Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131332e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3131332e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          R5E9/7oraSJpGSpEXKFqGlaoJeamHS/6zQpoYJBqIRI=
Subject key identifier:   FA:AE:04:5B:89:EA:EF:BA:8D:28:85:34:4F:11:FE:10:0D:38:CA:92
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       78245B8F257F93DDCDC344D4B1C919947D6600A5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131332e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:14 +0000
ROA not before:           Thu 01 Jul 2021 07:55:14 +0000
ROA not after:            Fri 01 Jul 2022 08:00:14 +0000
asID:                     131111
IP address blocks:        103.154.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:24:5b:8f:25:7f:93:dd:cd:c3:44:d4:b1:c9:19:94:7d:66:00:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:14 2021 GMT
            Not After : Jul  1 08:00:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:23:e3:60:af:9a:4f:34:32:f3:27:3b:0d:
                    12:55:67:a6:ae:87:62:77:c0:3f:0b:d6:4d:f2:3f:
                    35:7d:aa:3a:b8:d7:21:60:d6:2f:37:c3:95:85:2d:
                    ad:df:18:cf:a9:e5:82:e8:01:b3:88:8a:40:bf:5a:
                    35:40:27:dd:5b:4a:3e:2a:64:d2:99:25:00:07:dd:
                    e4:9c:81:32:ae:9c:e7:97:2e:72:bd:1b:35:06:90:
                    ea:20:05:b3:1a:4f:f6:03:e8:34:13:bc:bf:40:a4:
                    fd:a1:d0:0c:20:bd:bc:03:ad:31:22:56:77:3a:93:
                    db:da:a8:66:42:5d:5e:1b:94:22:a2:52:ca:8b:48:
                    5e:47:d7:87:69:86:0f:cd:94:20:f3:d1:e9:4b:58:
                    7f:ec:d4:f6:3d:51:b8:bc:f4:6d:89:4c:ca:a5:28:
                    e7:eb:15:1d:0a:4e:92:a0:ef:e5:4f:c2:bb:6b:8c:
                    b3:b4:66:f8:88:6c:77:8a:d9:3d:c0:c8:2f:f3:79:
                    4b:ce:22:4f:3e:09:61:fd:26:bd:4c:92:a1:87:2e:
                    79:c4:3c:5b:e3:1c:ed:04:4c:79:07:63:ac:ec:9b:
                    f4:4f:db:ae:5c:e1:0b:99:87:62:5f:25:db:ee:56:
                    c6:70:ac:43:06:1d:d2:e1:28:14:eb:1a:fb:29:cb:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AE:04:5B:89:EA:EF:BA:8D:28:85:34:4F:11:FE:10:0D:38:CA:92
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131332e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:19:67:05:1b:b8:29:5c:d7:45:11:94:9d:31:f8:c4:5f:90:
         b3:6f:5b:24:ba:38:db:db:bd:c0:c9:dc:34:cf:ce:4a:64:ac:
         94:81:5b:6f:f8:b0:03:86:22:79:a7:fe:1d:b2:27:58:70:24:
         f9:d6:7c:b2:f5:6f:64:07:eb:b6:8d:89:40:cd:05:2e:e4:ba:
         12:16:a7:c5:4d:8c:d2:a0:ea:01:db:92:e9:e8:da:2a:e7:a4:
         03:3b:8d:3d:ef:30:3a:a6:14:a5:e6:ed:12:8c:e2:04:e1:3e:
         01:9e:80:6c:77:47:77:4a:38:76:aa:ae:fa:69:55:43:31:c5:
         b3:81:55:79:29:0f:d6:a7:ec:02:48:82:05:e1:a9:25:10:1a:
         d2:58:45:f1:31:a6:e9:46:82:4c:2d:65:c6:c1:7e:15:f6:02:
         cf:da:83:d1:4b:08:e4:9c:99:ee:aa:04:71:ca:7f:67:02:25:
         5e:ec:44:78:b9:b9:d2:40:90:b5:29:3c:dd:e0:44:63:29:b8:
         1a:e4:1f:cd:a5:9f:5d:eb:7f:23:71:8b:c5:38:50:f1:82:99:
         09:9c:0e:45:f6:de:a3:24:e6:e8:08:fe:5e:bd:c7:6e:af:43:
         56:a4:83:ce:55:6d:20:1b:79:c7:83:00:07:31:2e:05:5e:e7:
         10:1d:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org