Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31342e31362e302f32322d3234203d3e203535363939.roa
File:                     3130332e31342e31362e302f32322d3234203d3e203535363939.roa (raw, json)
Hash identifier:          3vuctmJ0Z8v4ttXoxAyXdM+1hk2YmnIbVG7qXPJOuSI=
Subject key identifier:   AF:76:93:E2:0B:17:5C:8C:EE:AA:83:0D:F8:0E:63:DA:FE:65:7A:29
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5E635A8A04BE5AC8C0A46F7361355FABCE1FE5B5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31342e31362e302f32322d3234203d3e203535363939.roa
Signing time:             Fri 07 Jan 2022 04:00:00 +0000
ROA not before:           Fri 07 Jan 2022 03:55:00 +0000
ROA not after:            Sat 07 Jan 2023 04:00:00 +0000
asID:                     55699
IP address blocks:        103.14.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:63:5a:8a:04:be:5a:c8:c0:a4:6f:73:61:35:5f:ab:ce:1f:e5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  7 03:55:00 2022 GMT
            Not After : Jan  7 04:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:79:f5:30:77:92:3d:f4:9a:7a:07:bf:d1:
                    11:d1:e8:73:6c:43:cb:ec:be:53:b7:37:09:e1:9f:
                    70:7c:13:b5:96:69:68:3a:f3:37:c1:0f:60:84:96:
                    89:70:f8:2e:06:8e:87:85:85:46:02:18:7e:85:30:
                    98:6d:ec:19:94:0f:b4:fd:39:27:f3:72:0b:ec:b0:
                    1b:7d:2f:3b:dc:e6:e8:52:10:2e:2a:81:5e:04:6c:
                    a4:82:dd:61:95:01:4f:13:1a:28:83:b8:01:50:ee:
                    bf:61:47:df:06:79:da:23:08:1b:87:d8:03:2d:b1:
                    13:0a:21:8d:56:b1:09:2c:ec:28:86:f7:09:ad:a3:
                    eb:d0:67:9b:9a:10:ea:0e:c2:98:67:15:91:c0:03:
                    6d:97:68:2f:4f:fe:bd:b0:3f:74:73:41:ee:e5:8a:
                    48:22:f7:ed:af:67:5e:ba:7f:72:1e:84:62:1f:06:
                    6c:89:af:19:7e:78:a7:a8:13:8b:c9:22:17:1a:14:
                    da:44:c3:71:cc:d0:a8:c4:23:ba:af:fe:02:3d:91:
                    0c:d6:30:f4:ba:55:8d:35:23:12:0e:4a:52:86:54:
                    08:09:35:4c:fa:39:17:e1:2f:96:ab:65:4e:33:dd:
                    57:7e:a3:da:cf:be:5c:dd:f9:99:1d:8c:3b:95:10:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:76:93:E2:0B:17:5C:8C:EE:AA:83:0D:F8:0E:63:DA:FE:65:7A:29
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31342e31362e302f32322d3234203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:2c:ba:ba:54:59:03:45:5f:fa:54:b6:e4:32:1d:13:49:a0:
         3d:51:97:7a:be:86:98:02:74:33:5b:b1:95:31:c6:4c:0f:f6:
         bf:fe:58:90:ba:b3:29:28:48:07:1a:8b:d6:b4:a0:4d:7d:09:
         30:0e:e0:aa:5e:00:53:99:36:77:6b:af:26:0a:7d:f1:6a:f3:
