Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131362e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3131362e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          d8tZ02+2lv6cX8/ooOEmwNOgDFIIxoKQMItyBpoqkrw=
Subject key identifier:   89:53:D6:81:5D:5A:2C:E3:9F:BD:0B:EB:E0:D6:5F:8A:5A:90:84:72
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       70089FDFDF8CEF9191B371B8DB050C90A3EDFE87
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131362e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:14 +0000
ROA not before:           Thu 01 Jul 2021 07:55:14 +0000
ROA not after:            Fri 01 Jul 2022 08:00:14 +0000
asID:                     131111
IP address blocks:        103.154.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:08:9f:df:df:8c:ef:91:91:b3:71:b8:db:05:0c:90:a3:ed:fe:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:14 2021 GMT
            Not After : Jul  1 08:00:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:40:6e:43:20:36:ef:54:4a:6f:af:3e:5b:
                    2b:d7:1e:1a:32:db:77:af:5c:dd:79:a3:77:ad:21:
                    73:1f:75:2d:c8:cc:46:47:89:65:e1:3e:07:94:5e:
                    39:20:16:11:26:a2:dc:16:e7:81:42:37:91:1c:16:
                    ae:cb:6c:2f:f1:18:13:ca:d1:e9:94:15:fa:ca:32:
                    b6:50:78:a6:61:1b:df:9c:26:5b:4e:9c:06:32:ca:
                    61:f8:c5:7a:26:fa:96:e1:fd:fe:74:f0:41:98:d5:
                    62:01:76:2b:52:32:0d:7b:32:cc:9b:7c:26:44:ef:
                    84:de:03:0f:1c:59:5a:d1:9c:33:35:8f:6c:60:1b:
                    3e:ac:3f:42:72:67:37:8a:da:de:9b:4e:e2:7c:e0:
                    20:5c:6c:f2:ef:74:58:80:29:4c:07:66:2b:08:78:
                    fc:30:e5:c8:2c:3d:a6:64:1e:68:c4:08:d4:91:f8:
                    63:f7:fa:3c:e2:62:9a:61:28:3d:8c:df:f4:ad:9e:
                    69:d4:8f:19:49:77:1b:1d:b5:23:43:e2:d0:66:3c:
                    34:56:32:57:ce:33:f4:87:1c:33:4c:98:6b:8b:f2:
                    9d:83:a3:1a:0f:38:4f:e5:19:78:1f:da:b8:9a:8d:
                    50:8e:22:68:de:d3:02:fa:6b:b0:9a:b5:ce:87:13:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:53:D6:81:5D:5A:2C:E3:9F:BD:0B:EB:E0:D6:5F:8A:5A:90:84:72
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131362e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ae:c3:91:e3:4e:10:98:b1:be:35:24:8a:c8:09:ad:78:99:
         38:49:9c:fa:05:62:b6:3a:07:5a:e8:18:d3:d3:0f:62:e5:67:
         ef:fe:a0:76:75:47:ee:d4:83:e8:81:60:56:fc:1e:f4:82:d5:
         7b:e0:0d:2f:6e:dc:ff:61:a9:bc:fd:67:46:7f:9d:8f:96:1e:
         f8:01:6a:da:aa:b4:b4:d6:9f:0f:4c:35:18:6b:02:e4:40:fc:
         a2:ec:0a:2a:1c:46:35:ee:20:6a:f5:eb:3d:5a:07:b9:1c:7c:
         e0:d9:46:c4:8f:7f:0f:49:bd:9f:87:1b:bd:b5:a1:10:fe:7c:
         19:1c:4f:5d:d5:b1:0c:4f:0d:76:ee:ec:4e:2d:07:90:fb:17:
         ab:02:92:ac:33:ab:80:49:f9:0f:56:ea:8d:7a:e7:c5:52:d7:
         a8:90:82:80:9d:81:8e:5e:2e:ba:ce:31:c5:4e:8e:3c:64:ba:
         c6:66:68:e9:e1:5d:93:49:56:2c:1c:b6:cf:85:ee:41:13:4b:
         91:06:02:d4:fd:d4:02:5d:a3:7e:84:fd:3b:03:d3:c7:91:e3:
         3f:76:20:46:22:69:05:41:fe:f9:3c:f9:fd:83:52:fe:50:8c:
         5d:c8:4a:7c:06:f4:09:59:9b:9a:76:c6:57:2f:61:27:29:a9:
         d0:f0:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org