Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e3139362e302f32322d3234203d3e203538343935.roa
File:                     3130332e3132312e3139362e302f32322d3234203d3e203538343935.roa (raw, json)
Hash identifier:          T8xkyEzh5Pq/0+D+u7Qodq4baTJ798KnfB069ciSJbo=
Subject key identifier:   1D:DC:E4:5C:D1:DA:15:21:20:8D:31:0C:DD:F7:0A:68:06:83:1B:7F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       60B4D371B19A2616F02F639D6FCEE5F407DAFE77
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e3139362e302f32322d3234203d3e203538343935.roa
Signing time:             Mon 03 May 2021 04:30:35 +0000
ROA not before:           Mon 03 May 2021 04:25:35 +0000
ROA not after:            Tue 03 May 2022 04:30:35 +0000
asID:                     58495
IP address blocks:        103.121.196.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b4:d3:71:b1:9a:26:16:f0:2f:63:9d:6f:ce:e5:f4:07:da:fe:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  3 04:25:35 2021 GMT
            Not After : May  3 04:30:35 2022 GMT
        Subject: CN=3082010A0282010100D4A5EE936C7527A9C4EF5D09096BE5E19D5E23F48225DDBD685A0A883A1A37AE4D30827B11C48858621EDB852296C5BC747DBF85407B26F8FE8F5FA6DF4670F04598366A02545A237CBDA046DDB0FF46343B6EDAF538040AC1AFC6837F939894E8DE4CB239CD54A15465DF6D21B0281ED821E7E6AEAF609F0B69BBABD7D6D8034162EFF1EAA3C57818CD5E14342176D8DC91ED9BB1C6F2A478D15FDABFF41E8D8B72F64C80BF61EC17BEF24EFE3E1C365E80BF2E5B41D5317288B69896F55FE11675A2946735BA641F85872528B3B3F4C87F1235F75A847C25E242C4BCFDCEEEA4C2374B4EFB167B50C45944F48CBBA0C7EE9AC7024DCB73D9DDA8405EF77DEB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:ee:93:6c:75:27:a9:c4:ef:5d:09:09:6b:
                    e5:e1:9d:5e:23:f4:82:25:dd:bd:68:5a:0a:88:3a:
                    1a:37:ae:4d:30:82:7b:11:c4:88:58:62:1e:db:85:
                    22:96:c5:bc:74:7d:bf:85:40:7b:26:f8:fe:8f:5f:
                    a6:df:46:70:f0:45:98:36:6a:02:54:5a:23:7c:bd:
                    a0:46:dd:b0:ff:46:34:3b:6e:da:f5:38:04:0a:c1:
                    af:c6:83:7f:93:98:94:e8:de:4c:b2:39:cd:54:a1:
                    54:65:df:6d:21:b0:28:1e:d8:21:e7:e6:ae:af:60:
                    9f:0b:69:bb:ab:d7:d6:d8:03:41:62:ef:f1:ea:a3:
                    c5:78:18:cd:5e:14:34:21:76:d8:dc:91:ed:9b:b1:
                    c6:f2:a4:78:d1:5f:da:bf:f4:1e:8d:8b:72:f6:4c:
                    80:bf:61:ec:17:be:f2:4e:fe:3e:1c:36:5e:80:bf:
                    2e:5b:41:d5:31:72:88:b6:98:96:f5:5f:e1:16:75:
                    a2:94:67:35:ba:64:1f:85:87:25:28:b3:b3:f4:c8:
                    7f:12:35:f7:5a:84:7c:25:e2:42:c4:bc:fd:ce:ee:
                    a4:c2:37:4b:4e:fb:16:7b:50:c4:59:44:f4:8c:bb:
                    a0:c7:ee:9a:c7:02:4d:cb:73:d9:dd:a8:40:5e:f7:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DC:E4:5C:D1:DA:15:21:20:8D:31:0C:DD:F7:0A:68:06:83:1B:7F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e3139362e302f32322d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:46:e3:cf:bd:5c:86:fa:6d:fb:54:6a:89:4d:fb:6f:31:20:
