Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139342e302f32332d3234203d3e20313333383030.roa
File:                     3130332e3135302e3139342e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          WwzfdDTXyXReBENNMMyax5BX9zFvWUqh6v3oHjwMmsw=
Subject key identifier:   71:21:A3:20:C1:EA:5F:17:0A:B1:CD:ED:8C:C7:58:5F:9E:3C:CB:37
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       28602011998A2BC92DD054BCBBE63AD3FB11A813
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139342e302f32332d3234203d3e20313333383030.roa
Signing time:             Sat 05 Mar 2022 21:00:01 +0000
ROA not before:           Sat 05 Mar 2022 20:55:01 +0000
ROA not after:            Sat 04 Mar 2023 21:00:01 +0000
asID:                     133800
IP address blocks:        103.150.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:60:20:11:99:8a:2b:c9:2d:d0:54:bc:bb:e6:3a:d3:fb:11:a8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  5 20:55:01 2022 GMT
            Not After : Mar  4 21:00:01 2023 GMT
        Subject: CN=7121A320C1EA5F170AB1CDED8CC7585F9E3CCB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:e8:b9:ef:b5:ff:2f:a9:85:03:6c:c4:b2:
                    79:9c:b5:56:39:98:e1:38:20:4a:84:6a:00:f7:63:
                    72:98:71:82:55:73:7e:db:f8:95:66:35:0f:f6:e2:
                    66:89:ed:15:96:46:1f:e8:e5:0f:d6:a5:7e:60:23:
                    25:95:df:6c:5b:47:82:29:52:16:92:0d:7d:6b:a3:
                    1e:b2:90:b1:67:0a:22:42:2f:08:dc:59:22:1a:5f:
                    f0:6b:3b:84:6b:9c:c5:53:b4:91:a7:6c:a0:4e:8a:
                    d1:1c:51:56:16:fc:0d:4a:fb:1c:25:6b:cf:b5:39:
                    43:48:37:fb:17:b9:c1:a1:99:9d:11:c0:46:35:05:
                    7a:a5:e3:69:45:67:d0:09:ce:50:67:67:ab:24:a8:
                    c1:ed:65:73:84:22:1b:f3:78:d1:a0:d1:40:15:25:
                    09:2a:c3:4f:40:29:65:86:0b:87:b5:49:9c:47:12:
                    12:13:61:56:d9:a4:42:f3:7e:85:d8:56:59:06:7d:
                    03:a7:ac:ae:e9:34:3a:b7:3b:66:da:69:83:bc:1f:
                    66:f6:89:8a:05:ed:b6:84:66:da:58:85:4e:70:56:
                    c0:a8:be:24:c6:2f:73:85:f2:78:3c:1c:89:dc:06:
                    53:8d:47:ef:b3:8e:72:c1:9e:e4:ec:99:ab:a0:39:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:21:A3:20:C1:EA:5F:17:0A:B1:CD:ED:8C:C7:58:5F:9E:3C:CB:37
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139342e302f32332d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:47:32:3e:be:69:71:ef:22:31:2b:9f:3e:7f:0e:4e:2e:17:
         b5:b5:d9:10:40:1a:58:6d:58:ef:8e:3c:27:35:0f:c5:b2:20:
         4e:fd:d1:ca:90:7f:89:d8:2b:0e:48:c7:d0:9d:97:1f:bb:b1:
         fd:d3:b4:d0:8b:88:38:13:c8:72:68:c4:08:ef:d4:0b:46:4e:
         14:f2:8a:e2:83:f8:31:8f:5a:ee:6f:d9:7b:32:3f:9c:ef:7d:
         a5:9c:29:a3:73:5f:f8:53:e1:87:ea:fb:9d:28:36:6f:a1:17:
         12:ea:4c:5c:37:f3:97:8c:8f:d2:8a:30:93:54:2e:ac:cb:d9:
         7c:aa:08:ea:51:bb:99:df:b2:92:5f:a3:99:bf:54:fc:f0:bb:
         fa:07:97:37:00:6e:57:a0:3c:d6:4b:bd:44:a7:17:8e:cd:a3:
         5c:eb:ca:d8:90:a5:32:22:4a:ed:1f:6e:78:87:3b:81:c1:61:
         1f:ec:52:35:21:fd:d8:2a:27:93:f7:00:bf:d6:01:be:2b:aa:
         00:26:ef:d9:c8:e8:e4:c1:14:8e:39:c3:51:cc:36:c1:59:02:
         f9:2c:69:2a:16:98:82:d1:20:86:ef:db:10:3e:37:96:bc:64:
         e2:51:37:8d:eb:d3:c5:ce:09:99:67:7f:d4:7a:57:1e:45:9f:
         a7:63:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org