Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234382e302f32322d3234203d3e2030.roa
File:                     3130332e3132332e3234382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          eeF3PHPVy9nxTeYYdIJ3gxGqtkfRB8q8sfjf0rexE40=
Subject key identifier:   CF:12:2D:EE:07:EC:E6:DF:0A:D9:C7:3E:AA:07:C1:00:BF:6B:A3:FE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1C59093E53AD414A32A431DEE3795FC61B1D3110
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234382e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:28:02 +0000
ROA not before:           Wed 02 Feb 2022 06:23:02 +0000
ROA not after:            Thu 02 Feb 2023 06:28:02 +0000
asID:                     0
IP address blocks:        103.123.248.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:59:09:3e:53:ad:41:4a:32:a4:31:de:e3:79:5f:c6:1b:1d:31:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:23:02 2022 GMT
            Not After : Feb  2 06:28:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:91:9a:9c:53:6c:e1:8a:81:9e:78:56:da:
                    03:2b:53:8f:f2:31:d6:db:76:dd:1d:37:5a:37:11:
                    75:9d:79:71:01:3b:b7:c7:cd:cf:f1:f1:f8:a8:3c:
                    bd:ee:c8:e4:e7:29:cc:b7:01:33:d3:16:aa:f8:dc:
                    83:47:22:51:02:54:91:b8:a8:83:4f:58:dd:36:ee:
                    e1:37:ca:c2:cb:0f:c7:90:8f:9e:34:3e:c7:ed:7b:
                    4c:9c:39:8e:1e:2f:01:5f:66:a0:2c:3e:d5:c8:bc:
                    1e:ae:15:89:db:0b:9f:58:96:51:cc:09:32:b5:03:
                    d9:e3:20:7f:3e:94:7d:53:78:24:47:bd:04:4b:96:
                    49:f5:01:1f:28:b2:53:2c:fe:c9:29:aa:04:14:64:
                    b4:00:13:6c:ee:6e:90:d2:60:ca:a4:4a:8a:c1:a5:
                    fc:06:0d:d0:41:9f:48:10:e5:12:f6:c9:1e:e4:04:
                    e5:4d:07:a8:2e:d5:2a:30:f1:ef:9c:dc:01:8a:f4:
                    ac:0c:3c:17:b7:97:19:e0:f9:cb:25:70:27:08:8d:
                    2a:4b:34:6c:83:db:3b:74:e3:51:db:65:0c:77:75:
                    59:5d:45:f0:a4:95:02:1b:32:65:20:38:0e:76:d9:
                    1b:f9:19:91:5b:00:81:4c:a4:93:3b:38:9f:17:58:
                    0b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:12:2D:EE:07:EC:E6:DF:0A:D9:C7:3E:AA:07:C1:00:BF:6B:A3:FE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:4f:69:3a:ef:76:46:6f:03:e2:e0:d1:fb:2e:b4:41:6a:ae:
         f3:79:f1:eb:ae:bb:ff:ca:5e:e0:76:3d:18:49:76:ed:82:04:
         37:5e:58:c6:d3:f9:ea:63:55:60:da:96:03:e6:78:a8:95:a5:
         84:24:b2:0e:91:e6:76:04:10:8d:a4:8e:31:52:ca:2b:eb:29:
         6a:b7:49:7e:78:e1:13:48:2c:dc:ac:c2:d2:28:8e:e4:c2:cb:
         e8:6a:98:90:8c:d2:f6:9f:64:81:5d:97:ed:5b:66:6a:3e:53:
         3a:7f:30:d8:ca:dd:8c:65:fa:fb:5d:90:d5:e8:0f:2f:e0:87:
         2c:8e:0d:04:2e:68:dc:54:00:46:51:d1:3f:eb:68:e3:28:fa:
         41:97:09:4a:b7:a9:b8:82:ea:04:a2:89:a4:7a:a9:af:fc:65:
         50:27:2e:74:9e:fe:1b:3d:3c:12:82:15:6c:13:b4:31:86:d0:
         56:a9:d4:ae:0b:5f:d6:3e:76:35:2a:eb:ae:14:f9:cc:07:b8:
         26:b9:a1:ed:4a:61:6e:a9:c2:12:a9:a4:5a:69:fb:01:eb:be:
         e6:0d:cb:73:ca:02:a3:89:96:01:d1:59:7e:91:89:82:c5:b6:
         e2:e1:9b:a0:8e:97:5c:2a:c3:fa:b4:61:f6:43:f2:bb:b9:f0:
         40:90:21:2c
-----BEGIN CERTIFICATE-----
MIIHATCCBemgAwIBAgIUHFkJPlOtQUoypDHe43lfxhsdMRAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIwMjA2MjMwMloX
DTIzMDIwMjA2MjgwMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDM0QzOTE5QTlDNTM2Q0UxOEE4MTlFNzg1NkRBMDMyQjUzOEZGMjMxRDZE
Qjc2REQxRDM3NUEzNzExNzU5RDc5NzEwMTNCQjdDN0NEQ0ZGMUYxRjhBODNDQkRF
RUM4RTRFNzI5Q0NCNzAxMzNEMzE2QUFGOERDODM0NzIyNTEwMjU0OTFCOEE4ODM0
RjU4REQzNkVFRTEzN0NBQzJDQjBGQzc5MDhGOUUzNDNFQzdFRDdCNEM5QzM5OEUx
RTJGMDE1RjY2QTAyQzNFRDVDOEJDMUVBRTE1ODlEQjBCOUY1ODk2NTFDQzA5MzJC
NTAzRDlFMzIwN0YzRTk0N0Q1Mzc4MjQ0N0JEMDQ0Qjk2NDlGNTAxMUYyOEIyNTMy
Q0ZFQzkyOUFBMDQxNDY0QjQwMDEzNkNFRTZFOTBEMjYwQ0FBNDRBOEFDMUE1RkMw
NjBERDA0MTlGNDgxMEU1MTJGNkM5MUVFNDA0RTU0RDA3QTgyRUQ1MkEzMEYxRUY5
Q0RDMDE4QUY0QUMwQzNDMTdCNzk3MTlFMEY5Q0IyNTcwMjcwODhEMkE0QjM0NkM4
M0RCM0I3NEUzNTFEQjY1MEM3Nzc1NTk1RDQ1RjBBNDk1MDIxQjMyNjUyMDM4MEU3
NkQ5MUJGOTE5OTE1QjAwODE0Q0E0OTMzQjM4OUYxNzU4MEJFMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD05GanFNs4YqBnnhW2gMr
U4/yMdbbdt0dN1o3EXWdeXEBO7fHzc/x8fioPL3uyOTnKcy3ATPTFqr43INHIlEC
VJG4qINPWN027uE3ysLLD8eQj540Psfte0ycOY4eLwFfZqAsPtXIvB6uFYnbC59Y
llHMCTK1A9njIH8+lH1TeCRHvQRLlkn1AR8oslMs/skpqgQUZLQAE2zubpDSYMqk
SorBpfwGDdBBn0gQ5RL2yR7kBOVNB6gu1Sow8e+c3AGK9KwMPBe3lxng+cslcCcI
jSpLNGyD2zt041HbZQx3dVldRfCklQIbMmUgOA522Rv5GZFbAIFMpJM7OJ8XWAvj
AgMBAAGjggH4MIIB9DAdBgNVHQ4EFgQUzxIt7gfs5t8K2cc+qgfBAL9ro/4wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB8BggrBgEF
BQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTMyMzMyZTMyMzQzODJlMzAyZjMy
MzIyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3v4MA0GCSqGSIb3DQEBCwUA
A4IBAQCHT2k673ZGbwPi4NH7LrRBaq7zefHrrrv/yl7gdj0YSXbtggQ3XljG0/nq
Y1Vg2pYD5niolaWEJLIOkeZ2BBCNpI4xUsor6ylqt0l+eOETSCzcrMLSKI7kwsvo
apiQjNL2n2SBXZftW2ZqPlM6fzDYyt2MZfr7XZDV6A8v4Icsjg0ELmjcVABGUdE/
62jjKPpBlwlKt6m4guoEoomkeqmv/GVQJy50nv4bPTwSghVsE7QxhtBWqdSuC1/W
PnY1KuuuFPnMB7gmuaHtSmFuqcISqaRaafsB677mDctzygKjiZYB0Vl+kYmCxbbi
4ZugjpdcKsP6tGH2Q/K7ufBAkCEs
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org