Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3232382e302f32322d3234203d3e2030.roa
File:                     3130332e3132332e3232382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          Nq3MEkMwp9ToCdeZjC+ONVsvV6iO2FvmmwQMdsp6pZ8=
Subject key identifier:   EB:4D:7C:F0:F5:EF:7F:D9:1A:47:60:F9:77:BD:DE:82:52:9A:66:D8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3E9E5FE3B26BC9532C3CC4A064A0B4AAA50CF5EE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3232382e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:25:46 +0000
ROA not before:           Wed 02 Feb 2022 06:20:46 +0000
ROA not after:            Thu 02 Feb 2023 06:25:46 +0000
asID:                     0
IP address blocks:        103.123.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9e:5f:e3:b2:6b:c9:53:2c:3c:c4:a0:64:a0:b4:aa:a5:0c:f5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:20:46 2022 GMT
            Not After : Feb  2 06:25:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:54:9d:2a:e4:b7:b7:8f:aa:72:11:72:50:
                    b7:ba:ff:cf:34:a6:f9:c6:81:72:57:e7:c0:29:23:
                    36:cc:f3:20:9f:f2:ad:85:7b:bd:3d:63:90:cf:48:
                    f0:be:13:2e:21:d0:4a:9a:b9:12:49:f6:2b:97:55:
                    81:58:78:e4:7f:ca:7e:57:87:73:cf:dd:7e:bc:f8:
                    0a:d8:1e:38:83:7b:bd:6e:23:cc:5a:d5:ac:bd:87:
                    8d:1c:6f:be:cf:5d:43:0e:c8:1e:37:23:02:22:a6:
                    79:62:49:0c:00:e9:c4:21:b1:7f:7c:84:c2:3a:6f:
                    d9:f4:7a:96:1a:ab:03:92:fb:02:f4:71:90:fa:66:
                    eb:a6:00:05:38:68:94:84:88:5b:08:fa:3d:92:31:
                    a8:51:df:30:73:ba:ff:8b:e5:5c:2c:15:a5:f8:9d:
                    c1:71:f6:0c:d3:9a:60:2f:64:b5:09:ea:cb:6b:10:
                    0a:96:04:ad:f3:78:38:02:56:62:9f:22:92:f7:c2:
                    9b:cd:3d:8d:8b:16:51:2b:1a:f4:45:89:46:b0:4c:
                    1c:54:27:86:a2:ee:9e:2c:70:b7:24:a6:26:da:1f:
                    0f:b1:1a:44:c2:ba:2c:f8:d7:35:b6:93:f3:e5:82:
                    c0:5b:d1:7f:8d:28:18:45:cd:36:24:bc:9d:f5:79:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4D:7C:F0:F5:EF:7F:D9:1A:47:60:F9:77:BD:DE:82:52:9A:66:D8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3232382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:c7:0d:f6:4e:d1:45:19:d9:ce:28:9b:d3:92:04:6b:e1:6b:
         1b:5d:dd:04:0c:ad:11:7e:bf:19:fc:38:ec:3d:70:19:30:8d:
         fc:eb:a6:2d:b9:a8:58:9e:e9:72:d0:ba:d7:03:24:a0:bf:1d:
         f3:35:79:22:c7:92:e0:dd:f6:2a:b2:48:24:a9:90:96:15:c7:
         ea:c2:bb:b4:a4:96:9c:ca:1e:80:56:07:9f:39:74:8a:c6:d4:
