Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134312e3134382e302f32332d3234203d3e20313338383930.roa
File:                     3130332e3134312e3134382e302f32332d3234203d3e20313338383930.roa (raw, json)
Hash identifier:          SJBTDfxZwOs1k0D1w1RAJLKTyxt8GW5K7AYvXb8K8Lo=
Subject key identifier:   6A:B9:23:9E:CC:76:3F:26:C1:B2:57:9F:4C:C8:8A:F6:E9:F4:28:EC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6891ED1EFCA5B8A89150CB3C1FE8F1FFFCCC6045
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134312e3134382e302f32332d3234203d3e20313338383930.roa
Signing time:             Thu 30 Sep 2021 03:37:22 +0000
ROA not before:           Thu 30 Sep 2021 03:32:22 +0000
ROA not after:            Fri 30 Sep 2022 03:37:22 +0000
asID:                     138890
IP address blocks:        103.141.148.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:91:ed:1e:fc:a5:b8:a8:91:50:cb:3c:1f:e8:f1:ff:fc:cc:60:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 30 03:32:22 2021 GMT
            Not After : Sep 30 03:37:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a1:dd:66:94:92:1c:1e:dd:03:5a:8b:91:2c:
                    1a:81:43:72:a0:f2:00:ec:eb:eb:6c:5b:7c:09:7e:
                    21:b9:18:cf:aa:d0:5e:92:6a:6b:6a:b2:95:37:11:
                    df:be:53:b8:e6:c4:ff:41:40:a6:05:56:b8:7b:96:
                    c3:26:66:b4:77:86:0b:9f:84:b5:3b:42:98:39:67:
                    7c:48:27:98:28:59:a2:33:00:dc:60:5b:02:b9:20:
                    72:ae:8b:06:b4:44:a6:fc:d4:a5:2f:87:0c:4c:fa:
                    d8:11:53:f7:53:1f:6c:82:26:0d:7a:38:99:4f:c4:
                    3b:fc:3f:3d:a1:2c:f7:61:24:5e:df:21:d2:b9:b9:
                    b0:11:89:8a:49:d2:21:f1:9d:29:b3:78:a1:cd:c3:
                    3e:0a:ec:ef:bd:ca:c4:03:a1:79:27:a2:b0:c2:23:
                    cd:a2:3d:6b:af:69:54:b4:91:3f:41:82:95:9f:9b:
                    6a:7b:3a:17:3d:e0:de:22:3c:6f:6c:76:a6:a9:91:
                    ce:8d:b1:ad:9d:b5:1e:88:67:00:a1:68:43:45:60:
                    1c:13:5c:13:6d:7c:d9:a3:2d:48:8d:a1:f5:31:86:
                    86:ca:be:5f:e6:f4:16:14:de:13:ee:7c:0b:99:e5:
                    f0:ae:f7:da:de:db:0c:e9:38:eb:c5:7a:ac:58:75:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B9:23:9E:CC:76:3F:26:C1:B2:57:9F:4C:C8:8A:F6:E9:F4:28:EC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134312e3134382e302f32332d3234203d3e20313338383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:c7:17:e2:da:61:cd:72:8e:2d:74:f4:65:7b:6e:7e:8b:
         63:88:12:40:41:6d:0a:41:e2:3a:e6:d9:dc:47:35:9b:6e:8c:
         27:88:19:ac:db:3d:43:83:bd:c5:5d:e1:44:2f:40:35:ac:b9:
         9c:de:8a:17:91:7f:84:0d:74:94:3a:13:ef:6a:ab:f5:ef:03:
         86:89:6a:bf:56:af:23:d7:e4:96:a2:f4:41:d7:11:0c:e8:6e:
         b6:16:8b:e2:5c:2f:7e:08:d1:31:65:14:e4:25:ea:3c:14:ff:
         e1:e8:5f:0f:16:5f:df:ff:34:17:9c:3d:b4:b2:02:6f:2e:27:
         07:4b:19:3a:3d:0b:9b:b0:a0:42:c3:c7:70:9d:60:7b:27:4e:
         19:7e:13:1b:9c:1c:1d:a4:a3:ad:c7:85:ec:ca:2f:44:49:7e:
         ae:d2:f1:47:9d:91:55:24:a7:23:bb:e3:f6:68:87:4a:a2:7c:
         ce:1e:1f:f0:dc:aa:07:a4:27:83:6d:c5:32:88:01:6b:c7:bd:
         38:ad:e4:32:2c:3e:03:55:2b:5c:02:f9:d1:89:0d:6e:f2:4d:
         cc:83:4f:a8:8e:96:4a:1c:10:6b:13:49:bc:d1:59:0d:1b:b9:
         92:70:81:37:85:6c:4f:d5:14:29:8d:52:68:d6:20:c2:fd:5d:
         eb:26:e5:20
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUaJHtHvyluKiRUMs8H+jx//zMYEUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkzMDAzMzIyMloX
DTIyMDkzMDAzMzcyMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMkExREQ2Njk0OTIxQzFFREQwMzVBOEI5MTJDMUE4MTQzNzJBMEYyMDBF
Q0VCRUI2QzVCN0MwOTdFMjFCOTE4Q0ZBQUQwNUU5MjZBNkI2QUIyOTUzNzExREZC
RTUzQjhFNkM0RkY0MTQwQTYwNTU2Qjg3Qjk2QzMyNjY2QjQ3Nzg2MEI5Rjg0QjUz
QjQyOTgzOTY3N0M0ODI3OTgyODU5QTIzMzAwREM2MDVCMDJCOTIwNzJBRThCMDZC
NDQ0QTZGQ0Q0QTUyRjg3MEM0Q0ZBRDgxMTUzRjc1MzFGNkM4MjI2MEQ3QTM4OTk0
RkM0M0JGQzNGM0RBMTJDRjc2MTI0NUVERjIxRDJCOUI5QjAxMTg5OEE0OUQyMjFG
MTlEMjlCMzc4QTFDREMzM0UwQUVDRUZCRENBQzQwM0ExNzkyN0EyQjBDMjIzQ0RB
MjNENkJBRjY5NTRCNDkxM0Y0MTgyOTU5RjlCNkE3QjNBMTczREUwREUyMjNDNkY2
Qzc2QTZBOTkxQ0U4REIxQUQ5REI1MUU4ODY3MDBBMTY4NDM0NTYwMUMxMzVDMTM2
RDdDRDlBMzJENDg4REExRjUzMTg2ODZDQUJFNUZFNkY0MTYxNERFMTNFRTdDMEI5
OUU1RjBBRUY3REFERURCMENFOTM4RUJDNTdBQUM1ODc1M0M5NzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSod1mlJIcHt0DWouRLBqB
Q3Kg8gDs6+tsW3wJfiG5GM+q0F6SamtqspU3Ed++U7jmxP9BQKYFVrh7lsMmZrR3
hgufhLU7Qpg5Z3xIJ5goWaIzANxgWwK5IHKuiwa0RKb81KUvhwxM+tgRU/dTH2yC
Jg16OJlPxDv8Pz2hLPdhJF7fIdK5ubARiYpJ0iHxnSmzeKHNwz4K7O+9ysQDoXkn
orDCI82iPWuvaVS0kT9BgpWfm2p7Ohc94N4iPG9sdqapkc6Nsa2dtR6IZwChaENF
YBwTXBNtfNmjLUiNofUxhobKvl/m9BYU3hPufAuZ5fCu99re2wzpOOvFeqxYdTyX
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUarkjnsx2PybBslefTMiK9un0KOwwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNDMxMmUzMTM0MzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM5MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnjZQwDQYJ
KoZIhvcNAQELBQADggEBAHrPxxfi2mHNco4tdPRle25+i2OIEkBBbQpB4jrm2dxH
NZtujCeIGazbPUODvcVd4UQvQDWsuZzeiheRf4QNdJQ6E+9qq/XvA4aJar9WryPX
5Jai9EHXEQzobrYWi+JcL34I0TFlFOQl6jwU/+HoXw8WX9//NBecPbSyAm8uJwdL
GTo9C5uwoELDx3CdYHsnThl+ExucHB2ko63HhezKL0RJfq7S8UedkVUkpyO74/Zo
h0qifM4eH/DcqgekJ4NtxTKIAWvHvTit5DIsPgNVK1wC+dGJDW7yTcyDT6iOlkoc
EGsTSbzRWQ0buZJwgTeFbE/VFCmNUmjWIML9Xesm5SA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org