Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134312e34302e302f32332d3234203d3e20313338383934.roa
File:                     3130332e3134312e34302e302f32332d3234203d3e20313338383934.roa (raw, json)
Hash identifier:          AgqVVepKlt2YSk9FtnEI3TE4XB5CQfK2Tf5FEC6Tyw8=
Subject key identifier:   A2:B3:8D:92:08:57:AF:B4:FC:24:70:CA:B8:98:D3:0D:9D:5B:22:A6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7E19FEF20C2585C67D0C562EC2CEE260DFAF1893
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134312e34302e302f32332d3234203d3e20313338383934.roa
Signing time:             Mon 06 Sep 2021 07:58:54 +0000
ROA not before:           Mon 06 Sep 2021 07:53:54 +0000
ROA not after:            Tue 06 Sep 2022 07:58:54 +0000
asID:                     138894
IP address blocks:        103.141.40.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:19:fe:f2:0c:25:85:c6:7d:0c:56:2e:c2:ce:e2:60:df:af:18:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  6 07:53:54 2021 GMT
            Not After : Sep  6 07:58:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:8d:4e:24:de:5e:af:76:f8:f6:a9:d0:64:
                    b1:54:ed:3a:15:61:fd:48:19:48:17:05:36:61:9e:
                    8a:8d:9c:48:8d:47:3b:22:60:88:30:dc:ea:1c:eb:
                    dd:97:26:30:6b:8f:b6:95:04:c9:11:5a:bf:23:a1:
                    74:04:46:c5:f1:e9:b3:3c:51:44:f4:2d:c8:6a:e4:
                    70:d7:6b:46:ec:8c:81:d0:d2:f8:2b:5c:20:9d:ba:
                    09:11:28:fd:e9:03:85:cd:67:f7:cd:a8:da:55:07:
                    1f:07:38:17:7f:6a:fe:a9:f0:fa:30:18:b4:1c:07:
                    d2:2d:6f:24:43:e9:b3:db:a1:a9:47:cf:15:ff:84:
                    ee:89:47:42:2e:3a:cd:83:a6:ef:32:2b:31:2f:47:
                    c3:85:f8:87:d8:57:d7:6b:0d:3c:9e:f3:85:59:45:
                    0b:44:97:b1:e6:eb:75:51:21:a1:a8:7e:e1:d4:3a:
                    15:c9:a9:d4:17:c8:9e:48:25:ad:d9:0d:d1:13:cb:
                    1e:a1:01:80:6b:d3:67:b5:5a:4e:f4:0f:19:f3:3b:
                    e4:5a:bb:eb:06:b5:f8:7f:1d:4d:db:ac:2c:03:e9:
                    38:0d:38:b5:39:c2:39:10:3f:f0:cc:de:59:ba:6f:
                    bc:94:d0:e8:45:e2:fd:ca:ba:29:f3:41:2d:8d:18:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B3:8D:92:08:57:AF:B4:FC:24:70:CA:B8:98:D3:0D:9D:5B:22:A6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134312e34302e302f32332d3234203d3e20313338383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:62:d2:cc:22:f4:3e:71:e6:37:a5:f5:b4:ee:2e:eb:15:2a:
         1c:97:65:de:1d:ab:b5:04:a6:73:00:ac:ed:88:60:0e:bb:3a:
         7b:03:e4:4c:20:59:cb:a2:dc:79:ae:0e:88:1e:d3:85:f1:37:
         1c:77:9c:1e:2d:aa:3a:a3:83:6a:db:de:33:86:16:3e:8b:bc:
         17:86:2f:a7:24:84:ba:18:e6:40:31:49:7a:31:fb:df:82:1d:
         ee:1f:5c:23:07:5c:c0:8c:ab:cd:6e:74:00:c9:42:56:a8:d7:
         d3:ca:e5:62:a0:f4:38:6b:e8:8f:19:62:c6:6d:76:19:25:eb:
         84:ed:c8:35:20:95:9f:92:42:4b:97:bd:ba:cd:5a:c3:10:e2:
         a9:b3:bf:33:8c:70:5f:0f:55:13:5d:d9:df:2c:97:5f:30:36:
         f0:4e:b1:97:61:a7:80:fa:6c:84:2a:ef:ad:1f:5a:ad:b3:a3:
         c2:a6:4e:3d:a7:cb:00:eb:37:44:5b:a1:29:c0:0d:84:b6:9a:
         d5:ad:43:7d:ed:10:d0:d3:0c:19:af:df:3f:05:e9:8a:c5:a0:
         39:8e:6f:fe:a7:5f:93:8d:0b:29:49:f6:9c:d8:df:af:29:2f:
         cf:82:2b:6b:3a:ed:9b:9c:51:6d:25:c4:0d:b9:4f:d1:2e:d3:
         fa:c2:f9:dc
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUfhn+8gwlhcZ9DFYuws7iYN+vGJMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkwNjA3NTM1NFoX
DTIyMDkwNjA3NTg1NFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDQkUyOEQ0RTI0REU1RUFGNzZGOEY2QTlEMDY0QjE1NEVEM0ExNTYxRkQ0
ODE5NDgxNzA1MzY2MTlFOEE4RDlDNDg4RDQ3M0IyMjYwODgzMERDRUExQ0VCREQ5
NzI2MzA2QjhGQjY5NTA0QzkxMTVBQkYyM0ExNzQwNDQ2QzVGMUU5QjMzQzUxNDRG
NDJEQzg2QUU0NzBENzZCNDZFQzhDODFEMEQyRjgyQjVDMjA5REJBMDkxMTI4RkRF
OTAzODVDRDY3RjdDREE4REE1NTA3MUYwNzM4MTc3RjZBRkVBOUYwRkEzMDE4QjQx
QzA3RDIyRDZGMjQ0M0U5QjNEQkExQTk0N0NGMTVGRjg0RUU4OTQ3NDIyRTNBQ0Q4
M0E2RUYzMjJCMzEyRjQ3QzM4NUY4ODdEODU3RDc2QjBEM0M5RUYzODU1OTQ1MEI0
NDk3QjFFNkVCNzU1MTIxQTFBODdFRTFENDNBMTVDOUE5RDQxN0M4OUU0ODI1QURE
OTBERDExM0NCMUVBMTAxODA2QkQzNjdCNTVBNEVGNDBGMTlGMzNCRTQ1QUJCRUIw
NkI1Rjg3RjFENEREQkFDMkMwM0U5MzgwRDM4QjUzOUMyMzkxMDNGRjBDQ0RFNTlC
QTZGQkM5NEQwRTg0NUUyRkRDQUJBMjlGMzQxMkQ4RDE4ODIwOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4o1OJN5er3b49qnQZLFU
7ToVYf1IGUgXBTZhnoqNnEiNRzsiYIgw3Ooc692XJjBrj7aVBMkRWr8joXQERsXx
6bM8UUT0Lchq5HDXa0bsjIHQ0vgrXCCdugkRKP3pA4XNZ/fNqNpVBx8HOBd/av6p
8PowGLQcB9ItbyRD6bPboalHzxX/hO6JR0IuOs2Dpu8yKzEvR8OF+IfYV9drDTye
84VZRQtEl7Hm63VRIaGofuHUOhXJqdQXyJ5IJa3ZDdETyx6hAYBr02e1Wk70Dxnz
O+Rau+sGtfh/HU3brCwD6TgNOLU5wjkQP/DM3lm6b7yU0OhF4v3KuinzQS2NGIIJ
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUorONkghXr7T8JHDKuJjTDZ1bIqYwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNDMxMmUzNDMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ40oMA0GCSqG
SIb3DQEBCwUAA4IBAQCTYtLMIvQ+ceY3pfW07i7rFSocl2XeHau1BKZzAKztiGAO
uzp7A+RMIFnLotx5rg6IHtOF8Tccd5weLao6o4Nq294zhhY+i7wXhi+nJIS6GOZA
MUl6Mfvfgh3uH1wjB1zAjKvNbnQAyUJWqNfTyuVioPQ4a+iPGWLGbXYZJeuE7cg1
IJWfkkJLl726zVrDEOKps78zjHBfD1UTXdnfLJdfMDbwTrGXYaeA+myEKu+tH1qt
s6PCpk49p8sA6zdEW6EpwA2EtprVrUN97RDQ0wwZr98/BemKxaA5jm/+p1+TjQsp
Sfac2N+vKS/PgitrOu2bnFFtJcQNuU/RLtP6wvnc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org