Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e3235312e302f32342d3234203d3e2030.roa
File:                     3130332e3132312e3235312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          AGlKZDbHFVXoeqDs/mXdQJCpCFv2UxxhNDSnJRIxck8=
Subject key identifier:   ED:CC:09:11:03:D4:F4:DC:E5:AC:52:A0:7E:8E:79:F2:A0:CF:42:9B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       604EF7ACCDD90B53F668A05B27B44F6698D95A83
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e3235312e302f32342d3234203d3e2030.roa
Signing time:             Wed 02 Mar 2022 08:29:48 +0000
ROA not before:           Wed 02 Mar 2022 08:24:48 +0000
ROA not after:            Thu 02 Mar 2023 08:29:48 +0000
asID:                     0
IP address blocks:        103.121.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4e:f7:ac:cd:d9:0b:53:f6:68:a0:5b:27:b4:4f:66:98:d9:5a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  2 08:24:48 2022 GMT
            Not After : Mar  2 08:29:48 2023 GMT
        Subject: CN=3082010A02820101009AFD9541CB7DDABC279320B5221F2904906B3C22C744092DC29BED69A520B4A0978EFCA29FED667BA238F2908A8B7BE2DEE22827AC7105E89557928241F4418397E622CC0BC9D128020D7CE5A1FEE4BF3FA506B91665D6073BA8BC6E66108332E345FC8553FC53E0241CD07D504705D24C8410AC1F357E6ED339C7AAA4BA3B4D22F4B0EF1B5A89C6E76DE989C977822B4A1AA2EE46B8B00EDE993C7F219E6B26D72E1C38F100E90B1F794E3EAF0B4BFC32873FA986F68AFBF2797335C1BF9A0685E89D187ABA33F4BC01D5312F558907343560F433C022F23708B3ADE529A76A16A7B2DF8A604DBCD0886DEA4CE7DF9854625A880B7E2279938EDC6C0045E67B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:95:41:cb:7d:da:bc:27:93:20:b5:22:1f:
                    29:04:90:6b:3c:22:c7:44:09:2d:c2:9b:ed:69:a5:
                    20:b4:a0:97:8e:fc:a2:9f:ed:66:7b:a2:38:f2:90:
                    8a:8b:7b:e2:de:e2:28:27:ac:71:05:e8:95:57:92:
                    82:41:f4:41:83:97:e6:22:cc:0b:c9:d1:28:02:0d:
                    7c:e5:a1:fe:e4:bf:3f:a5:06:b9:16:65:d6:07:3b:
                    a8:bc:6e:66:10:83:32:e3:45:fc:85:53:fc:53:e0:
                    24:1c:d0:7d:50:47:05:d2:4c:84:10:ac:1f:35:7e:
                    6e:d3:39:c7:aa:a4:ba:3b:4d:22:f4:b0:ef:1b:5a:
                    89:c6:e7:6d:e9:89:c9:77:82:2b:4a:1a:a2:ee:46:
                    b8:b0:0e:de:99:3c:7f:21:9e:6b:26:d7:2e:1c:38:
                    f1:00:e9:0b:1f:79:4e:3e:af:0b:4b:fc:32:87:3f:
                    a9:86:f6:8a:fb:f2:79:73:35:c1:bf:9a:06:85:e8:
                    9d:18:7a:ba:33:f4:bc:01:d5:31:2f:55:89:07:34:
                    35:60:f4:33:c0:22:f2:37:08:b3:ad:e5:29:a7:6a:
                    16:a7:b2:df:8a:60:4d:bc:d0:88:6d:ea:4c:e7:df:
                    98:54:62:5a:88:0b:7e:22:79:93:8e:dc:6c:00:45:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CC:09:11:03:D4:F4:DC:E5:AC:52:A0:7E:8E:79:F2:A0:CF:42:9B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e3235312e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:b0:d9:60:ad:e8:42:ce:c6:73:5a:0b:d0:c7:78:b3:6a:c5:
