Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131322e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3131322e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          hjkRRBgCdD/CFoqdzc9LbivF9w7Ri9SxtjcFVDnpxyc=
Subject key identifier:   B0:3E:E8:09:BA:65:68:42:A6:A2:7F:50:F1:2E:1C:CC:EA:42:0A:68
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       343F0F9DF06E52EF39B2787BE94A3CBC7EBB4EAE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131322e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:03 +0000
ROA not before:           Thu 01 Jul 2021 07:55:03 +0000
ROA not after:            Fri 01 Jul 2022 08:00:03 +0000
asID:                     131111
IP address blocks:        103.154.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3f:0f:9d:f0:6e:52:ef:39:b2:78:7b:e9:4a:3c:bc:7e:bb:4e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:03 2021 GMT
            Not After : Jul  1 08:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:c0:4c:be:24:32:f0:17:7a:49:0c:7c:f9:
                    35:a2:be:a8:45:ac:99:02:e1:42:92:71:7e:af:30:
                    1e:a2:07:00:f2:d2:ac:df:89:a1:74:57:b1:84:84:
                    2f:fe:ef:70:e1:2c:55:01:e8:4f:8c:a4:c3:a8:97:
                    d1:58:aa:fe:c0:15:d3:0a:80:53:58:c0:82:87:fc:
                    7f:f2:4d:51:60:e2:17:80:04:f1:1d:09:fc:ac:b4:
                    cf:cf:b0:44:76:f3:0b:b0:25:1b:08:f4:cc:cf:7d:
                    d4:02:fe:1f:1f:5c:c5:db:df:31:63:c3:01:fc:a8:
                    d6:da:a9:8a:b6:c2:3f:43:33:11:fe:22:4b:c0:a2:
                    2d:32:f2:bd:c4:c2:e1:31:70:97:9f:35:11:62:43:
                    13:34:51:e4:a7:0d:8d:67:82:d3:77:d6:80:02:3f:
                    4b:8a:5f:fc:e3:53:41:7a:b2:0b:8b:b4:87:15:ee:
                    55:6a:74:9a:c9:83:47:43:3b:1b:99:18:2d:6f:c2:
                    71:65:65:75:6f:a3:82:75:cf:b0:cd:45:36:44:e8:
                    8d:04:81:b3:0d:b1:ca:3d:21:17:1a:d7:26:6f:24:
                    88:40:9a:93:d0:f6:95:37:37:d4:94:6e:d2:89:1f:
                    76:34:d3:54:9b:b1:f6:07:cb:c8:f9:ae:35:8e:1a:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3E:E8:09:BA:65:68:42:A6:A2:7F:50:F1:2E:1C:CC:EA:42:0A:68
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131322e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:1c:37:25:a0:36:ae:ed:5d:32:53:ca:1a:b1:7b:62:89:5a:
         0c:95:e7:46:74:11:57:2a:fa:b2:ce:5d:b9:37:af:54:43:46:
         af:de:e6:ec:76:10:f7:f0:f8:e4:56:8b:b1:ec:93:56:af:4c:
         72:e7:87:2a:e9:23:92:16:d7:e3:63:35:2b:dd:7e:fe:7c:9d:
         c3:81:ee:00:e1:8c:fb:69:2c:e2:91:57:49:bb:f1:91:81:8f:
         06:ce:f4:a1:e3:82:2b:39:0c:1f:a4:ef:80:81:00:49:fc:e9:
         fa:30:45:2a:69:dd:e0:87:bd:0f:2d:81:50:6b:91:bc:42:f9:
         d2:16:14:c7:02:58:1e:17:c7:0b:1a:0e:93:59:1a:2d:d8:38:
         25:d6:1e:21:02:d0:d2:b1:8c:c1:71:e7:15:a0:3c:3e:fd:ff:
         c9:91:85:8f:75:63:8f:88:a6:cb:b4:b4:97:a8:51:c8:d2:95:
         23:2c:3a:c1:a3:3c:67:f1:dc:cb:eb:b0:3c:20:bb:2d:47:03:
         20:d4:6c:96:5c:86:57:91:bb:55:92:c7:c1:56:9e:af:35:34:
         c4:7d:d2:cf:e5:e9:f4:c7:27:4d:e4:8d:ac:64:02:36:a0:18:
         5d:4f:40:db:ae:84:b5:80:da:03:2f:e5:92:c9:85:4a:2d:b5:
         04:a6:cf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org