Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131392e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3131392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          owkIYjl5GfNKmriW/FsjgZbTnrMfGk0eiu37B12Ertk=
Subject key identifier:   F2:6C:AB:1C:CB:F7:87:95:8E:EF:CA:52:EC:FB:44:8A:93:07:20:AB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6459FF8F2AD49F60E5A2696CDE0B816EFDFF1E37
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131392e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:06 +0000
ROA not before:           Thu 01 Jul 2021 07:55:06 +0000
ROA not after:            Fri 01 Jul 2022 08:00:06 +0000
asID:                     131111
IP address blocks:        103.154.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:59:ff:8f:2a:d4:9f:60:e5:a2:69:6c:de:0b:81:6e:fd:ff:1e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:06 2021 GMT
            Not After : Jul  1 08:00:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:d7:13:3d:fd:ab:61:60:a6:74:7a:45:5f:
                    36:5d:af:d9:bb:e9:10:99:64:d0:22:98:32:9e:ac:
                    6f:88:7d:0e:81:2a:9c:09:5e:3c:18:8b:eb:fd:22:
                    9f:3b:15:dd:7a:f7:47:23:95:f0:e7:86:bd:45:4d:
                    fe:59:54:0c:e8:b7:fe:aa:f7:4f:ae:e2:58:01:c7:
                    42:26:82:10:a4:2c:a1:75:d8:dc:88:27:42:ed:93:
                    08:79:2b:70:f1:6b:4a:7a:c7:77:47:b1:54:3b:1a:
                    ed:5a:fb:8b:2b:00:64:8d:93:64:70:e7:4c:88:24:
                    c0:c6:22:34:46:11:6a:9b:43:51:db:95:0a:0f:cb:
                    89:9a:a4:51:44:ff:cc:81:ae:78:12:27:e7:9b:62:
                    a7:d8:8a:59:b3:de:a2:54:28:e9:a4:81:35:d8:40:
                    e6:a4:ad:40:88:33:2f:0f:0a:84:ef:ce:09:d1:8c:
                    a5:ed:0f:44:ee:5f:ea:98:5b:8a:31:cf:aa:d8:53:
                    27:8c:0a:66:7b:e0:40:2d:cd:ab:78:3b:78:f3:14:
                    57:47:11:f1:78:d0:31:91:c9:e6:87:85:a8:44:d5:
                    ef:7c:7c:1e:8a:1c:54:d2:ec:d1:4f:58:82:47:0c:
                    88:4f:ee:8d:0b:7a:7e:1c:67:a2:5e:c1:13:f3:a5:
                    71:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6C:AB:1C:CB:F7:87:95:8E:EF:CA:52:EC:FB:44:8A:93:07:20:AB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131392e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:29:5d:c5:10:f4:a8:93:01:94:53:f0:a5:97:31:f2:33:0f:
         82:1a:91:71:b2:2e:c9:16:fb:d8:48:10:61:c4:53:8a:42:ae:
         a1:84:a0:c2:9f:6f:ca:65:8f:a2:fe:12:b3:f8:b3:90:7d:15:
         08:8e:c0:97:63:cd:10:5e:28:55:32:92:e3:51:ee:68:3e:24:
         f7:47:74:51:d5:f2:9b:29:fc:7c:40:96:de:f4:9b:45:ac:14:
         30:57:fe:0d:55:b1:d1:b5:31:0d:dd:ee:e7:8c:c4:6a:3e:76:
         87:ef:e4:84:96:26:1f:93:61:53:48:a7:9f:c5:f4:09:bb:ec:
         4f:de:1a:6f:a1:1b:7a:af:1d:e8:e9:04:d9:81:c5:d6:e9:d2:
         63:80:07:fb:fd:a2:4a:e5:2e:c3:0e:ad:42:4f:05:d2:eb:84:
         bc:69:cc:6d:1c:1f:a8:63:98:45:f4:08:b2:f4:23:bf:66:0d:
         bc:48:9f:1b:2f:bc:ac:8f:01:40:93:e8:5a:2d:e3:11:02:1f:
         96:be:4d:ee:ec:d4:93:65:26:83:b3:2e:24:48:fa:e4:01:dc:
         90:f8:17:81:49:c7:22:b9:af:92:23:74:c7:69:2c:5c:62:83:
         f3:5d:02:9a:80:0c:2e:b0:b0:34:15:23:e0:6b:14:8a:2b:26:
         84:dd:e9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org