Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134302e3130382e302f32332d3234203d3e2030.roa
File:                     3130332e3134302e3130382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          VeQ1ap3S9uoDM1NnvX1PH7pfKLPH0lHmLTeg1DAdoWw=
Subject key identifier:   09:68:11:1A:AE:9D:63:B5:19:74:FD:19:82:44:FA:D8:12:5B:C8:29
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7F6B434C043E67267738908630DC9EE73962E080
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134302e3130382e302f32332d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:32:48 +0000
ROA not before:           Wed 02 Feb 2022 06:27:48 +0000
ROA not after:            Thu 02 Feb 2023 06:32:48 +0000
asID:                     0
IP address blocks:        103.140.108.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6b:43:4c:04:3e:67:26:77:38:90:86:30:dc:9e:e7:39:62:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:27:48 2022 GMT
            Not After : Feb  2 06:32:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:9b:aa:08:45:56:1e:49:24:b9:29:66:31:
                    3c:d8:aa:4f:82:37:90:78:f7:15:0f:31:a9:50:db:
                    7d:28:5b:d8:78:46:c1:47:a5:85:51:a9:aa:f6:b0:
                    11:6e:8a:84:d1:a3:56:38:aa:ea:c7:f8:42:6b:2a:
                    9e:75:e4:fa:e9:ec:de:13:eb:e9:fc:ad:1f:7b:bb:
                    ad:fa:63:f0:65:a4:05:e7:2a:95:44:ad:e6:b9:3e:
                    60:5f:ed:db:1d:e9:fa:62:8f:e7:62:8f:da:b9:59:
                    ed:5e:39:d4:d1:37:21:bf:af:7b:c4:18:1c:fa:e3:
                    42:7b:e8:6e:5c:cf:42:d8:6a:c4:c5:81:10:37:7f:
                    e3:b3:ee:22:85:1e:da:c2:bc:08:ed:04:94:25:eb:
                    be:a0:fb:a0:18:0e:8b:98:f7:06:e7:2d:bf:80:cb:
                    34:3d:d0:d9:2a:74:65:bd:f9:dd:58:05:7e:65:b8:
                    73:86:05:9f:f8:62:b0:4f:9b:cd:39:2f:cb:a4:e5:
                    59:0a:d6:d9:2d:ab:9d:35:74:b2:a1:3a:69:50:7d:
                    d2:9d:17:c9:3b:33:b2:07:71:90:ad:d1:5c:74:d1:
                    9f:e7:c9:fe:f8:56:70:60:d9:f9:40:19:10:21:72:
                    6e:8d:8a:79:8e:81:fb:b9:93:a2:1d:ca:fc:96:29:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:68:11:1A:AE:9D:63:B5:19:74:FD:19:82:44:FA:D8:12:5B:C8:29
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134302e3130382e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:40:95:e0:66:ea:a0:80:ce:c1:0d:aa:57:ed:b3:af:57:fa:
         25:3f:58:02:8b:2d:c2:8a:c2:05:ce:e7:10:b6:90:8c:44:47:
         91:a2:27:bf:90:60:e3:46:ed:54:59:44:b9:67:56:e7:8f:05:
         e6:85:87:3b:31:ae:a6:c9:56:d8:8d:1d:c7:4a:3a:41:f1:dd:
         85:83:4e:54:fb:23:e3:97:cd:a9:14:a3:eb:b0:a8:47:29:81:
         1f:ec:b2:ea:d3:2b:38:72:0f:6a:5b:58:d6:e5:5e:a7:3a:e7:
         6d:33:1a:36:01:e9:df:d3:6e:0a:e8:ca:97:2b:6a:f3:cb:fd:
         c0:4f:84:65:1a:3f:fd:fa:06:af:3e:93:1e:d3:87:df:64:ba:
         07:fd:61:ed:93:cf:93:05:23:a6:b2:63:23:9a:63:76:5e:fd:
         9b:e0:a9:82:7a:30:44:f7:0c:e4:f8:99:46:c3:e8:56:eb:26:
         58:6f:03:ae:a6:cd:3e:34:11:40:0d:a3:05:d5:f9:3e:2a:d1:
         df:62:5e:73:b3:6d:87:8c:e2:32:c0:29:65:e9:91:2d:2b:93:
         c6:32:89:36:27:10:95:a3:c1:f0:48:c0:04:44:61:11:a0:9a:
         50:aa:c0:57:49:b6:11:a3:d8:c1:ef:50:a9:06:ff:d5:db:70:
         3c:43:c0:c1
-----BEGIN CERTIFICATE-----
MIIHATCCBemgAwIBAgIUf2tDTAQ+ZyZ3OJCGMNye5zli4IAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIwMjA2Mjc0OFoX
DTIzMDIwMjA2MzI0OFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCNTQyOUJBQTA4NDU1NjFFNDkyNEI5Mjk2NjMxM0NEOEFBNEY4MjM3OTA3
OEY3MTUwRjMxQTk1MERCN0QyODVCRDg3ODQ2QzE0N0E1ODU1MUE5QUFGNkIwMTE2
RThBODREMUEzNTYzOEFBRUFDN0Y4NDI2QjJBOUU3NUU0RkFFOUVDREUxM0VCRTlG
Q0FEMUY3QkJCQURGQTYzRjA2NUE0MDVFNzJBOTU0NEFERTZCOTNFNjA1RkVEREIx
REU5RkE2MjhGRTc2MjhGREFCOTU5RUQ1RTM5RDREMTM3MjFCRkFGN0JDNDE4MUNG
QUUzNDI3QkU4NkU1Q0NGNDJEODZBQzRDNTgxMTAzNzdGRTNCM0VFMjI4NTFFREFD
MkJDMDhFRDA0OTQyNUVCQkVBMEZCQTAxODBFOEI5OEY3MDZFNzJEQkY4MENCMzQz
REQwRDkyQTc0NjVCREY5REQ1ODA1N0U2NUI4NzM4NjA1OUZGODYyQjA0RjlCQ0Qz
OTJGQ0JBNEU1NTkwQUQ2RDkyREFCOUQzNTc0QjJBMTNBNjk1MDdERDI5RDE3Qzkz
QjMzQjIwNzcxOTBBREQxNUM3NEQxOUZFN0M5RkVGODU2NzA2MEQ5Rjk0MDE5MTAy
MTcyNkU4RDhBNzk4RTgxRkJCOTkzQTIxRENBRkM5NjI5QTBFQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QpuqCEVWHkkkuSlmMTzY
qk+CN5B49xUPMalQ230oW9h4RsFHpYVRqar2sBFuioTRo1Y4qurH+EJrKp515Prp
7N4T6+n8rR97u636Y/BlpAXnKpVErea5PmBf7dsd6fpij+dij9q5We1eOdTRNyG/
r3vEGBz640J76G5cz0LYasTFgRA3f+Oz7iKFHtrCvAjtBJQl676g+6AYDouY9wbn
Lb+AyzQ90NkqdGW9+d1YBX5luHOGBZ/4YrBPm805L8uk5VkK1tktq501dLKhOmlQ
fdKdF8k7M7IHcZCt0Vx00Z/nyf74VnBg2flAGRAhcm6NinmOgfu5k6IdyvyWKaDr
AgMBAAGjggH4MIIB9DAdBgNVHQ4EFgQUCWgRGq6dY7UZdP0ZgkT62BJbyCkwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB8BggrBgEF
BQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTM0MzAyZTMxMzAzODJlMzAyZjMy
MzMyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4xsMA0GCSqGSIb3DQEBCwUA
A4IBAQAIQJXgZuqggM7BDapX7bOvV/olP1gCiy3CisIFzucQtpCMREeRoie/kGDj
Ru1UWUS5Z1bnjwXmhYc7Ma6myVbYjR3HSjpB8d2Fg05U+yPjl82pFKPrsKhHKYEf
7LLq0ys4cg9qW1jW5V6nOudtMxo2Aenf024K6MqXK2rzy/3AT4RlGj/9+gavPpMe
04ffZLoH/WHtk8+TBSOmsmMjmmN2Xv2b4KmCejBE9wzk+JlGw+hW6yZYbwOups0+
NBFADaMF1fk+KtHfYl5zs22HjOIywCll6ZEtK5PGMok2JxCVo8HwSMAERGERoJpQ
qsBXSbYRo9jB71CpBv/V23A8Q8DB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org