMcc2HxPKYzQqeuejOP+BR7kGMHD5x+3arSVkdRuOmB
Volz7HXzwhU9UPEL5ZUX/mtgEJesz9AEPCqdOOfP+gRIYX6JSMmRwQdT5+Tnm7hR
2Xo10rQRZxFnJHRUtarcl2siHJM9YVGVNKSzvu9/Fyl1hakcbSDGm3w+3q0NZ/3q
1+MEyKlj2lRFs7phIFUg/R7TrQysNRzPyx9mZuYPxfAm5ExOquRAjzsDs2yc7UpM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org