Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134302e302f32322d3234203d3e20313331373336.roa
File:                     3131352e3137382e3134302e302f32322d3234203d3e20313331373336.roa (raw, json)
Hash identifier:          ahZp4XkmnXCKBlJ7qpoLVZMSIrhwM7iXVm8J9AglWDw=
Subject key identifier:   09:41:97:5F:B4:8D:CA:7F:BF:53:78:17:FB:C5:F1:E6:23:9D:90:CD
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       5657D3E9C3E7E1BA371428D8C40ACDD4A939A86F
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134302e302f32322d3234203d3e20313331373336.roa
Signing time:             Wed 16 Mar 2022 07:36:45 +0000
ROA not before:           Wed 16 Mar 2022 07:31:45 +0000
ROA not after:            Wed 15 Mar 2023 07:36:45 +0000
asID:                     131736
IP address blocks:        115.178.140.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:57:d3:e9:c3:e7:e1:ba:37:14:28:d8:c4:0a:cd:d4:a9:39:a8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Mar 16 07:31:45 2022 GMT
            Not After : Mar 15 07:36:45 2023 GMT
        Subject: CN=0941975FB48DCA7FBF537817FBC5F1E6239D90CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:1c:86:79:78:e4:32:4c:ab:15:29:d7:6d:
                    c1:21:c0:b5:5a:7b:2c:09:1f:b8:2e:b0:a0:7b:d2:
                    73:aa:b4:35:ac:78:3c:48:4a:02:68:87:2c:0f:8e:
                    17:a8:8b:1d:46:91:15:d1:e9:45:61:b9:a8:24:fc:
                    81:5d:04:b0:66:37:7e:df:24:68:19:87:ea:df:63:
                    86:f3:49:38:8f:ae:f2:0d:ca:44:99:c2:12:80:6f:
                    17:1c:cc:b2:85:16:e6:c3:68:69:b4:5b:5b:9c:e3:
                    57:b6:01:bb:38:87:49:ec:b5:dc:9d:b8:55:23:a9:
                    a8:c9:c3:8e:73:be:54:13:71:ec:b2:0e:fb:d9:ec:
                    fd:b4:3c:e8:4a:52:a0:ea:8a:a8:7a:df:6a:af:a5:
                    1b:07:57:65:da:7f:60:ec:3a:fb:8a:36:d8:54:05:
                    81:c6:fe:17:e9:a2:a3:26:cc:99:d4:09:87:88:27:
                    a0:dc:1d:f0:5f:1a:b5:c7:0e:18:30:35:51:14:23:
                    e9:f1:8b:82:88:47:e2:fe:ba:c9:e8:0b:3d:42:d1:
                    2c:26:b4:52:01:2c:2c:c6:f0:fa:2a:f9:30:93:ae:
                    cc:90:4f:01:3e:e1:4a:be:f4:a4:04:c2:4d:b7:22:
                    1e:e8:04:31:9b:24:11:df:6c:e5:1c:19:79:db:c3:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:41:97:5F:B4:8D:CA:7F:BF:53:78:17:FB:C5:F1:E6:23:9D:90:CD
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134302e302f32322d3234203d3e20313331373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:6d:14:e9:0c:1f:60:b8:ad:4d:ac:8c:3d:9d:10:96:fd:61:
         1a:02:7f:f7:20:fd:61:12:fe:06:78:26:77:e6:9b:61:5b:b0:
         49:aa:b7:fb:79:39:3c:ba:27:cd:6d:2a:70:b9:ca:27:b8:de:
         48:8e:44:39:9e:0a:c3:d8:47:ec:56:78:66:0f:ac:91:cf:84:
         ad:da:03:f2:27:d8:9c:cc:70:b8:c8:70:f4:26:e5:bb:53:2b:
         74:e6:a1:d1:d9:80:7f:cb:de:65:fe:78:ed:09:8d:ff:c4:b6:
         5d:f2:66:be:b2:83:99:46:e6:1d:83:c4:ce:b4:7b:4e:ce:f4:
         02:a6:31:a4:4c:f8:03:a3:a3:e0:95:58:c5:a6:e6:2e:93:81:
         cc:5e:d3:6a:18:ef:2b:15:db:b2:78:2e:75:b3:78:58:7b:83:
         94:25:94:22:37:2e:43:be:e1:40:90:60:2d:c0:3e:ee:fd:26:
         9a:4d:d9:5f:3d:f5:85:83:3c:05:fb:49:33:81:c7:85:d2:d7:
         99:3e:cf:d4:dc:0f:20:39:07:78:d7:b1:17:ae:10:52:17:a3:
         f7:6d:66:46:18:c9:f9:01:04:6a:68:ea:27:0e:5c:32:e9:0b:
         7b:4e:54:8c:3f:55:42:bc:31:ab:f2:32:99:95:f8:38:2f:91:
         ae:04:5e:13
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUVlfT6cPn4bo3FCjYxArN1Kk5qG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3
NjNDRjM2MTAeFw0yMjAzMTYwNzMxNDVaFw0yMzAzMTUwNzM2NDVaMDMxMTAvBgNV
BAMTKDA5NDE5NzVGQjQ4RENBN0ZCRjUzNzgxN0ZCQzVGMUU2MjM5RDkwQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywxyGeXjkMkyrFSnXbcEhwLVa
eywJH7gusKB70nOqtDWseDxISgJohywPjheoix1GkRXR6UVhuagk/IFdBLBmN37f
JGgZh+rfY4bzSTiPrvINykSZwhKAbxcczLKFFubDaGm0W1uc41e2Abs4h0nstdyd
uFUjqajJw45zvlQTceyyDvvZ7P20POhKUqDqiqh632qvpRsHV2Xaf2DsOvuKNthU
BYHG/hfpoqMmzJnUCYeIJ6DcHfBfGrXHDhgwNVEUI+nxi4KIR+L+usnoCz1C0Swm
tFIBLCzG8Poq+TCTrsyQTwE+4Uq+9KQEwk23Ih7oBDGbJBHfbOUcGXnbw3C5AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUCUGXX7SNyn+/U3gX+8Xx5iOdkM0wHwYDVR0j
BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG
QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND
RjM2MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTM0MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzEzNzMzMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJzsowwDQYJ
KoZIhvcNAQELBQADggEBAKhtFOkMH2C4rU2sjD2dEJb9YRoCf/cg/WES/gZ4Jnfm
m2FbsEmqt/t5OTy6J81tKnC5yie43kiORDmeCsPYR+xWeGYPrJHPhK3aA/In2JzM
cLjIcPQm5btTK3TmodHZgH/L3mX+eO0Jjf/Etl3yZr6yg5lG5h2DxM60e07O9AKm
MaRM+AOjo+CVWMWm5i6Tgcxe02oY7ysV27J4LnWzeFh7g5QllCI3LkO+4UCQYC3A
Pu79JppN2V899YWDPAX7STOBx4XS15k+z9TcDyA5B3jXsReuEFIXo/dtZkYYyfkB
BGpo6icOXDLpC3tOVIw/VUK8MavyMpmV+Dgvka4EXhM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org