         7d:54:05:86:05:15:9b:42:e8:36:aa:16:cf:b1:92:f5:dc:cc:
         d7:31:b9:9c:28:e4:b4:5e:54:b3:43:de:50:83:89:b9:f6:40:
         c2:12:4a:90:d5:5a:be:91:3c:f3:4e:cf:a9:82:fd:c9:ca:dd:
         93:d9:f1:5e:81:aa:e3:03:88:0e:2a:30:9a:e2:36:1c:3f:14:
         90:73:ae:12:54:ae:bd:83:09:7d:88:aa:76:8c:80:eb:e5:be:
         e5:91:8a:c6:2b:c8:2b:de:92:9e:f9:b8:3a:10:40:6e:43:21:
         ab:ee:05:87:20:2c:69:03:16:ee:69:aa:6f:fb:d7:06:c1:f5:
         b6:7d:65:88:85:75:77:f3:fb:c1:9a:45:94:83:ca:88:8a:f0:
         36:f8:82:11:aa:60:8c:0c:00:6e:bd:d5:23:79:00:a0:82:00:
         88:4e:50:fd:22:c3:a6:ce:0c:2e:8f:1b:e5:66:7b:0c:dd:ac:
         ae:e4:58:79:11:05:c5:b3:08:c0:bf:b6:c4:a7:ee:1c:53:6f:
         28:71:8c:8b:43:9d:00:5e:fc:17:30:2f:4c:c2:53:db:2f:af:
         81:c0:ed:62:b9:d7:8c:3b:c5:86:13:69:d5:d6:e5:75:8c:e3:
         26:e4:7c:ea
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUYLTTcbGaJhbwL2Odb87l9Afa/ncwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDUwMzA0MjUzNVoX
DTIyMDUwMzA0MzAzNVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBENEE1RUU5MzZDNzUyN0E5QzRFRjVEMDkwOTZCRTVFMTlENUUyM0Y0ODIy
NUREQkQ2ODVBMEE4ODNBMUEzN0FFNEQzMDgyN0IxMUM0ODg1ODYyMUVEQjg1MjI5
NkM1QkM3NDdEQkY4NTQwN0IyNkY4RkU4RjVGQTZERjQ2NzBGMDQ1OTgzNjZBMDI1
NDVBMjM3Q0JEQTA0NkREQjBGRjQ2MzQzQjZFREFGNTM4MDQwQUMxQUZDNjgzN0Y5
Mzk4OTRFOERFNENCMjM5Q0Q1NEExNTQ2NURGNkQyMUIwMjgxRUQ4MjFFN0U2QUVB
RjYwOUYwQjY5QkJBQkQ3RDZEODAzNDE2MkVGRjFFQUEzQzU3ODE4Q0Q1RTE0MzQy
MTc2RDhEQzkxRUQ5QkIxQzZGMkE0NzhEMTVGREFCRkY0MUU4RDhCNzJGNjRDODBC
RjYxRUMxN0JFRjI0RUZFM0UxQzM2NUU4MEJGMkU1QjQxRDUzMTcyODhCNjk4OTZG
NTVGRTExNjc1QTI5NDY3MzVCQTY0MUY4NTg3MjUyOEIzQjNGNEM4N0YxMjM1Rjc1
QTg0N0MyNUUyNDJDNEJDRkRDRUVFQTRDMjM3NEI0RUZCMTY3QjUwQzQ1OTQ0RjQ4
Q0JCQTBDN0VFOUFDNzAyNERDQjczRDlEREE4NDA1RUY3N0RFQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpe6TbHUnqcTvXQkJa+Xh
nV4j9IIl3b1oWgqIOho3rk0wgnsRxIhYYh7bhSKWxbx0fb+FQHsm+P6PX6bfRnDw
RZg2agJUWiN8vaBG3bD/RjQ7btr1OAQKwa/Gg3+TmJTo3kyyOc1UoVRl320hsCge
2CHn5q6vYJ8Labur19bYA0Fi7/Hqo8V4GM1eFDQhdtjcke2bscbypHjRX9q/9B6N
i3L2TIC/YewXvvJO/j4cNl6Avy5bQdUxcoi2mJb1X+EWdaKUZzW6ZB+FhyUos7P0
yH8SNfdahHwl4kLEvP3O7qTCN0tO+xZ7UMRZRPSMu6DH7prHAk3Lc9ndqEBe933r
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUHdzkXNHaFSEgjTEM3fcKaAaDG38wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMjMxMmUzMTM5MzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTM4MzQzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3nEMA0GCSqG
SIb3DQEBCwUAA4IBAQBzRuPPvVyG+m37VGqJTftvMSB9VAWGBRWbQug2qhbPsZL1
3MzXMbmcKOS0XlSzQ95Qg4m59kDCEkqQ1Vq+kTzzTs+pgv3Jyt2T2fFegarjA4gO
KjCa4jYcPxSQc64SVK69gwl9iKp2jIDr5b7lkYrGK8gr3pKe+bg6EEBuQyGr7gWH
ICxpAxbuaapv+9cGwfW2fWWIhXV38/vBmkWUg8qIivA2+IIRqmCMDABuvdUjeQCg
ggCITlD9IsOmzgwujxvlZnsM3ayu5Fh5EQXFswjAv7bEp+4cU28ocYyLQ50AXvwX
MC9MwlPbL6+BwO1iudeMO8WGE2nV1uV1jOMm5Hzq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org