Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3130392e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3130392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          GWKSiLR3FEgi4Gnu/KP9NZt+Ot8mM2K8DHCB6AMfXw8=
Subject key identifier:   8F:A6:C3:2D:24:EF:CF:A2:BD:DC:D9:EE:D6:E9:E7:B7:37:DB:7E:05
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4D0B23433C22DA51D06B87C8D53197080C91BCFF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3130392e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:12 +0000
ROA not before:           Thu 01 Jul 2021 07:55:12 +0000
ROA not after:            Fri 01 Jul 2022 08:00:12 +0000
asID:                     131111
IP address blocks:        103.154.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0b:23:43:3c:22:da:51:d0:6b:87:c8:d5:31:97:08:0c:91:bc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:12 2021 GMT
            Not After : Jul  1 08:00:12 2022 GMT
        Subject: CN=3082010A0282010100ADA7514A631A9BEA45E978D4E1AEDC82FD5AB48E5F398759CA45B3B5DEDF527CC57C15C67176971BC7E975711F8C946E5137B6404C5FAB9CEBD913E80A61FB9E567A15F913D28C68D3F12C47E8020F491F0DFBADAF5E22228AB11B9BC0ABEE408243B2662F56CBDCD913694FB4114AAC8CE90244FD7AB40E0D609B9D53C8AEE6B034B46DC5D9D08E4EBBF9D511A9D0D28F1CDC726336DDAAF1FE0B20711733AA97A682320A9A5FE7F0F64896C0A6AB3AC99360FB6176EC081731001670B900EFC181254FAB2C3CCAEA83C0339BEDA7624985BEF344368DF11BE8AB40446924D6E2BB04D916A7BF779A721AC7639A62581536FD5AE0CC1903400610B13D7110D90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:51:4a:63:1a:9b:ea:45:e9:78:d4:e1:ae:
                    dc:82:fd:5a:b4:8e:5f:39:87:59:ca:45:b3:b5:de:
                    df:52:7c:c5:7c:15:c6:71:76:97:1b:c7:e9:75:71:
                    1f:8c:94:6e:51:37:b6:40:4c:5f:ab:9c:eb:d9:13:
                    e8:0a:61:fb:9e:56:7a:15:f9:13:d2:8c:68:d3:f1:
                    2c:47:e8:02:0f:49:1f:0d:fb:ad:af:5e:22:22:8a:
                    b1:1b:9b:c0:ab:ee:40:82:43:b2:66:2f:56:cb:dc:
                    d9:13:69:4f:b4:11:4a:ac:8c:e9:02:44:fd:7a:b4:
                    0e:0d:60:9b:9d:53:c8:ae:e6:b0:34:b4:6d:c5:d9:
                    d0:8e:4e:bb:f9:d5:11:a9:d0:d2:8f:1c:dc:72:63:
                    36:dd:aa:f1:fe:0b:20:71:17:33:aa:97:a6:82:32:
                    0a:9a:5f:e7:f0:f6:48:96:c0:a6:ab:3a:c9:93:60:
                    fb:61:76:ec:08:17:31:00:16:70:b9:00:ef:c1:81:
                    25:4f:ab:2c:3c:ca:ea:83:c0:33:9b:ed:a7:62:49:
                    85:be:f3:44:36:8d:f1:1b:e8:ab:40:44:69:24:d6:
                    e2:bb:04:d9:16:a7:bf:77:9a:72:1a:c7:63:9a:62:
                    58:15:36:fd:5a:e0:cc:19:03:40:06:10:b1:3d:71:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A6:C3:2D:24:EF:CF:A2:BD:DC:D9:EE:D6:E9:E7:B7:37:DB:7E:05
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3130392e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:38:a8:84:86:f6:75:b8:31:c9:16:a7:ee:62:69:03:f9:ca:
         0b:3f:da:5a:cd:d5:e0:76:e8:7d:80:1f:f3:14:d1:a9:81:b2:
         73:d9:2d:33:2f:89:7c:50:d4:69:65:5d:af:3a:ed:ed:da:b9:
         03:37:b5:0b:71:72:a5:c7:41:81:ad:59:40:d7:f7:65:23:b5:
         c1:7e:be:f1:44:b5:86:bb:6f:82:8f:76:68:98:98:cf:e0:b2:
         ed:20:3c:5e:ac:d1:8b:cf:a5:b1:c1:85:f7:b5:49:f9:9a:e0:
         d8:eb:6e:e1:06:47:1d:a1:3a:bb:b9:1f:ff:4a:17:59:64:c9:
         32:ce:63:2d:0d:6a:4b:c3:32:28:41:5a:18:eb:f6:b8:66:d9:
         30:cf:05:cd:23:c7:12:5b:d2:2a:ec:e4:42:f6:15:29:7c:ec:
         37:69:ec:d9:57:9c:c0:7a:49:05:91:a3:06:2e:d9:6a:e7:75:
         3d:7e:ce:8d:65:2e:28:7a:15:00:6d:a4:bf:d0:bb:a5:e2:4b:
         b2:64:62:59:74:28:a2:f6:9e:3a:a5:15:f0:0f:75:dd:59:d5:
         fa:40:7f:a1:e4:3c:91:cb:9c:52:3b:8d:86:ab:c3:b1:0d:27:
         01:e4:ea:93:fa:4a:96:73:5e:bf:0f:d7:22:1e:ed:ea:34:9f:
         d5:83:23:cb
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUTQsjQzwi2lHQa4fI1TGXCAyRvP8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUxMloX
DTIyMDcwMTA4MDAxMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBREE3NTE0QTYzMUE5QkVBNDVFOTc4RDRFMUFFREM4MkZENUFCNDhFNUYz
OTg3NTlDQTQ1QjNCNURFREY1MjdDQzU3QzE1QzY3MTc2OTcxQkM3RTk3NTcxMUY4
Qzk0NkU1MTM3QjY0MDRDNUZBQjlDRUJEOTEzRTgwQTYxRkI5RTU2N0ExNUY5MTNE
MjhDNjhEM0YxMkM0N0U4MDIwRjQ5MUYwREZCQURBRjVFMjIyMjhBQjExQjlCQzBB
QkVFNDA4MjQzQjI2NjJGNTZDQkRDRDkxMzY5NEZCNDExNEFBQzhDRTkwMjQ0RkQ3
QUI0MEUwRDYwOUI5RDUzQzhBRUU2QjAzNEI0NkRDNUQ5RDA4RTRFQkJGOUQ1MTFB
OUQwRDI4RjFDREM3MjYzMzZEREFBRjFGRTBCMjA3MTE3MzNBQTk3QTY4MjMyMEE5
QTVGRTdGMEY2NDg5NkMwQTZBQjNBQzk5MzYwRkI2MTc2RUMwODE3MzEwMDE2NzBC
OTAwRUZDMTgxMjU0RkFCMkMzQ0NBRUE4M0MwMzM5QkVEQTc2MjQ5ODVCRUYzNDQz
NjhERjExQkU4QUI0MDQ0NjkyNEQ2RTJCQjA0RDkxNkE3QkY3NzlBNzIxQUM3NjM5
QTYyNTgxNTM2RkQ1QUUwQ0MxOTAzNDAwNjEwQjEzRDcxMTBEOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtp1FKYxqb6kXpeNThrtyC
/Vq0jl85h1nKRbO13t9SfMV8FcZxdpcbx+l1cR+MlG5RN7ZATF+rnOvZE+gKYfue
VnoV+RPSjGjT8SxH6AIPSR8N+62vXiIiirEbm8Cr7kCCQ7JmL1bL3NkTaU+0EUqs
jOkCRP16tA4NYJudU8iu5rA0tG3F2dCOTrv51RGp0NKPHNxyYzbdqvH+CyBxFzOq
l6aCMgqaX+fw9kiWwKarOsmTYPthduwIFzEAFnC5AO/BgSVPqyw8yuqDwDOb7adi
SYW+80Q2jfEb6KtARGkk1uK7BNkWp793mnIax2OaYlgVNv1a4MwZA0AGELE9cRDZ
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUj6bDLSTvz6K93Nnu1unntzfbfgUwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMTMwMzkyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmm0wDQYJKoZIhvcN
AQELBQADggEBAG84qISG9nW4MckWp+5iaQP5ygs/2lrN1eB26H2AH/MU0amBsnPZ
LTMviXxQ1GllXa867e3auQM3tQtxcqXHQYGtWUDX92UjtcF+vvFEtYa7b4KPdmiY
mM/gsu0gPF6s0YvPpbHBhfe1Sfma4NjrbuEGRx2hOru5H/9KF1lkyTLOYy0NakvD
MihBWhjr9rhm2TDPBc0jxxJb0irs5EL2FSl87Ddp7NlXnMB6SQWRowYu2WrndT1+
zo1lLih6FQBtpL/Qu6XiS7JkYll0KKL2njqlFfAPdd1Z1fpAf6HkPJHLnFI7jYar
w7ENJwHk6pP6SpZzXr8P1yIe7eo0n9WDI8s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org