         20:66:4f:10:5c:51:d4:66:46:97:bc:f3:bd:17:23:20:6c:9c:
         86:fb:30:d3:c3:1b:1a:27:0a:59:fe:6b:9d:ee:18:91:c4:7f:
         11:fc:90:7d:ed:8b:61:c2:e3:69:00:86:80:36:8d:e2:bb:ed:
         13:17:13:b7:da:48:e2:ec:eb:a5:f6:16:16:64:c9:9a:a1:1d:
         d8:1e:5e:36:7d:fe:b2:42:3b:fd:d6:7a:19:0a:79:60:24:bd:
         57:46:70:91:67:78:a1:0f:9e:9a:cd:b4:03:13:90:55:ed:50:
         81:0d:a3:84:5b:3a:65:4a:18:66:30:4d:7c:c3:95:a0:f8:e2:
         66:a3:bb:de:e1:8a:a2:e6:b5:40:fc:3d:0f:ac:21:24:81:76:
         7a:f0:3c:95:fe:4b:41:f3:c5:56:67:bb:33:03:25:0c:43:79:
         75:c0:e7:d6
-----BEGIN CERTIFICATE-----
MIIHATCCBemgAwIBAgIUPp5f47JryVMsPMSgZKC0qqUM9e4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIwMjA2MjA0NloX
DTIzMDIwMjA2MjU0NlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMTIwNTQ5RDJBRTRCN0I3OEZBQTcyMTE3MjUwQjdCQUZGQ0YzNEE2RjlD
NjgxNzI1N0U3QzAyOTIzMzZDQ0YzMjA5RkYyQUQ4NTdCQkQzRDYzOTBDRjQ4RjBC
RTEzMkUyMUQwNEE5QUI5MTI0OUY2MkI5NzU1ODE1ODc4RTQ3RkNBN0U1Nzg3NzND
RkREN0VCQ0Y4MEFEODFFMzg4MzdCQkQ2RTIzQ0M1QUQ1QUNCRDg3OEQxQzZGQkVD
RjVENDMwRUM4MUUzNzIzMDIyMkE2Nzk2MjQ5MEMwMEU5QzQyMUIxN0Y3Qzg0QzIz
QTZGRDlGNDdBOTYxQUFCMDM5MkZCMDJGNDcxOTBGQTY2RUJBNjAwMDUzODY4OTQ4
NDg4NUIwOEZBM0Q5MjMxQTg1MURGMzA3M0JBRkY4QkU1NUMyQzE1QTVGODlEQzE3
MUY2MENEMzlBNjAyRjY0QjUwOUVBQ0I2QjEwMEE5NjA0QURGMzc4MzgwMjU2NjI5
RjIyOTJGN0MyOUJDRDNEOEQ4QjE2NTEyQjFBRjQ0NTg5NDZCMDRDMUM1NDI3ODZB
MkVFOUUyQzcwQjcyNEE2MjZEQTFGMEZCMTFBNDRDMkJBMkNGOEQ3MzVCNjkzRjNF
NTgyQzA1QkQxN0Y4RDI4MTg0NUNEMzYyNEJDOURGNTc5QUZDNzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRIFSdKuS3t4+qchFyULe6
/880pvnGgXJX58ApIzbM8yCf8q2Fe709Y5DPSPC+Ey4h0EqauRJJ9iuXVYFYeOR/
yn5Xh3PP3X68+ArYHjiDe71uI8xa1ay9h40cb77PXUMOyB43IwIipnliSQwA6cQh
sX98hMI6b9n0epYaqwOS+wL0cZD6ZuumAAU4aJSEiFsI+j2SMahR3zBzuv+L5Vws
FaX4ncFx9gzTmmAvZLUJ6strEAqWBK3zeDgCVmKfIpL3wpvNPY2LFlErGvRFiUaw
TBxUJ4ai7p4scLckpibaHw+xGkTCuiz41zW2k/PlgsBb0X+NKBhFzTYkvJ31ea/H
AgMBAAGjggH4MIIB9DAdBgNVHQ4EFgQU60188PXvf9kaR2D5d73eglKaZtgwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB8BggrBgEF
BQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTMyMzMyZTMyMzIzODJlMzAyZjMy
MzIyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3vkMA0GCSqGSIb3DQEBCwUA
A4IBAQAdxw32TtFFGdnOKJvTkgRr4WsbXd0EDK0Rfr8Z/DjsPXAZMI3866YtuahY
nuly0LrXAySgvx3zNXkix5Lg3fYqskgkqZCWFcfqwru0pJacyh6AVgefOXSKxtQg
Zk8QXFHUZkaXvPO9FyMgbJyG+zDTwxsaJwpZ/mud7hiRxH8R/JB97YthwuNpAIaA
No3iu+0TFxO32kji7Oul9hYWZMmaoR3YHl42ff6yQjv91noZCnlgJL1XRnCRZ3ih
D56azbQDE5BV7VCBDaOEWzplShhmME18w5Wg+OJmo7ve4Yqi5rVA/D0PrCEkgXZ6
8DyV/ktB88VWZ7szAyUMQ3l1wOfW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org