Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231322e302f32322d3234203d3e2030.roa
File:                     3130332e3133352e3231322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          bjGhuNN76js6RTeJOpiUV+YW/CA1/ASlMB5nQW32rVQ=
Subject key identifier:   2E:69:92:FA:39:00:52:68:80:B4:E7:B5:75:FD:76:C0:D7:6F:5B:80
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       14BF354AE5D55EE917BB5CBE618854E5BF2DC4B9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231322e302f32322d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 03:46:55 +0000
ROA not before:           Mon 31 Jan 2022 03:41:55 +0000
ROA not after:            Tue 31 Jan 2023 03:46:55 +0000
asID:                     0
IP address blocks:        103.135.212.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bf:35:4a:e5:d5:5e:e9:17:bb:5c:be:61:88:54:e5:bf:2d:c4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 03:41:55 2022 GMT
            Not After : Jan 31 03:46:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:30:1a:0c:ab:f8:da:a8:fd:c8:ee:91:d3:
                    46:aa:63:3a:fe:26:2b:52:7f:7e:72:a6:06:b4:58:
                    94:8f:86:35:f8:ed:0a:90:7c:64:69:40:81:62:83:
                    e4:39:b5:eb:51:66:d9:34:a4:1e:12:86:69:11:b6:
                    0b:8b:1a:fd:bd:80:b7:cb:d7:44:12:22:fb:92:66:
                    ae:2b:32:f5:d7:13:ba:d4:f6:b0:06:0d:11:c2:ff:
                    a9:35:57:c8:ee:90:b2:98:f7:c6:37:3d:ff:80:bb:
                    f4:64:3e:29:9d:66:e6:c9:43:e5:d8:90:67:aa:68:
                    cd:81:ed:d9:58:47:90:80:07:b4:d0:b2:fb:09:ee:
                    a3:33:54:26:cc:15:bd:cd:09:23:91:e4:cf:43:c7:
                    78:8f:6e:b0:94:49:71:75:7e:70:fe:2d:09:2c:96:
                    cb:fe:6e:b2:31:ee:ca:af:02:e6:43:e1:cf:38:92:
                    74:43:e0:3f:f7:fe:00:5a:ec:7a:ba:09:20:54:37:
                    32:b4:87:f3:37:b5:c4:55:e7:9a:13:a7:1b:51:79:
                    36:c5:90:a2:6f:17:b5:9f:cd:bf:22:b5:ab:36:50:
                    7c:76:66:6f:2c:19:be:50:8a:c1:79:8b:85:16:31:
                    95:a7:a5:c7:82:ea:05:99:ac:44:60:aa:ef:53:63:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:69:92:FA:39:00:52:68:80:B4:E7:B5:75:FD:76:C0:D7:6F:5B:80
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231322e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:bc:f3:f6:ef:38:ad:01:41:0f:93:86:41:ac:06:26:f8:74:
         df:32:97:e5:e0:ea:63:f8:8e:92:6a:2c:00:8a:2c:b6:52:8b:
         b5:d5:97:f8:5c:0e:90:76:ca:92:35:6b:aa:e0:f6:43:52:e4:
         e7:29:60:73:9e:f7:f7:9c:8e:85:78:07:62:9b:99:13:f0:12:
         7f:7c:d6:4b:5c:44:b7:d9:d4:b6:5c:0a:90:a4:de:7b:da:ee:
