Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132302e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3132302e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          rZcZmRiWftHvozOfzHxYcOw696SWPTicLuGHwNvP2og=
Subject key identifier:   F3:9E:99:09:7C:BD:97:83:B9:5B:5B:C4:E0:FC:A5:89:5B:80:77:20
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       16B499BDB30BAC4139684F84CE95973629DFA31B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132302e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:08 +0000
ROA not before:           Thu 01 Jul 2021 07:55:08 +0000
ROA not after:            Fri 01 Jul 2022 08:00:08 +0000
asID:                     131111
IP address blocks:        103.154.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b4:99:bd:b3:0b:ac:41:39:68:4f:84:ce:95:97:36:29:df:a3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:08 2021 GMT
            Not After : Jul  1 08:00:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:97:08:70:d0:09:03:10:3b:11:85:34:15:
                    ec:ce:c6:eb:d6:ce:d6:51:df:d7:63:3c:31:db:d6:
                    8b:33:3f:c3:e8:19:c0:3e:9a:a6:57:d3:52:9b:bb:
                    b5:eb:04:0d:ff:3e:1a:45:3a:7a:c2:c1:08:06:34:
                    75:b1:99:9d:34:ca:d2:c0:1b:c9:6b:0a:09:bf:df:
                    59:4a:6e:e3:86:b1:85:98:74:5d:3a:ed:d6:28:f2:
                    4a:fe:23:6b:e2:cb:b6:57:35:39:78:a7:b5:75:c9:
                    47:ab:89:71:d5:ce:d2:46:5f:4b:9d:02:45:48:3f:
                    b4:ba:1b:a1:d3:68:54:a7:f4:52:5d:75:c1:84:90:
                    0f:95:fe:1d:31:b0:e0:d6:06:59:09:88:2e:84:b6:
                    c0:6e:cc:bb:58:d7:cf:04:c4:bb:54:e5:bc:01:46:
                    02:59:7d:1b:aa:15:06:ef:73:af:f2:b0:b6:b9:88:
                    0c:e1:7a:8e:23:d7:59:d1:aa:42:9d:2b:12:98:68:
                    66:68:9f:f3:2d:a4:e4:c4:a0:57:a6:54:4c:20:45:
                    e2:0f:5d:bc:02:c8:1e:d4:13:03:27:8b:0f:18:6d:
                    4c:cc:d0:56:e4:ad:2e:de:9b:2e:5d:5c:53:8c:06:
                    da:29:d3:e4:63:7a:b9:e4:b1:a8:b7:7b:e9:ff:60:
                    e6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9E:99:09:7C:BD:97:83:B9:5B:5B:C4:E0:FC:A5:89:5B:80:77:20
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132302e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:1d:8c:68:f3:d5:6c:30:ca:1b:36:83:1c:33:d9:05:8d:7c:
         33:4c:ea:ff:d2:75:d4:01:a6:95:d1:15:6c:57:3d:2b:55:d9:
         96:40:74:03:2e:15:48:d7:e6:f2:28:9e:66:6b:9d:f1:d3:11:
         cd:61:30:af:a5:7f:cb:8b:a5:78:56:1f:aa:1a:11:09:f0:0e:
         cb:77:d4:8e:e2:be:35:5e:f4:92:2a:25:80:92:7b:b0:66:bd:
         9d:97:5a:2b:98:d5:3b:dc:63:31:aa:28:5e:ac:5b:09:ce:f1:
         a8:44:95:83:17:e4:db:40:c5:ea:38:27:29:65:b1:40:19:3f:
         58:2e:d9:2a:85:50:e0:4d:09:f3:26:27:46:a1:00:ef:dd:a0:
         ef:42:0c:f3:91:17:01:59:c6:44:47:a1:c0:70:8d:4b:af:c7:
         03:83:53:01:23:93:c2:6c:f5:e9:08:92:74:52:09:bc:c0:5f:
         bc:2c:2e:2e:e0:08:65:d7:f1:0f:3c:fc:4a:40:38:e8:43:0b:
         48:10:3f:32:b9:ce:3b:22:43:12:0f:7a:ac:a8:45:61:21:24:
         35:57:8a:61:6c:ee:22:07:f9:5c:42:df:6d:8c:9b:aa:25:60:
         48:6b:fe:5b:f0:b9:30:fc:f8:d6:2e:63:87:62:06:0e:ae:85:
         f7:d8:4f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org