Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3234342e302f32332d3234203d3e20313332363431.roa
File:                     3130332e3134352e3234342e302f32332d3234203d3e20313332363431.roa (raw, json)
Hash identifier:          ENGYqF5ltkDSOeSSAH9klWwCCqvX/2qCbw4MYil1ks8=
Subject key identifier:   65:84:97:06:3D:77:9C:57:42:0A:A9:E8:82:E6:4A:8D:39:3E:37:B4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       44488F5A3198FB6CC75095E122CB7E73F5034C48
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3234342e302f32332d3234203d3e20313332363431.roa
Signing time:             Mon 14 Jun 2021 04:33:00 +0000
ROA not before:           Mon 14 Jun 2021 04:28:00 +0000
ROA not after:            Tue 14 Jun 2022 04:33:00 +0000
asID:                     132641
IP address blocks:        103.145.244.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:48:8f:5a:31:98:fb:6c:c7:50:95:e1:22:cb:7e:73:f5:03:4c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 14 04:28:00 2021 GMT
            Not After : Jun 14 04:33:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:c9:d9:00:cb:de:d1:de:7e:10:1e:45:e3:
                    e9:f2:83:fd:b8:cc:03:9f:af:07:c2:5c:0d:f3:ce:
                    2b:a6:dd:5c:5e:2c:ab:fe:40:a2:07:8e:3a:04:6e:
                    f5:62:ac:1d:13:66:ea:45:43:9a:66:c6:57:02:22:
                    32:82:84:19:39:0c:86:d1:b7:b7:55:a5:c5:c6:00:
                    8e:16:17:74:77:fb:8a:45:47:4c:b9:5d:fa:c6:d4:
                    cc:8c:94:ea:2e:38:41:b5:ba:78:44:db:41:55:da:
                    55:0b:07:f6:af:6f:42:e6:48:6c:dd:1f:57:77:2e:
                    d4:f2:95:ce:aa:ca:0b:a3:21:fd:56:c9:74:be:84:
                    c3:89:66:f9:24:22:60:65:6d:6f:81:c3:46:c1:23:
                    43:06:7c:c3:63:5b:38:a7:64:e9:cb:c4:a7:d9:8d:
                    71:33:fe:8a:97:45:bd:0c:2f:cd:83:8c:25:66:f3:
                    01:ee:ee:87:ad:b3:26:9d:51:07:cb:b2:03:31:ef:
                    f8:f9:7d:68:45:f9:07:9d:e5:3b:63:8c:a3:52:35:
                    a8:be:9d:12:54:d2:8d:93:78:57:dd:49:fc:41:26:
                    77:c8:d7:28:98:d5:ab:9b:8e:6c:f0:ac:77:15:c6:
                    e4:38:38:4f:53:4f:1d:01:9e:87:2e:43:6f:3c:ba:
                    e6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:84:97:06:3D:77:9C:57:42:0A:A9:E8:82:E6:4A:8D:39:3E:37:B4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3234342e302f32332d3234203d3e20313332363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:6e:51:0b:54:05:73:25:fb:f6:81:cd:02:e6:29:75:05:35:
         23:99:35:43:88:80:b4:ef:55:99:6a:e3:22:fd:af:1e:a7:43:
         65:61:05:ab:8c:4b:30:b4:5f:d7:43:4a:07:76:fc:cc:fa:db:
         d9:46:16:83:65:45:1c:55:73:9c:0f:da:ec:c3:15:89:93:d8:
         17:91:28:46:a9:18:82:8b:43:d5:d3:5d:07:73:14:58:9a:cb:
         71:82:39:78:73:c4:3f:3f:cd:d7:48:f0:6e:eb:b2:cd:21:4c:
         f0:54:5f:cb:bc:16:cc:17:cf:ac:30:46:a3:fd:94:a1:f1:ae:
         5b:5b:dc:f1:82:0b:13:e6:cf:86:4c:59:bf:b6:b0:6c:81:87:
         4d:23:94:68:41:7f:da:f9:b9:51:fd:80:39:78:b6:d6:16:f9:
         c4:9e:c0:43:87:e3:92:73:31:e8:14:54:44:cb:35:91:af:ac:
         5c:d0:4c:4d:c8:e9:c9:de:36:e0:7c:03:59:1a:67:fb:26:4c:
         58:36:56:12:f9:3e:52:37:d5:49:65:26:fa:35:7b:20:95:ff:
         74:c9:6a:60:e1:42:65:4f:d4:d1:71:65:be:7a:a6:51:01:7a:
         d4:b6:5d:74:80:47:71:f4:73:e4:43:39:8f:43:38:25:53:8e:
         ca:7a:3f:1a
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUREiPWjGY+2zHUJXhIst+c/UDTEgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDYxNDA0MjgwMFoX
DTIyMDYxNDA0MzMwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCRTM5QzlEOTAwQ0JERUQxREU3RTEwMUU0NUUzRTlGMjgzRkRCOENDMDM5
RkFGMDdDMjVDMERGM0NFMkJBNkRENUM1RTJDQUJGRTQwQTIwNzhFM0EwNDZFRjU2
MkFDMUQxMzY2RUE0NTQzOUE2NkM2NTcwMjIyMzI4Mjg0MTkzOTBDODZEMUI3Qjc1
NUE1QzVDNjAwOEUxNjE3NzQ3N0ZCOEE0NTQ3NENCOTVERkFDNkQ0Q0M4Qzk0RUEy
RTM4NDFCNUJBNzg0NERCNDE1NURBNTUwQjA3RjZBRjZGNDJFNjQ4NkNERDFGNTc3
NzJFRDRGMjk1Q0VBQUNBMEJBMzIxRkQ1NkM5NzRCRTg0QzM4OTY2RjkyNDIyNjA2
NTZENkY4MUMzNDZDMTIzNDMwNjdDQzM2MzVCMzhBNzY0RTlDQkM0QTdEOThENzEz
M0ZFOEE5NzQ1QkQwQzJGQ0Q4MzhDMjU2NkYzMDFFRUVFODdBREIzMjY5RDUxMDdD
QkIyMDMzMUVGRjhGOTdENjg0NUY5MDc5REU1M0I2MzhDQTM1MjM1QThCRTlEMTI1
NEQyOEQ5Mzc4NTdERDQ5RkM0MTI2NzdDOEQ3Mjg5OEQ1QUI5QjhFNkNGMEFDNzcx
NUM2RTQzODM4NEY1MzRGMUQwMTlFODcyRTQzNkYzQ0JBRTZGRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OcnZAMve0d5+EB5F4+ny
g/24zAOfrwfCXA3zzium3VxeLKv+QKIHjjoEbvVirB0TZupFQ5pmxlcCIjKChBk5
DIbRt7dVpcXGAI4WF3R3+4pFR0y5XfrG1MyMlOouOEG1unhE20FV2lULB/avb0Lm
SGzdH1d3LtTylc6qygujIf1WyXS+hMOJZvkkImBlbW+Bw0bBI0MGfMNjWzinZOnL
xKfZjXEz/oqXRb0ML82DjCVm8wHu7oetsyadUQfLsgMx7/j5fWhF+Qed5TtjjKNS
Nai+nRJU0o2TeFfdSfxBJnfI1yiY1aubjmzwrHcVxuQ4OE9TTx0BnocuQ288uub9
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUZYSXBj13nFdCCqnoguZKjTk+N7QwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNDM1MmUzMjM0MzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzIzNjM0MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkfQwDQYJ
KoZIhvcNAQELBQADggEBAC9uUQtUBXMl+/aBzQLmKXUFNSOZNUOIgLTvVZlq4yL9
rx6nQ2VhBauMSzC0X9dDSgd2/Mz629lGFoNlRRxVc5wP2uzDFYmT2BeRKEapGIKL
Q9XTXQdzFFiay3GCOXhzxD8/zddI8G7rss0hTPBUX8u8FswXz6wwRqP9lKHxrltb
3PGCCxPmz4ZMWb+2sGyBh00jlGhBf9r5uVH9gDl4ttYW+cSewEOH45JzMegUVETL
NZGvrFzQTE3I6cneNuB8A1kaZ/smTFg2VhL5PlI31UllJvo1eyCV/3TJamDhQmVP
1NFxZb56plEBetS2XXSAR3H0c+RDOY9DOCVTjsp6Pxo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org