         59:e9:72:96:4e:79:6d:b4:7a:24:ce:64:fa:0e:14:d1:1e:de:
         42:b3:46:52:b1:ff:dc:49:6c:f6:3f:32:3c:79:cf:39:08:2d:
         e0:a9:44:12:a8:39:15:db:9b:b7:f4:98:37:54:a8:98:5d:1e:
         5c:80:47:a8:db:3a:9b:2b:92:a9:8f:ef:2c:8e:56:7a:13:bd:
         af:21:28:47:46:74:0b:9f:9e:21:ba:16:77:61:de:92:a6:4f:
         6c:70:24:49:aa:07:b1:4e:96:fa:60:ba:ab:f0:cb:d7:fc:2a:
         3e:b3:2e:d1:d6:6c:92:dd:3b:4d:94:99:30:fe:f1:b5:0c:8f:
         58:75:09:b6:f4:ea:74:41:0e:55:f8:05:67:c6:0d:73:60:3c:
         a2:a7:76:e9:83:f9:e6:a2:1f:7d:70:23:12:f0:90:cc:34:0f:
         43:aa:be:79
-----BEGIN CERTIFICATE-----
MIIHATCCBemgAwIBAgIUFL81SuXVXukXu1y+YYhU5b8txLkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDEzMTAzNDE1NVoX
DTIzMDEzMTAzNDY1NVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDA5OTVBMzAxQTBDQUJGOERBQThGREM4RUU5MUQzNDZBQTYzM0FGRTI2MkI1
MjdGN0U3MkE2MDZCNDU4OTQ4Rjg2MzVGOEVEMEE5MDdDNjQ2OTQwODE2MjgzRTQz
OUI1RUI1MTY2RDkzNEE0MUUxMjg2NjkxMUI2MEI4QjFBRkRCRDgwQjdDQkQ3NDQx
MjIyRkI5MjY2QUUyQjMyRjVENzEzQkFENEY2QjAwNjBEMTFDMkZGQTkzNTU3QzhF
RTkwQjI5OEY3QzYzNzNERkY4MEJCRjQ2NDNFMjk5RDY2RTZDOTQzRTVEODkwNjdB
QTY4Q0Q4MUVERDk1ODQ3OTA4MDA3QjREMEIyRkIwOUVFQTMzMzU0MjZDQzE1QkRD
RDA5MjM5MUU0Q0Y0M0M3Nzg4RjZFQjA5NDQ5NzE3NTdFNzBGRTJEMDkyQzk2Q0JG
RTZFQjIzMUVFQ0FBRjAyRTY0M0UxQ0YzODkyNzQ0M0UwM0ZGN0ZFMDA1QUVDN0FC
QTA5MjA1NDM3MzJCNDg3RjMzN0I1QzQ1NUU3OUExM0E3MUI1MTc5MzZDNTkwQTI2
RjE3QjU5RkNEQkYyMkI1QUIzNjUwN0M3NjY2NkYyQzE5QkU1MDhBQzE3OThCODUx
NjMxOTVBN0E1Qzc4MkVBMDU5OUFDNDQ2MEFBRUY1MzYzRUFCRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZWjAaDKv42qj9yO6R00aq
Yzr+JitSf35ypga0WJSPhjX47QqQfGRpQIFig+Q5tetRZtk0pB4ShmkRtguLGv29
gLfL10QSIvuSZq4rMvXXE7rU9rAGDRHC/6k1V8jukLKY98Y3Pf+Au/RkPimdZubJ
Q+XYkGeqaM2B7dlYR5CAB7TQsvsJ7qMzVCbMFb3NCSOR5M9Dx3iPbrCUSXF1fnD+
LQkslsv+brIx7sqvAuZD4c84knRD4D/3/gBa7Hq6CSBUNzK0h/M3tcRV55oTpxtR
eTbFkKJvF7Wfzb8itas2UHx2Zm8sGb5QisF5i4UWMZWnpceC6gWZrERgqu9TY+q9
AgMBAAGjggH4MIIB9DAdBgNVHQ4EFgQULmmS+jkAUmiAtOe1df12wNdvW4AwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB8BggrBgEF
BQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTMzMzUyZTMyMzEzMjJlMzAyZjMy
MzIyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4fUMA0GCSqGSIb3DQEBCwUA
A4IBAQBEvPP27zitAUEPk4ZBrAYm+HTfMpfl4Opj+I6SaiwAiiy2Uou11Zf4XA6Q
dsqSNWuq4PZDUuTnKWBznvf3nI6FeAdim5kT8BJ/fNZLXES32dS2XAqQpN572u5Z
6XKWTnlttHokzmT6DhTRHt5Cs0ZSsf/cSWz2PzI8ec85CC3gqUQSqDkV25u39Jg3
VKiYXR5cgEeo2zqbK5Kpj+8sjlZ6E72vIShHRnQLn54huhZ3Yd6Spk9scCRJqgex
Tpb6YLqr8MvX/Co+sy7R1myS3TtNlJkw/vG1DI9YdQm29Op0QQ5V+AVnxg1zYDyi
p3bpg/nmoh99cCMS8JDMNA9Dqr55
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org