Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3232302e302f32332d3234203d3e20313339393338.roa
File:                     3130332e3134352e3232302e302f32332d3234203d3e20313339393338.roa (raw, json)
Hash identifier:          9s2FIT29yD4WCTwWSVe84LkLEDj8/uXlpxXM+KAFtC4=
Subject key identifier:   17:FB:7E:18:61:D6:23:4C:53:93:EB:EF:7F:79:75:48:BD:64:FF:73
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7A45D3C855E497614D82FF64398E3BA5E9E659CC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3232302e302f32332d3234203d3e20313339393338.roa
Signing time:             Thu 07 Oct 2021 06:50:29 +0000
ROA not before:           Thu 07 Oct 2021 06:45:29 +0000
ROA not after:            Fri 07 Oct 2022 06:50:29 +0000
asID:                     139938
IP address blocks:        103.145.220.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:45:d3:c8:55:e4:97:61:4d:82:ff:64:39:8e:3b:a5:e9:e6:59:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  7 06:45:29 2021 GMT
            Not After : Oct  7 06:50:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:cc:c1:e2:ad:69:f0:46:99:23:e1:02:71:
                    84:6d:22:1f:2a:0c:7c:44:04:e7:92:ce:67:cd:29:
                    fd:63:51:88:fd:d9:cb:31:3b:4a:43:74:e9:e2:4e:
                    92:37:d2:ff:16:b6:85:b5:ff:60:a7:0f:4e:74:85:
                    37:d1:d6:16:14:c0:f4:7f:68:df:6a:26:c0:3b:30:
                    31:77:cf:0e:1d:74:fc:61:4f:45:38:6f:fa:5c:bb:
                    33:5a:c1:fa:4d:ef:9d:84:90:a5:ca:19:c5:db:51:
                    ec:90:80:83:e0:d3:57:0e:54:e1:70:13:b9:cd:68:
                    2e:98:17:f4:ce:1d:01:d4:d8:04:66:19:91:b8:30:
                    bc:c6:e8:6d:cb:67:95:91:7e:27:3d:05:35:36:41:
                    66:a3:15:04:98:34:04:d1:55:51:c7:67:1c:a7:ad:
                    fe:37:c2:e2:82:ec:1e:e1:fe:df:c2:83:01:03:da:
                    ae:d6:5a:b4:39:ea:bb:a2:52:1e:fc:2f:63:41:f8:
                    80:a2:ac:45:ed:6e:81:75:ec:04:0d:e2:85:a5:0f:
                    a5:01:ef:24:cc:a3:f2:da:69:88:04:52:27:73:fb:
                    ff:19:fb:f7:6e:60:6c:f4:d4:02:8c:88:66:5d:f7:
                    35:d2:0c:72:6f:a6:fa:f6:a3:32:5d:6e:08:e3:59:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FB:7E:18:61:D6:23:4C:53:93:EB:EF:7F:79:75:48:BD:64:FF:73
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3232302e302f32332d3234203d3e20313339393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:6f:8a:d2:68:ba:34:43:d6:cd:66:f4:df:a8:57:0d:b4:11:
         1c:14:f5:f0:59:a0:04:2d:1f:15:e3:6b:85:25:f3:0f:7f:cb:
         8c:1c:88:10:58:75:be:25:47:17:4a:dd:4a:52:9b:21:b1:84:
         e8:69:29:b4:0c:0a:96:fb:a1:44:31:e3:d3:89:15:44:9d:63:
         b5:a1:7a:f6:5f:b4:4f:20:ea:f3:48:96:50:ae:c3:19:f5:43:
         76:95:29:95:73:f9:42:a8:95:3b:c9:19:b4:37:91:0a:11:30:
         c8:2b:f6:38:2b:c0:98:8d:ec:60:76:c5:a9:80:1c:23:07:3e:
         37:08:ba:0a:5a:b2:4c:28:9c:bc:25:8b:18:c8:a8:89:e2:f9:
         b3:01:79:f9:57:2d:3a:98:ef:59:e9:e9:f5:a8:d6:a5:a8:be:
         df:c1:e9:9a:9b:d5:a6:e6:00:10:69:f8:96:84:6f:0a:7e:27:
         3b:44:28:66:c1:7c:34:ea:ec:c8:af:74:26:de:4b:fd:40:00:
         83:10:1a:66:43:85:d8:70:7e:26:89:97:5a:12:02:56:f4:be:
         f1:e0:0f:e7:6e:74:fb:67:20:76:62:f1:5b:6c:05:77:fb:5e:
         5b:41:dc:f5:e8:c0:10:77:79:0d:ff:66:77:ac:38:8a:08:78:
         10:69:03:db
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUekXTyFXkl2FNgv9kOY47penmWcwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAwNzA2NDUyOVoX
DTIyMTAwNzA2NTAyOVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDRkE2Q0NDMUUyQUQ2OUYwNDY5OTIzRTEwMjcxODQ2RDIyMUYyQTBDN0M0
NDA0RTc5MkNFNjdDRDI5RkQ2MzUxODhGREQ5Q0IzMTNCNEE0Mzc0RTlFMjRFOTIz
N0QyRkYxNkI2ODVCNUZGNjBBNzBGNEU3NDg1MzdEMUQ2MTYxNEMwRjQ3RjY4REY2
QTI2QzAzQjMwMzE3N0NGMEUxRDc0RkM2MTRGNDUzODZGRkE1Q0JCMzM1QUMxRkE0
REVGOUQ4NDkwQTVDQTE5QzVEQjUxRUM5MDgwODNFMEQzNTcwRTU0RTE3MDEzQjlD
RDY4MkU5ODE3RjRDRTFEMDFENEQ4MDQ2NjE5OTFCODMwQkNDNkU4NkRDQjY3OTU5
MTdFMjczRDA1MzUzNjQxNjZBMzE1MDQ5ODM0MDREMTU1NTFDNzY3MUNBN0FERkUz
N0MyRTI4MkVDMUVFMUZFREZDMjgzMDEwM0RBQUVENjVBQjQzOUVBQkJBMjUyMUVG
QzJGNjM0MUY4ODBBMkFDNDVFRDZFODE3NUVDMDQwREUyODVBNTBGQTUwMUVGMjRD
Q0EzRjJEQTY5ODgwNDUyMjc3M0ZCRkYxOUZCRjc2RTYwNkNGNEQ0MDI4Qzg4NjY1
REY3MzVEMjBDNzI2RkE2RkFGNkEzMzI1RDZFMDhFMzU5NDEwMTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPpszB4q1p8EaZI+ECcYRt
Ih8qDHxEBOeSzmfNKf1jUYj92csxO0pDdOniTpI30v8WtoW1/2CnD050hTfR1hYU
wPR/aN9qJsA7MDF3zw4ddPxhT0U4b/pcuzNawfpN752EkKXKGcXbUeyQgIPg01cO
VOFwE7nNaC6YF/TOHQHU2ARmGZG4MLzG6G3LZ5WRfic9BTU2QWajFQSYNATRVVHH
Zxynrf43wuKC7B7h/t/CgwED2q7WWrQ56ruiUh78L2NB+ICirEXtboF17AQN4oWl
D6UB7yTMo/LaaYgEUidz+/8Z+/duYGz01AKMiGZd9zXSDHJvpvr2ozJdbgjjWUEB
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUF/t+GGHWI0xTk+vvf3l1SL1k/3MwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNDM1MmUzMjMyMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzOTMzMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkdwwDQYJ
KoZIhvcNAQELBQADggEBAI1vitJoujRD1s1m9N+oVw20ERwU9fBZoAQtHxXja4Ul
8w9/y4wciBBYdb4lRxdK3UpSmyGxhOhpKbQMCpb7oUQx49OJFUSdY7WhevZftE8g
6vNIllCuwxn1Q3aVKZVz+UKolTvJGbQ3kQoRMMgr9jgrwJiN7GB2xamAHCMHPjcI
ugpaskwonLwlixjIqIni+bMBeflXLTqY71np6fWo1qWovt/B6Zqb1abmABBp+JaE
bwp+JztEKGbBfDTq7MivdCbeS/1AAIMQGmZDhdhwfiaJl1oSAlb0vvHgD+dudPtn
IHZi8VtsBXf7XltB3PXowBB3eQ3/ZnesOIoIeBBpA9s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org