Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131312e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3131312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          gM3+7buGuLahnOZYywQgDHeTxxVw96zycw+g3IOn1HM=
Subject key identifier:   FF:BE:96:AB:F7:3D:ED:90:93:74:84:1C:2F:B2:15:F3:4B:CD:33:6E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0863D52C35D77D93047990FD9E52ED1FF80ED050
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131312e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:03 +0000
ROA not before:           Thu 01 Jul 2021 07:55:03 +0000
ROA not after:            Fri 01 Jul 2022 08:00:03 +0000
asID:                     131111
IP address blocks:        103.154.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:63:d5:2c:35:d7:7d:93:04:79:90:fd:9e:52:ed:1f:f8:0e:d0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:03 2021 GMT
            Not After : Jul  1 08:00:03 2022 GMT
        Subject: CN=3082010A0282010100A929F6F901F942A9BF61EF75AA9BAF1B91FB2D197DCF4CA2C8C7D889BF1A96CF4D26B895BC75984F75ACBE5D028B357D530FA0343F774A836919BA8663C902D74535C63DE3685A160A1144B78F9DD7E57CD8D4930BE37E3035B6FFC24328519137B499447FB8F9CC7542D52F2007462990156788EA0A7FC44DFE6B7720346BB0F7FA62EDAB4AE6A70E4D2525BA72B3DD131B8F1F48BD272A76465D18BE231F5E02DB8B041CA821A7A5821F5219DE6F2B1339AECFA0A09602EB29E88C471DD5D11A50B9F75E0D357A974EC2A73E304DDE3C0E98020A0FD0D2F853B4CE5534A90F765C6157A56514DF11B02F3AF8561E80B9BA7F58C6E10559E5DA2FD83428580F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:f6:f9:01:f9:42:a9:bf:61:ef:75:aa:9b:
                    af:1b:91:fb:2d:19:7d:cf:4c:a2:c8:c7:d8:89:bf:
                    1a:96:cf:4d:26:b8:95:bc:75:98:4f:75:ac:be:5d:
                    02:8b:35:7d:53:0f:a0:34:3f:77:4a:83:69:19:ba:
                    86:63:c9:02:d7:45:35:c6:3d:e3:68:5a:16:0a:11:
                    44:b7:8f:9d:d7:e5:7c:d8:d4:93:0b:e3:7e:30:35:
                    b6:ff:c2:43:28:51:91:37:b4:99:44:7f:b8:f9:cc:
                    75:42:d5:2f:20:07:46:29:90:15:67:88:ea:0a:7f:
                    c4:4d:fe:6b:77:20:34:6b:b0:f7:fa:62:ed:ab:4a:
                    e6:a7:0e:4d:25:25:ba:72:b3:dd:13:1b:8f:1f:48:
                    bd:27:2a:76:46:5d:18:be:23:1f:5e:02:db:8b:04:
                    1c:a8:21:a7:a5:82:1f:52:19:de:6f:2b:13:39:ae:
                    cf:a0:a0:96:02:eb:29:e8:8c:47:1d:d5:d1:1a:50:
                    b9:f7:5e:0d:35:7a:97:4e:c2:a7:3e:30:4d:de:3c:
                    0e:98:02:0a:0f:d0:d2:f8:53:b4:ce:55:34:a9:0f:
                    76:5c:61:57:a5:65:14:df:11:b0:2f:3a:f8:56:1e:
                    80:b9:ba:7f:58:c6:e1:05:59:e5:da:2f:d8:34:28:
                    58:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BE:96:AB:F7:3D:ED:90:93:74:84:1C:2F:B2:15:F3:4B:CD:33:6E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ce:56:d0:24:47:d5:0c:c4:17:3b:59:3e:d4:56:63:0d:46:
         4b:d9:ec:eb:1a:36:c8:73:88:7e:bf:bd:9d:a8:be:47:99:39:
         5b:37:09:b0:ac:4a:39:2a:51:da:d4:76:d5:57:be:74:d6:93:
         d3:d5:a7:35:b7:b2:0f:f2:48:e6:74:40:93:b0:32:92:7a:11:
         55:7e:09:11:91:62:ab:27:25:35:2a:0e:ef:3a:7a:75:1f:53:
         34:e4:15:69:75:b2:cd:cb:ce:68:9d:bd:e6:70:07:85:43:4d:
         30:77:14:0f:f5:cd:08:a6:3c:fe:8d:bc:42:a4:18:c9:08:30:
         31:64:03:70:ae:cd:b2:e8:85:32:7f:74:ab:59:cc:35:21:fd:
         80:bb:c1:d5:e4:40:7c:c5:d3:f3:ab:10:18:d7:21:da:fb:d2:
         a0:31:a9:ab:b6:33:16:10:4a:79:35:17:55:d5:f0:35:89:0f:
         0e:30:ba:28:06:46:4b:77:5b:07:21:55:d8:5d:c3:27:cc:5f:
         18:09:92:c2:87:b3:5e:cc:4b:cd:12:d4:68:a0:84:cd:da:cf:
         d4:a8:b7:22:e5:11:4b:88:50:5e:b0:3d:bc:23:12:ab:bf:cb:
         65:54:bf:5b:eb:37:46:5f:6b:f9:fa:ba:19:46:c7:13:cd:c3:
         04:e6:54:3b
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUCGPVLDXXfZMEeZD9nlLtH/gO0FAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUwM1oX
DTIyMDcwMTA4MDAwM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBOTI5RjZGOTAxRjk0MkE5QkY2MUVGNzVBQTlCQUYxQjkxRkIyRDE5N0RD
RjRDQTJDOEM3RDg4OUJGMUE5NkNGNEQyNkI4OTVCQzc1OTg0Rjc1QUNCRTVEMDI4
QjM1N0Q1MzBGQTAzNDNGNzc0QTgzNjkxOUJBODY2M0M5MDJENzQ1MzVDNjNERTM2
ODVBMTYwQTExNDRCNzhGOUREN0U1N0NEOEQ0OTMwQkUzN0UzMDM1QjZGRkMyNDMy
ODUxOTEzN0I0OTk0NDdGQjhGOUNDNzU0MkQ1MkYyMDA3NDYyOTkwMTU2Nzg4RUEw
QTdGQzQ0REZFNkI3NzIwMzQ2QkIwRjdGQTYyRURBQjRBRTZBNzBFNEQyNTI1QkE3
MkIzREQxMzFCOEYxRjQ4QkQyNzJBNzY0NjVEMThCRTIzMUY1RTAyREI4QjA0MUNB
ODIxQTdBNTgyMUY1MjE5REU2RjJCMTMzOUFFQ0ZBMEEwOTYwMkVCMjlFODhDNDcx
REQ1RDExQTUwQjlGNzVFMEQzNTdBOTc0RUMyQTczRTMwNERERTNDMEU5ODAyMEEw
RkQwRDJGODUzQjRDRTU1MzRBOTBGNzY1QzYxNTdBNTY1MTRERjExQjAyRjNBRjg1
NjFFODBCOUJBN0Y1OEM2RTEwNTU5RTVEQTJGRDgzNDI4NTgwRjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKfb5AflCqb9h73Wqm68b
kfstGX3PTKLIx9iJvxqWz00muJW8dZhPday+XQKLNX1TD6A0P3dKg2kZuoZjyQLX
RTXGPeNoWhYKEUS3j53X5XzY1JML434wNbb/wkMoUZE3tJlEf7j5zHVC1S8gB0Yp
kBVniOoKf8RN/mt3IDRrsPf6Yu2rSuanDk0lJbpys90TG48fSL0nKnZGXRi+Ix9e
AtuLBByoIaelgh9SGd5vKxM5rs+goJYC6ynojEcd1dEaULn3Xg01epdOwqc+ME3e
PA6YAgoP0NL4U7TOVTSpD3ZcYVelZRTfEbAvOvhWHoC5un9YxuEFWeXaL9g0KFgP
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQU/76Wq/c97ZCTdIQcL7IV80vNM24wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMTMxMzEyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmm8wDQYJKoZIhvcN
AQELBQADggEBAB3OVtAkR9UMxBc7WT7UVmMNRkvZ7OsaNshziH6/vZ2ovkeZOVs3
CbCsSjkqUdrUdtVXvnTWk9PVpzW3sg/ySOZ0QJOwMpJ6EVV+CRGRYqsnJTUqDu86
enUfUzTkFWl1ss3LzmidveZwB4VDTTB3FA/1zQimPP6NvEKkGMkIMDFkA3CuzbLo
hTJ/dKtZzDUh/YC7wdXkQHzF0/OrEBjXIdr70qAxqau2MxYQSnk1F1XV8DWJDw4w
uigGRkt3WwchVdhdwyfMXxgJksKHs17MS80S1GighM3az9SotyLlEUuIUF6wPbwj
Equ/y2VUv1vrN0Zfa/n6uhlGxxPNwwTmVDs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org