Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3232342e302f32322d3234203d3e2030.roa
File:                     3130332e3133302e3232342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          DSuMThxjIJ0RphBgP9BpTqppLGmqA6W9Jagv3AvGsX4=
Subject key identifier:   9E:1B:68:FF:70:39:B1:C8:70:32:03:41:76:6A:66:B4:FE:43:59:6E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3341C235E496F206D7DF0F99CC0C9412AE4160E4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3232342e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:21:49 +0000
ROA not before:           Wed 02 Feb 2022 06:16:49 +0000
ROA not after:            Thu 02 Feb 2023 06:21:49 +0000
asID:                     0
IP address blocks:        103.130.224.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:41:c2:35:e4:96:f2:06:d7:df:0f:99:cc:0c:94:12:ae:41:60:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:16:49 2022 GMT
            Not After : Feb  2 06:21:49 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:7e:94:4c:06:36:0a:be:fe:3c:df:57:6c:
                    56:47:bf:bf:d6:65:4a:4c:1b:bd:f2:c7:45:8b:b6:
                    96:8e:25:b9:a2:82:b2:e0:3b:21:30:d6:0c:90:d0:
                    1b:9b:f8:fb:ba:d6:e9:34:99:60:f0:63:73:da:8f:
                    a4:dc:2b:04:14:d8:80:79:59:bc:c1:f2:20:c8:b9:
                    eb:89:27:ce:2f:b2:44:3b:d7:2a:79:4b:1b:31:d5:
                    fe:01:a3:a7:09:57:39:04:48:69:fb:70:8a:29:b1:
                    e1:1b:32:b8:55:ee:08:1d:8e:c7:3c:69:27:25:b5:
                    d2:41:9f:f0:c7:d7:da:e8:35:37:d3:22:6e:67:d6:
                    10:d5:10:29:68:9e:d1:df:fd:c0:54:3a:46:d0:fa:
                    1e:1a:cc:a4:69:11:62:d1:21:03:1b:df:f1:4f:b6:
                    4c:78:d8:fe:e2:b4:46:ed:ca:7f:88:95:0c:4f:36:
                    de:bb:89:7e:30:f3:94:f0:5d:c1:7b:17:b9:0c:5f:
                    b9:0d:41:72:49:98:e7:82:3f:08:38:18:0f:ce:a2:
                    e0:8b:81:92:78:8c:4c:c6:04:d7:f7:52:5a:69:02:
                    1d:3f:13:ed:cb:46:63:0e:1a:fe:29:69:82:76:91:
                    e8:ca:9e:a7:ad:97:27:2f:ca:a4:b2:b4:d7:9b:20:
                    c1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1B:68:FF:70:39:B1:C8:70:32:03:41:76:6A:66:B4:FE:43:59:6E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3232342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:43:e1:e0:d1:a7:29:c1:11:6d:03:1e:40:f6:f2:f6:61:5c:
         68:dc:0a:87:c0:be:f6:fc:38:13:b3:0e:a9:89:ba:42:32:b6:
         ef:06:b2:52:e5:fe:5d:3f:de:72:23:b4:bb:47:bb:90:25:a0:
         4e:ce:7b:90:a0:49:6f:92:4e:65:e0:19:27:44:6c:6e:8e:61:
         17:81:c2:fb:f2:c6:f9:29:36:59:8c:1f:4f:6b:1d:81:af:1b:
         ec:6f:0f:0c:ec:d1:3a:d9:d5:c3:32:1f:a1:36:9f:65:ac:ac:
         19:04:68:a8:3a:cc:6d:51:d0:8d:03:08:26:bf:5b:27:e9:24:
         ca:18:23:40:99:4c:74:4d:0f:3c:11:0e:38:d8:67:04:01:a4:
         fb:6f:c6:bc:c6:cf:70:ad:83:9e:57:89:ac:2f:0b:81:5c:ff:
         21:63:4d:01:81:4a:71:ce:b4:f7:fd:e5:bc:22:43:f4:f6:07:
         a3:8e:4c:a9:e8:38:a2:f5:b4:62:5b:2a:90:73:12:49:c9:92:
         bb:80:18:e1:77:f7:a3:e3:72:07:93:95:0a:bb:37:d3:41:6f:
         90:ed:db:1a:d3:4e:94:aa:79:4d:d0:13:d7:54:6c:47:b7:bc:
         73:5e:23:5d:09:94:b6:6b:94:27:b6:ce:7e:cc:d3:0a:51:9a:
         19:95:39:91
-----BEGIN CERTIFICATE-----
MIIHATCCBemgAwIBAgIUM0HCNeSW8gbX3w+ZzAyUEq5BYOQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIwMjA2MTY0OVoX
DTIzMDIwMjA2MjE0OVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCMzVCN0U5NDRDMDYzNjBBQkVGRTNDREY1NzZDNTY0N0JGQkZENjY1NEE0
QzFCQkRGMkM3NDU4QkI2OTY4RTI1QjlBMjgyQjJFMDNCMjEzMEQ2MEM5MEQwMUI5
QkY4RkJCQUQ2RTkzNDk5NjBGMDYzNzNEQThGQTREQzJCMDQxNEQ4ODA3OTU5QkND
MUYyMjBDOEI5RUI4OTI3Q0UyRkIyNDQzQkQ3MkE3OTRCMUIzMUQ1RkUwMUEzQTcw
OTU3MzkwNDQ4NjlGQjcwOEEyOUIxRTExQjMyQjg1NUVFMDgxRDhFQzczQzY5Mjcy
NUI1RDI0MTlGRjBDN0Q3REFFODM1MzdEMzIyNkU2N0Q2MTBENTEwMjk2ODlFRDFE
RkZEQzA1NDNBNDZEMEZBMUUxQUNDQTQ2OTExNjJEMTIxMDMxQkRGRjE0RkI2NEM3
OEQ4RkVFMkI0NDZFRENBN0Y4ODk1MEM0RjM2REVCQjg5N0UzMEYzOTRGMDVEQzE3
QjE3QjkwQzVGQjkwRDQxNzI0OTk4RTc4MjNGMDgzODE4MEZDRUEyRTA4QjgxOTI3
ODhDNENDNjA0RDdGNzUyNUE2OTAyMUQzRjEzRURDQjQ2NjMwRTFBRkUyOTY5ODI3
NjkxRThDQTlFQTdBRDk3MjcyRkNBQTRCMkI0RDc5QjIwQzE3NzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzW36UTAY2Cr7+PN9XbFZH
v7/WZUpMG73yx0WLtpaOJbmigrLgOyEw1gyQ0Bub+Pu61uk0mWDwY3Paj6TcKwQU
2IB5WbzB8iDIueuJJ84vskQ71yp5Sxsx1f4Bo6cJVzkESGn7cIopseEbMrhV7ggd
jsc8aScltdJBn/DH19roNTfTIm5n1hDVEClontHf/cBUOkbQ+h4azKRpEWLRIQMb
3/FPtkx42P7itEbtyn+IlQxPNt67iX4w85TwXcF7F7kMX7kNQXJJmOeCPwg4GA/O
ouCLgZJ4jEzGBNf3UlppAh0/E+3LRmMOGv4paYJ2kejKnqetlycvyqSytNebIMF3
AgMBAAGjggH4MIIB9DAdBgNVHQ4EFgQUnhto/3A5schwMgNBdmpmtP5DWW4wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB8BggrBgEF
BQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTMzMzAyZTMyMzIzNDJlMzAyZjMy
MzIyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4LgMA0GCSqGSIb3DQEBCwUA
A4IBAQAmQ+Hg0acpwRFtAx5A9vL2YVxo3AqHwL72/DgTsw6pibpCMrbvBrJS5f5d
P95yI7S7R7uQJaBOznuQoElvkk5l4BknRGxujmEXgcL78sb5KTZZjB9Pax2Brxvs
bw8M7NE62dXDMh+hNp9lrKwZBGioOsxtUdCNAwgmv1sn6STKGCNAmUx0TQ88EQ44
2GcEAaT7b8a8xs9wrYOeV4msLwuBXP8hY00BgUpxzrT3/eW8IkP09gejjkyp6Dii
9bRiWyqQcxJJyZK7gBjhd/ej43IHk5UKuzfTQW+Q7dsa006UqnlN0BPXVGxHt7xz
XiNdCZS2a5Qnts5+zNMKUZoZlTmR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org