Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e3131362e302f32322d3234203d3e2030.roa
File:                     3130332e3133312e3131362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          V4L1Y6gz+vi/XFvGDggY9iqtJwTxM4cTgErRdYtOs8g=
Subject key identifier:   7D:E2:B0:A7:77:69:47:CC:F4:F2:A7:BB:49:1C:EA:77:9A:A9:E1:A2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       171C39D44DE3696CA38E435AB8B897607671111F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e3131362e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:23:01 +0000
ROA not before:           Wed 02 Feb 2022 06:18:01 +0000
ROA not after:            Thu 02 Feb 2023 06:23:01 +0000
asID:                     0
IP address blocks:        103.131.116.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1c:39:d4:4d:e3:69:6c:a3:8e:43:5a:b8:b8:97:60:76:71:11:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:18:01 2022 GMT
            Not After : Feb  2 06:23:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:25:c1:b2:f2:f6:cc:0e:d8:42:09:5e:e6:63:
                    64:6c:48:c3:a9:29:9b:6c:e8:f9:73:2e:ff:90:85:
                    6c:87:a4:60:22:7d:fc:9d:3e:d6:55:c5:74:eb:f1:
                    5b:91:c0:d8:73:61:2b:68:24:9d:26:2b:80:89:41:
                    a9:35:aa:f2:c3:c8:cf:88:36:c9:06:bb:cd:3e:38:
                    e8:de:07:eb:91:cc:19:13:5b:09:ba:ad:1c:15:27:
                    de:82:f4:71:dc:f1:8a:8a:5d:2a:20:9d:47:71:58:
                    f4:bc:8a:90:36:6b:36:92:01:70:54:ef:26:21:1c:
                    17:cd:12:62:1d:b9:02:c3:ff:d2:56:a0:82:61:82:
                    48:88:ea:3c:88:2e:35:16:63:2e:0d:45:e6:df:61:
                    ed:b6:3a:dd:8e:08:8b:28:70:3a:8d:d4:ec:5f:b6:
                    63:e7:da:a3:75:c9:ed:f3:26:ff:70:bb:f2:aa:48:
                    ac:11:e9:2f:4d:ef:fd:b1:b5:42:c7:27:4c:e0:fc:
                    b2:48:72:92:ca:71:34:f7:b1:8a:f7:02:2c:f9:89:
                    70:e5:94:94:d8:70:b8:2c:43:e5:4f:b3:00:96:51:
                    31:0d:d2:f8:4e:dd:b5:6c:38:17:c3:5b:75:b9:20:
                    39:b7:04:43:0a:20:57:ad:61:59:19:ec:9e:d7:51:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E2:B0:A7:77:69:47:CC:F4:F2:A7:BB:49:1C:EA:77:9A:A9:E1:A2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e3131362e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:d4:65:5d:73:66:4b:83:cf:65:a0:2c:0a:a8:90:b1:8f:0e:
         29:56:33:ae:df:a9:64:51:1f:65:02:f6:e7:19:0e:c5:4b:f1:
         64:30:e7:25:e4:ef:2e:0e:ad:4c:7c:21:95:ba:0d:2a:e6:11:
         ab:cf:34:e7:b6:84:10:ab:9c:6b:dc:68:c7:8f:b0:df:ea:f0:
         5a:5d:c3:45:22:48:f3:cc:26:98:61:44:71:30:f8:06:8f:75:
         28:8b:43:34:0b:2a:5c:ad:b0:b5:3e:fc:c1:ff:78:a0:bf:7c:
         57:37:eb:80:06:35:36:3d:9d:8a:92:aa:b6:78:46:c1:80:10:
         43:7d:f5:ee:ee:59:f9:fc:08:43:f1:28:9c:49:77:e2:7a:63:
         d2:95:f3:bd:ee:ea:d8:89:9e:8d:ae:c2:b1:94:32:6e:38:20:
         cd:9d:85:11:8c:5f:26:0f:05:05:fa:c2:6c:24:8c:87:f7:a6:
         46:bf:9d:90:4b:a1:54:94:1d:20:82:07:7e:31:eb:43:39:ff:
         b5:0d:c4:b9:13:6f:cd:57:ae:6d:92:f3:30:1d:54:8d:a7:76:
         76:83:53:67:f7:2d:e1:95:52:d6:69:d5:29:2d:54:9e:56:b7:
         ef:0c:66:bf:64:4b:76:5d:59:1c:e9:e6:08:5e:4b:d2:22:75:
         c4:1f:63:b6
-----BEGIN CERTIFICATE-----
MIIHATCCBemgAwIBAgIUFxw51E3jaWyjjkNauLiXYHZxER8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIwMjA2MTgwMVoX
DTIzMDIwMjA2MjMwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCRTI1QzFCMkYyRjZDQzBFRDg0MjA5NUVFNjYzNjQ2QzQ4QzNBOTI5OUI2
Q0U4Rjk3MzJFRkY5MDg1NkM4N0E0NjAyMjdERkM5RDNFRDY1NUM1NzRFQkYxNUI5
MUMwRDg3MzYxMkI2ODI0OUQyNjJCODA4OTQxQTkzNUFBRjJDM0M4Q0Y4ODM2Qzkw
NkJCQ0QzRTM4RThERTA3RUI5MUNDMTkxMzVCMDlCQUFEMUMxNTI3REU4MkY0NzFE
Q0YxOEE4QTVEMkEyMDlENDc3MTU4RjRCQzhBOTAzNjZCMzY5MjAxNzA1NEVGMjYy
MTFDMTdDRDEyNjIxREI5MDJDM0ZGRDI1NkEwODI2MTgyNDg4OEVBM0M4ODJFMzUx
NjYzMkUwRDQ1RTZERjYxRURCNjNBREQ4RTA4OEIyODcwM0E4REQ0RUM1RkI2NjNF
N0RBQTM3NUM5RURGMzI2RkY3MEJCRjJBQTQ4QUMxMUU5MkY0REVGRkRCMUI1NDJD
NzI3NENFMEZDQjI0ODcyOTJDQTcxMzRGN0IxOEFGNzAyMkNGOTg5NzBFNTk0OTRE
ODcwQjgyQzQzRTU0RkIzMDA5NjUxMzEwREQyRjg0RUREQjU2QzM4MTdDMzVCNzVC
OTIwMzlCNzA0NDMwQTIwNTdBRDYxNTkxOUVDOUVENzUxNkEzOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+JcGy8vbMDthCCV7mY2Rs
SMOpKZts6PlzLv+QhWyHpGAiffydPtZVxXTr8VuRwNhzYStoJJ0mK4CJQak1qvLD
yM+INskGu80+OOjeB+uRzBkTWwm6rRwVJ96C9HHc8YqKXSognUdxWPS8ipA2azaS
AXBU7yYhHBfNEmIduQLD/9JWoIJhgkiI6jyILjUWYy4NRebfYe22Ot2OCIsocDqN
1OxftmPn2qN1ye3zJv9wu/KqSKwR6S9N7/2xtULHJ0zg/LJIcpLKcTT3sYr3Aiz5
iXDllJTYcLgsQ+VPswCWUTEN0vhO3bVsOBfDW3W5IDm3BEMKIFetYVkZ7J7XUWo5
AgMBAAGjggH4MIIB9DAdBgNVHQ4EFgQUfeKwp3dpR8z08qe7SRzqd5qp4aIwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB8BggrBgEF
BQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTMzMzEyZTMxMzEzNjJlMzAyZjMy
MzIyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4N0MA0GCSqGSIb3DQEBCwUA
A4IBAQAq1GVdc2ZLg89loCwKqJCxjw4pVjOu36lkUR9lAvbnGQ7FS/FkMOcl5O8u
Dq1MfCGVug0q5hGrzzTntoQQq5xr3GjHj7Df6vBaXcNFIkjzzCaYYURxMPgGj3Uo
i0M0CypcrbC1PvzB/3igv3xXN+uABjU2PZ2Kkqq2eEbBgBBDffXu7ln5/AhD8Sic
SXfiemPSlfO97urYiZ6NrsKxlDJuOCDNnYURjF8mDwUF+sJsJIyH96ZGv52QS6FU
lB0gggd+MetDOf+1DcS5E2/NV65tkvMwHVSNp3Z2g1Nn9y3hlVLWadUpLVSeVrfv
DGa/ZEt2XVkc6eYIXkvSInXEH2O2
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org