Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e32302e302f32322d3234203d3e203633383539.roa
File: 3130332e3132312e32302e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier: g3EMWYUEL8ZhLEP8zmXVtnfSuGDlGgz1WqfcEq+lBcU=
Subject key identifier: 17:15:00:17:48:56:14:A0:FE:0C:1C:D9:70:63:EB:D9:3C:A6:93:60
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 366AE8CB8D3B20CBC18AC5F0B65794DF167DE501
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e32302e302f32322d3234203d3e203633383539.roa
Signing time: Wed 10 Nov 2021 07:00:01 +0000
ROA not before: Wed 10 Nov 2021 06:55:01 +0000
ROA not after: Thu 10 Nov 2022 07:00:01 +0000
asID: 63859
IP address blocks: 103.121.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:6a:e8:cb:8d:3b:20:cb:c1:8a:c5:f0:b6:57:94:df:16:7d:e5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 10 06:55:01 2021 GMT
Not After : Nov 10 07:00:01 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:01:7d:34:f7:0b:df:0b:f1:e6:26:51:db:
07:b8:9f:4e:92:ee:a4:32:e5:02:65:30:29:ff:a7:
d1:8b:2b:6e:52:73:17:07:24:03:f0:bf:34:e2:b2:
b5:b7:43:47:40:62:00:59:ba:25:48:b2:b0:77:bd:
5a:f2:df:68:81:f0:40:03:28:3f:b3:28:1c:c0:b7:
88:61:cf:52:77:49:83:04:4d:15:c5:24:63:02:ba:
89:f0:cf:55:cd:b0:a6:a1:8d:c8:41:df:db:0d:c3:
a4:3f:c6:72:ff:61:be:8b:06:e5:fe:d8:71:68:df:
8e:21:3b:42:64:98:0b:b2:d8:9d:a8:9a:5a:6e:f4:
38:c6:f3:3d:25:48:b3:f5:81:60:21:fd:bb:a3:f5:
b8:9e:83:68:4c:77:d3:c8:c1:ea:d7:11:36:9a:41:
18:9c:f4:98:7f:97:c1:c9:03:a0:f4:43:47:fc:46:
91:64:e9:cb:02:d2:a2:fb:2a:4e:03:46:e1:36:c0:
6c:66:91:c1:03:49:35:80:80:27:3c:43:d9:b0:68:
df:4b:f3:72:99:04:20:c5:61:97:31:a6:d1:6c:04:
1f:e0:15:b6:cc:fc:2e:3a:7e:57:83:c0:f8:8f:ac:
30:9b:05:e2:99:58:6b:54:ee:6b:f8:28:80:3f:54:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:00:17:48:56:14:A0:FE:0C:1C:D9:70:63:EB:D9:3C:A6:93:60
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e32302e302f32322d3234203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.20.0/22
Signature Algorithm: sha256WithRSAEncryption
89:73:59:e6:b2:60:9e:25:2f:4a:2c:f4:82:f4:b6:31:f4:2e:
22:eb:12:4c:34:98:a9:62:75:45:4b:53:4e:29:81:b2:0f:c5:
78:bc:2c:16:1e:42:f4:f1:c3:30:81:35:ae:a7:5a:25:d3:fe:
7b:62:da:86:8d:15:c2:fd:75:59:a9:d2:33:74:fd:0e:13:56:
a7:72:3f:ee:6f:d9:7a:bf:a3:f6:36:89:6d:f9:62:95:2d:0b:
bd:b2:04:be:db:d3:c8:fc:e4:56:85:27:b5:e3:bd:19:17:d9:
04:c8:94:49:58:c1:66:64:d9:e4:86:a3:78:cc:0b:36:27:86:
b7:f6:38:f9:9e:39:f5:de:54:48:87:b5:3a:61:aa:eb:1e:b1:
86:ae:91:83:a3:92:fb:98:d5:d6:11:21:15:9c:b4:48:ed:14:
d3:66:32:69:72:0d:85:29:06:86:12:d2:c7:41:24:d4:f0:05:
c3:22:62:f9:29:4a:aa:60:76:d2:5f:8f:ae:85:b8:52:89:d5:
6c:ba:db:c5:a9:bc:90:85:5e:99:e0:b1:0f:62:bf:86:0c:b6:
2f:76:40:52:c2:90:a2:7d:4b:61:0c:4c:2c:43:f7:89:2e:ef:
e6:4e:ee:54:ec:71:70:8a:f4:f2:7e:e0:81:82:68:0f:81:6e:
4f:23:1f:be
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUNmroy407IMvBisXwtleU3xZ95QEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExMDA2NTUwMVoX
DTIyMTExMDA3MDAwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDQkQ2MDE3RDM0RjcwQkRGMEJGMUU2MjY1MURCMDdCODlGNEU5MkVFQTQz
MkU1MDI2NTMwMjlGRkE3RDE4QjJCNkU1MjczMTcwNzI0MDNGMEJGMzRFMkIyQjVC
NzQzNDc0MDYyMDA1OUJBMjU0OEIyQjA3N0JENUFGMkRGNjg4MUYwNDAwMzI4M0ZC
MzI4MUNDMEI3ODg2MUNGNTI3NzQ5ODMwNDREMTVDNTI0NjMwMkJBODlGMENGNTVD
REIwQTZBMThEQzg0MURGREIwREMzQTQzRkM2NzJGRjYxQkU4QjA2RTVGRUQ4NzE2
OERGOEUyMTNCNDI2NDk4MEJCMkQ4OURBODlBNUE2RUY0MzhDNkYzM0QyNTQ4QjNG
NTgxNjAyMUZEQkJBM0Y1Qjg5RTgzNjg0Qzc3RDNDOEMxRUFENzExMzY5QTQxMTg5
Q0Y0OTg3Rjk3QzFDOTAzQTBGNDQzNDdGQzQ2OTE2NEU5Q0IwMkQyQTJGQjJBNEUw
MzQ2RTEzNkMwNkM2NjkxQzEwMzQ5MzU4MDgwMjczQzQzRDlCMDY4REY0QkYzNzI5
OTA0MjBDNTYxOTczMUE2RDE2QzA0MUZFMDE1QjZDQ0ZDMkUzQTdFNTc4M0MwRjg4
RkFDMzA5QjA1RTI5OTU4NkI1NEVFNkJGODI4ODAzRjU0MzY4RDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1gF9NPcL3wvx5iZR2we4
n06S7qQy5QJlMCn/p9GLK25ScxcHJAPwvzTisrW3Q0dAYgBZuiVIsrB3vVry32iB
8EADKD+zKBzAt4hhz1J3SYMETRXFJGMCuonwz1XNsKahjchB39sNw6Q/xnL/Yb6L
BuX+2HFo344hO0JkmAuy2J2omlpu9DjG8z0lSLP1gWAh/buj9bieg2hMd9PIwerX
ETaaQRic9Jh/l8HJA6D0Q0f8RpFk6csC0qL7Kk4DRuE2wGxmkcEDSTWAgCc8Q9mw
aN9L83KZBCDFYZcxptFsBB/gFbbM/C46fleDwPiPrDCbBeKZWGtU7mv4KIA/VDaN
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUFxUAF0hWFKD+DBzZcGPr2Tymk2AwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMjMxMmUzMjMwMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzYzMzM4MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmd5FDANBgkqhkiG
9w0BAQsFAAOCAQEAiXNZ5rJgniUvSiz0gvS2MfQuIusSTDSYqWJ1RUtTTimBsg/F
eLwsFh5C9PHDMIE1rqdaJdP+e2Laho0Vwv11WanSM3T9DhNWp3I/7m/Zer+j9jaJ
bflilS0LvbIEvtvTyPzkVoUnteO9GRfZBMiUSVjBZmTZ5IajeMwLNieGt/Y4+Z45
9d5USIe1OmGq6x6xhq6Rg6OS+5jV1hEhFZy0SO0U02YyaXINhSkGhhLSx0Ek1PAF
wyJi+SlKqmB20l+ProW4UonVbLrbxam8kIVemeCxD2K/hgy2L3ZAUsKQon1LYQxM
LEP3iS7v5k7uVOxxcIr08n7ggYJoD4FuTyMfvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org