         fc:50:d9:ee:46:88:46:28:fc:8d:e8:de:82:50:76:7d:75:3b:
         54:60:c3:26:eb:86:5b:a7:39:2a:3e:1e:a3:9b:82:b2:79:90:
         bf:57:58:ca:f5:85:12:cf:56:d8:dc:14:77:f7:5e:75:fa:02:
         6e:74:c2:12:de:66:f3:3c:8e:f7:5b:9c:50:5e:69:08:cb:34:
         16:68:64:d8:c4:09:46:c3:ca:c3:d2:9c:50:b8:7c:30:e4:86:
         a7:58:3a:b9:d0:0c:81:22:4e:df:dc:1f:9a:30:b6:e6:ee:7e:
         f1:77:41:aa:53:52:0a:07:2f:74:0e:81:9a:ab:3d:33:df:0d:
         bb:0c:dd:42:0d:c3:5f:81:c5:cb:76:68:4c:32:19:e3:9f:2b:
         a0:07:18:f5:e9:d5:9a:00:6b:70:ba:2f:f7:2c:48:05:90:8a:
         2a:0b:88:b7:f0:5b:ab:9c:28:ee:66:be:e5:e3:d4:a2:65:d2:
         b9:21:22:30:5f:13:bb:00:e4:03:95:0d:08:fc:8b:63:49:b3:
         e1:2c:17:bf:40:67:e5:60:e7:88:82:22:48:3e:29:66:b8:b0:
         84:32:10:cc:2b:59:b9:ed:d5:54:e0:d1:34:59:16:3c:66:cf:
         6f:e8:e3:60
-----BEGIN CERTIFICATE-----
MIIHATCCBemgAwIBAgIUYE73rM3ZC1P2aKBbJ7RPZpjZWoMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwMjA4MjQ0OFoX
DTIzMDMwMjA4Mjk0OFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDA5QUZEOTU0MUNCN0REQUJDMjc5MzIwQjUyMjFGMjkwNDkwNkIzQzIyQzc0
NDA5MkRDMjlCRUQ2OUE1MjBCNEEwOTc4RUZDQTI5RkVENjY3QkEyMzhGMjkwOEE4
QjdCRTJERUUyMjgyN0FDNzEwNUU4OTU1NzkyODI0MUY0NDE4Mzk3RTYyMkNDMEJD
OUQxMjgwMjBEN0NFNUExRkVFNEJGM0ZBNTA2QjkxNjY1RDYwNzNCQThCQzZFNjYx
MDgzMzJFMzQ1RkM4NTUzRkM1M0UwMjQxQ0QwN0Q1MDQ3MDVEMjRDODQxMEFDMUYz
NTdFNkVEMzM5QzdBQUE0QkEzQjREMjJGNEIwRUYxQjVBODlDNkU3NkRFOTg5Qzk3
NzgyMkI0QTFBQTJFRTQ2QjhCMDBFREU5OTNDN0YyMTlFNkIyNkQ3MkUxQzM4RjEw
MEU5MEIxRjc5NEUzRUFGMEI0QkZDMzI4NzNGQTk4NkY2OEFGQkYyNzk3MzM1QzFC
RjlBMDY4NUU4OUQxODdBQkEzM0Y0QkMwMUQ1MzEyRjU1ODkwNzM0MzU2MEY0MzND
MDIyRjIzNzA4QjNBREU1MjlBNzZBMTZBN0IyREY4QTYwNERCQ0QwODg2REVBNENF
N0RGOTg1NDYyNUE4ODBCN0UyMjc5OTM4RURDNkMwMDQ1RTY3QjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa/ZVBy33avCeTILUiHykE
kGs8IsdECS3Cm+1ppSC0oJeO/KKf7WZ7ojjykIqLe+Le4ignrHEF6JVXkoJB9EGD
l+YizAvJ0SgCDXzlof7kvz+lBrkWZdYHO6i8bmYQgzLjRfyFU/xT4CQc0H1QRwXS
TIQQrB81fm7TOceqpLo7TSL0sO8bWonG523picl3gitKGqLuRriwDt6ZPH8hnmsm
1y4cOPEA6QsfeU4+rwtL/DKHP6mG9or78nlzNcG/mgaF6J0Yeroz9LwB1TEvVYkH
NDVg9DPAIvI3CLOt5Smnahanst+KYE280Iht6kzn35hUYlqIC34ieZOO3GwAReZ7
AgMBAAGjggH4MIIB9DAdBgNVHQ4EFgQU7cwJEQPU9NzlrFKgfo558qDPQpswHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB8BggrBgEF
BQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTMyMzEyZTMyMzUzMTJlMzAyZjMy
MzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3n7MA0GCSqGSIb3DQEBCwUA
A4IBAQCYsNlgrehCzsZzWgvQx3izasX8UNnuRohGKPyN6N6CUHZ9dTtUYMMm64Zb
pzkqPh6jm4KyeZC/V1jK9YUSz1bY3BR39151+gJudMIS3mbzPI73W5xQXmkIyzQW
aGTYxAlGw8rD0pxQuHww5IanWDq50AyBIk7f3B+aMLbm7n7xd0GqU1IKBy90DoGa
qz0z3w27DN1CDcNfgcXLdmhMMhnjnyugBxj16dWaAGtwui/3LEgFkIoqC4i38Fur
nCjuZr7l49SiZdK5ISIwXxO7AOQDlQ0I/ItjSbPhLBe/QGflYOeIgiJIPilmuLCE
MhDMK1m57dVU4NE0WRY8Zs9v6ONg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org