         a8:70:51:d6:f0:92:1e:61:36:bb:4c:65:63:20:33:83:f8:8b:
         09:0c:82:74:b7:12:76:1c:7c:77:4c:24:13:7a:d7:85:16:4b:
         aa:42:b7:3b:3e:8d:5a:5a:6c:e8:6e:56:91:5b:af:9c:21:1d:
         fd:1d:c5:f5:24:3d:06:31:58:48:99:c8:72:8c:d3:db:b7:39:
         9b:57:66:a5:e3:ef:b5:ea:e5:6f:87:1e:eb:62:41:5a:e3:76:
         f5:be:8c:cb:9c:20:a5:91:95:01:a6:82:f8:30:69:50:b0:a6:
         ea:42:7c:14:b1:00:87:58:1f:f4:e2:46:94:ac:b6:94:46:49:
         4e:ac:9a:3d:3a:9d:70:ed:cc:2c:62:7a:f7:e1:1d:a0:68:dd:
         0f:2f:9c:99:11:a2:1b:aa:cb:3c:af:26:50:41:3a:08:57:e5:
         1d:fc:ec:8f:d7:cd:0a:50:d5:b6:0b:05:81:9e:60:fd:dc:2b:
         d7:c1:4d:a7
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUXmNaigS+WsjApG9zYTVfq84f5bUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDEwNzAzNTUwMFoX
DTIzMDEwNzA0MDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDNTE2NzlGNTMwNzc5MjNERjQ5QTdBMDdCRkQxMTFEMUU4NzM2QzQzQ0JF
Q0JFNTNCNzM3MDlFMTlGNzA3QzEzQjU5NjY5NjgzQUYzMzdDMTBGNjA4NDk2ODk3
MEY4MkUwNjhFODc4NTg1NDYwMjE4N0U4NTMwOTg2REVDMTk5NDBGQjRGRDM5MjdG
MzcyMEJFQ0IwMUI3RDJGM0JEQ0U2RTg1MjEwMkUyQTgxNUUwNDZDQTQ4MkRENjE5
NTAxNEYxMzFBMjg4M0I4MDE1MEVFQkY2MTQ3REYwNjc5REEyMzA4MUI4N0Q4MDMy
REIxMTMwQTIxOEQ1NkIxMDkyQ0VDMjg4NkY3MDlBREEzRUJEMDY3OUI5QTEwRUEw
RUMyOTg2NzE1OTFDMDAzNkQ5NzY4MkY0RkZFQkRCMDNGNzQ3MzQxRUVFNThBNDgy
MkY3RURBRjY3NUVCQTdGNzIxRTg0NjIxRjA2NkM4OUFGMTk3RTc4QTdBODEzOEJD
OTIyMTcxQTE0REE0NEMzNzFDQ0QwQThDNDIzQkFBRkZFMDIzRDkxMENENjMwRjRC
QTU1OEQzNTIzMTIwRTRBNTI4NjU0MDgwOTM1NENGQTM5MTdFMTJGOTZBQjY1NEUz
M0RENTc3RUEzREFDRkJFNUNEREY5OTkxRDhDM0I5NTEwRUYwRjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFnn1MHeSPfSaege/0RHR
6HNsQ8vsvlO3Nwnhn3B8E7WWaWg68zfBD2CElolw+C4GjoeFhUYCGH6FMJht7BmU
D7T9OSfzcgvssBt9Lzvc5uhSEC4qgV4EbKSC3WGVAU8TGiiDuAFQ7r9hR98Gedoj
CBuH2AMtsRMKIY1WsQks7CiG9wmto+vQZ5uaEOoOwphnFZHAA22XaC9P/r2wP3Rz
Qe7likgi9+2vZ166f3IehGIfBmyJrxl+eKeoE4vJIhcaFNpEw3HM0KjEI7qv/gI9
kQzWMPS6VY01IxIOSlKGVAgJNUz6ORfhL5arZU4z3Vd+o9rPvlzd+ZkdjDuVEO8P
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUr3aT4gsXXIzuqoMN+A5j2v5leikwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNDJlMzEzNjJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDM1MzUzNjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnDhAwDQYJKoZIhvcN
AQELBQADggEBAGUsurpUWQNFX/pUtuQyHRNJoD1Rl3q+hpgCdDNbsZUxxkwP9r/+
WJC6sykoSAcai9a0oE19CTAO4KpeAFOZNndrryYKffFq86hwUdbwkh5hNrtMZWMg
M4P4iwkMgnS3EnYcfHdMJBN614UWS6pCtzs+jVpabOhuVpFbr5whHf0dxfUkPQYx
WEiZyHKM09u3OZtXZqXj77Xq5W+HHutiQVrjdvW+jMucIKWRlQGmgvgwaVCwpupC
fBSxAIdYH/TiRpSstpRGSU6smj06nXDtzCxievfhHaBo3Q8vnJkRohuqyzyvJlBB
OghX5R387I/XzQpQ1bYLBYGeYP3cK9fBTac=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org