Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134382e302f32332d3233203d3e20313530393139.roa
File:                     3130332e39312e3134382e302f32332d3233203d3e20313530393139.roa (raw, json)
Hash identifier:          Po5D47/TyJIIuazbmXWi4LcPDo52vGJo52Do8jA2djs=
Subject key identifier:   5B:67:64:6A:35:11:52:CA:0F:66:64:4B:4A:DE:B2:C8:33:F9:1B:A0
Certificate issuer:       /CN=781285AE1A8C595D354913D0B93F6982FCDFD898
Certificate serial:       4D94C2A6C1046D3B664FDE95A58F1A3FDD632104
Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134382e302f32332d3233203d3e20313530393139.roa
Signing time:             Wed 08 Mar 2023 07:39:35 +0000
ROA not before:           Wed 08 Mar 2023 07:34:35 +0000
ROA not after:            Wed 06 Mar 2024 07:39:35 +0000
asID:                     150919
IP address blocks:        103.91.148.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:94:c2:a6:c1:04:6d:3b:66:4f:de:95:a5:8f:1a:3f:dd:63:21:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898
        Validity
            Not Before: Mar  8 07:34:35 2023 GMT
            Not After : Mar  6 07:39:35 2024 GMT
        Subject: CN=5B67646A351152CA0F66644B4ADEB2C833F91BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:a2:53:e8:00:30:2c:23:db:45:d3:36:b8:
                    e6:1f:01:d8:84:f3:29:90:26:e1:11:9e:2e:5f:61:
                    1c:79:cc:c5:58:23:e1:6b:f6:8a:18:4c:d5:10:ea:
                    44:3f:9f:67:76:4f:b2:79:17:8d:a6:98:1e:f2:74:
                    85:27:9f:e9:44:b4:61:65:67:5d:c4:22:ba:82:9f:
                    a6:6e:2d:13:4f:4e:b7:7f:28:f3:58:0e:fd:8f:b9:
                    7b:d4:29:8b:b9:5f:e8:e9:b5:d9:10:87:c1:dd:c0:
                    1c:91:93:8a:87:37:e1:13:2f:7c:1b:21:cb:72:e1:
                    18:eb:5b:c4:7a:2c:a1:d3:f2:98:a0:7c:ef:0e:fa:
                    fd:28:3c:2e:5c:97:e8:52:12:37:79:9b:ea:62:2a:
                    71:d9:2b:60:94:16:77:f3:e7:c8:53:95:0f:e8:ed:
                    e6:a5:e5:d5:18:e8:1a:94:43:74:1f:77:85:f9:b8:
                    6a:11:22:02:65:1c:d9:df:0c:79:1b:24:c1:ea:d6:
                    02:39:59:cd:0f:aa:e7:29:a2:04:45:59:d1:b1:ca:
                    a4:78:94:93:ba:5d:da:04:9e:a4:dd:d4:0f:78:54:
                    9c:3b:3f:46:4c:3b:d7:ba:6f:42:c9:7d:3b:01:ee:
                    ef:8f:56:2f:bd:93:fc:3d:47:56:60:14:9e:3c:17:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:67:64:6A:35:11:52:CA:0F:66:64:4B:4A:DE:B2:C8:33:F9:1B:A0
            X509v3 Authority Key Identifier:
                keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134382e302f32332d3233203d3e20313530393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:fc:40:bf:cd:9d:d1:69:4f:d0:df:51:7a:9e:cf:a3:a6:79:
