Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e31382e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3135312e31382e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          /IP/bXpM7U1/X3GuJEKbRIbm/VkBQnWWYP1jXnb4dTg=
Subject key identifier:   13:47:40:24:05:8E:1E:62:43:AD:2F:AD:58:7D:DA:F2:28:62:A5:52
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0D820191C1E75F5F75C0FE864FD483B9A32EBA29
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e31382e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:00 +0000
ROA not before:           Fri 05 Nov 2021 16:55:00 +0000
ROA not after:            Sat 05 Nov 2022 17:00:00 +0000
asID:                     133815
IP address blocks:        103.151.18.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:82:01:91:c1:e7:5f:5f:75:c0:fe:86:4f:d4:83:b9:a3:2e:ba:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:00 2021 GMT
            Not After : Nov  5 17:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:11:fd:06:ac:f0:2d:c9:0a:fc:85:cd:06:
                    a4:9f:2d:93:f7:4a:35:4d:88:fa:1f:04:8b:b3:8e:
                    0e:0c:a4:a8:95:3a:8c:63:f3:60:01:32:7c:27:ce:
                    90:72:56:6c:38:fe:54:cc:72:d5:49:27:ea:c8:fd:
                    b5:54:dc:93:8d:58:71:62:75:86:09:22:76:ed:65:
                    4d:37:30:17:b2:51:bd:21:27:7b:b6:21:3d:e4:85:
                    a7:3b:97:11:4a:97:2b:97:0d:31:a3:dd:7c:f0:c5:
                    bd:d7:95:ed:15:8d:2c:95:8b:3b:ac:19:2a:71:1f:
                    ac:ee:5c:0e:7e:9e:e1:c5:18:8c:70:a1:11:68:2a:
                    50:d1:6f:7c:46:4a:87:1e:fa:4e:65:af:92:24:c5:
                    01:62:4a:2d:33:84:8b:92:2c:5b:5d:41:6d:4b:83:
                    67:bb:e2:e9:16:a1:5e:24:b0:7b:1d:04:e9:44:68:
                    d2:f1:84:25:34:4c:fe:06:bf:ee:af:e3:90:56:2a:
                    27:01:17:b2:fd:91:35:eb:d3:5c:16:2f:e6:64:81:
                    0a:06:28:fd:61:06:b7:76:a9:ee:dd:4e:56:5f:09:
                    22:50:c0:9d:0a:c5:34:e1:23:0c:1c:8b:ff:32:05:
                    2e:7e:a5:0d:27:dd:5f:d4:36:ba:97:44:f0:ee:ae:
                    d6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:47:40:24:05:8E:1E:62:43:AD:2F:AD:58:7D:DA:F2:28:62:A5:52
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e31382e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:84:58:bf:4e:90:30:4d:b0:cc:a0:f8:d0:36:91:87:2d:2c:
         b7:d0:bb:7a:d1:47:a2:07:05:df:2e:c5:27:99:f7:42:7d:af:
         41:94:8d:e2:07:82:60:17:79:2a:ca:80:1b:83:55:02:24:95:
         e4:48:3c:06:27:1e:df:da:b0:38:3b:e3:22:4f:77:50:91:ca:
         4c:da:62:46:ba:84:15:8d:95:dd:2b:c3:79:0f:7e:d5:4b:11:
         ea:dd:d0:67:f3:70:7a:46:45:1f:14:b8:c6:fe:9d:75:ea:7a:
         11:18:72:0a:34:44:8c:21:fb:5f:ab:0c:16:47:ac:d9:0a:9f:
         51:e1:85:4a:96:77:ac:5c:0b:31:cc:ea:84:95:38:15:7f:55:
         db:1b:32:32:ae:d2:63:1b:58:f8:80:6b:6b:99:44:08:58:95:
         39:91:e6:a4:2c:24:bf:71:e3:34:b7:60:ad:99:a6:fb:c7:86:
         f1:85:9e:aa:95:62:0e:60:5f:7b:f2:c6:9c:e6:aa:0a:33:b0:
         ca:a9:b0:a0:f4:68:69:a5:b0:96:9b:8f:fe:d8:33:f7:51:28:
         39:cf:d8:fa:10:d4:52:ce:9d:3d:0f:4d:e6:a2:9d:a8:21:fe:
         a1:89:f6:83:8e:f4:15:f7:ba:95:5e:f6:5f:db:44:62:98:6c:
         9d:d0:67:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org