         69:53:a1:e0:30:67:80:e4:a0:c6:f4:fd:58:82:33:3b:35:72:
         32:0b:6b:02:12:26:02:be:10:9a:c6:5f:65:07:fa:d0:e3:8c:
         2d:19:3a:15:11:59:16:26:6e:89:62:f4:a0:25:18:28:e3:bf:
         fc:47:9a:f7:36:3b:7b:3b:fb:42:b9:dc:d8:87:63:5d:69:3e:
         61:6d:48:d7:5d:26:d7:0c:26:ec:6c:84:12:d5:29:93:2c:20:
         fa:d9:b0:2c:a3:80:9c:c9:b6:19:96:59:3b:37:25:77:82:bf:
         c0:4e:95:0b:e4:32:a1:28:08:66:b3:05:f5:96:76:05:ab:46:
         3d:46:31:f2:56:3a:43:ca:ce:11:72:ee:b3:5a:d3:7b:24:5a:
         06:7d:38:24:86:a7:b4:5b:36:96:5f:73:c4:dd:7f:7d:9d:0c:
         6a:e1:18:06:2d:10:7b:86:2a:04:90:33:0c:23:83:ca:9d:d5:
         d2:ae:8a:05:5b:29:e3:34:2f:98:01:13:08:1b:a0:9f:f2:61:
         a3:50:fd:3f:77:c0:43:3c:68:9e:e0:64:d3:7e:06:52:0b:3a:
         66:ef:73:0f:28:98:fb:82:85:10:7c:13:4a:57:a0:71:e7:ab:
         98:ce:f1:80
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTZTCpsEEbTtmT96VpY8aP91jIQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJG
Q0RGRDg5ODAeFw0yMzAzMDgwNzM0MzVaFw0yNDAzMDYwNzM5MzVaMDMxMTAvBgNV
BAMTKDVCNjc2NDZBMzUxMTUyQ0EwRjY2NjQ0QjRBREVCMkM4MzNGOTFCQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ/6JT6AAwLCPbRdM2uOYfAdiE
8ymQJuERni5fYRx5zMVYI+Fr9ooYTNUQ6kQ/n2d2T7J5F42mmB7ydIUnn+lEtGFl
Z13EIrqCn6ZuLRNPTrd/KPNYDv2PuXvUKYu5X+jptdkQh8HdwByRk4qHN+ETL3wb
Icty4RjrW8R6LKHT8pigfO8O+v0oPC5cl+hSEjd5m+piKnHZK2CUFnfz58hTlQ/o
7eal5dUY6BqUQ3Qfd4X5uGoRIgJlHNnfDHkbJMHq1gI5Wc0PqucpogRFWdGxyqR4
lJO6XdoEnqTd1A94VJw7P0ZMO9e6b0LJfTsB7u+PVi+9k/w9R1ZgFJ48FzjHAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUW2dkajURUsoPZmRLSt6yyDP5G6AwHwYDVR0j
BBgwFoAUeBKFrhqMWV01SRPQuT9pgvzf2JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
Mjc1ZmQ3Ni1lOGVlLTQ2YzgtOWQ4Mi1iNzM1YjlmNzA0MzEvMC83ODEyODVBRTFB
OEM1OTVEMzU0OTEzRDBCOTNGNjk4MkZDREZEODk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJGQ0RG
RDg5OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyNzVmZDc2LWU4ZWUtNDZjOC05
ZDgyLWI3MzViOWY3MDQzMS8wLzMxMzAzMzJlMzkzMTJlMzEzNDM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzkzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1uUMA0GCSqG
SIb3DQEBCwUAA4IBAQAJ/EC/zZ3RaU/Q31F6ns+jpnlpU6HgMGeA5KDG9P1YgjM7
NXIyC2sCEiYCvhCaxl9lB/rQ44wtGToVEVkWJm6JYvSgJRgo47/8R5r3Njt7O/tC
udzYh2NdaT5hbUjXXSbXDCbsbIQS1SmTLCD62bAso4CcybYZllk7NyV3gr/ATpUL
5DKhKAhmswX1lnYFq0Y9RjHyVjpDys4Rcu6zWtN7JFoGfTgkhqe0WzaWX3PE3X99
nQxq4RgGLRB7hioEkDMMI4PKndXSrooFWynjNC+YARMIG6Cf8mGjUP0/d8BDPGie
4GTTfgZSCzpm73MPKJj7goUQfBNKV6Bx56uYzvGA
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org