Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132312e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3132312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          9B7TAf4zBi7unSyzKHYa0ki3Q2GkrEsBl3eNsqdJZQQ=
Subject key identifier:   B3:51:B9:4A:C1:D6:F4:5B:D5:13:2E:A1:6F:BA:66:96:5A:5E:9F:F6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       79564BF0DDC20A7ADF6C12507AC072FB90082C2A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132312e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:12 +0000
ROA not before:           Thu 01 Jul 2021 07:55:12 +0000
ROA not after:            Fri 01 Jul 2022 08:00:12 +0000
asID:                     131111
IP address blocks:        103.154.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:56:4b:f0:dd:c2:0a:7a:df:6c:12:50:7a:c0:72:fb:90:08:2c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:12 2021 GMT
            Not After : Jul  1 08:00:12 2022 GMT
        Subject: CN=3082010A0282010100E7E297D45E636B2691CC436ABAC677504E558BB3A827F9CDBBC48ACE063123ECB71B0BB70B89097470C515C01E7F4CE0DECF751424EB7B5F7031FD2D37E6698512168EC51962CBC22B8D9533A7254DE9427DE285D52A8A5D517CB6794EA339AD258A01CC37EB2DD5D75A271BB0B9F8BC96B0AA7D74692B5A99DF081030EF42C466523025CAB7A0CED819352BD0FEBEE78C3E78D2808DB77CF739CD3B538252DAB21B2B1307C7685C861625C2B2F24CDD85559D9A097D84A7DB7B9C6030A74E4BC3FFFA424B510D9CA7E2032616FAEA18E7CB56783A0A1B952C59F4441602CCB2A36940D26AA8DA5A8568F98D82DA8FBD9C38A6BF255163C61DEEDCC158B361B50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e2:97:d4:5e:63:6b:26:91:cc:43:6a:ba:c6:
                    77:50:4e:55:8b:b3:a8:27:f9:cd:bb:c4:8a:ce:06:
                    31:23:ec:b7:1b:0b:b7:0b:89:09:74:70:c5:15:c0:
                    1e:7f:4c:e0:de:cf:75:14:24:eb:7b:5f:70:31:fd:
                    2d:37:e6:69:85:12:16:8e:c5:19:62:cb:c2:2b:8d:
                    95:33:a7:25:4d:e9:42:7d:e2:85:d5:2a:8a:5d:51:
                    7c:b6:79:4e:a3:39:ad:25:8a:01:cc:37:eb:2d:d5:
                    d7:5a:27:1b:b0:b9:f8:bc:96:b0:aa:7d:74:69:2b:
                    5a:99:df:08:10:30:ef:42:c4:66:52:30:25:ca:b7:
                    a0:ce:d8:19:35:2b:d0:fe:be:e7:8c:3e:78:d2:80:
                    8d:b7:7c:f7:39:cd:3b:53:82:52:da:b2:1b:2b:13:
                    07:c7:68:5c:86:16:25:c2:b2:f2:4c:dd:85:55:9d:
                    9a:09:7d:84:a7:db:7b:9c:60:30:a7:4e:4b:c3:ff:
                    fa:42:4b:51:0d:9c:a7:e2:03:26:16:fa:ea:18:e7:
                    cb:56:78:3a:0a:1b:95:2c:59:f4:44:16:02:cc:b2:
                    a3:69:40:d2:6a:a8:da:5a:85:68:f9:8d:82:da:8f:
                    bd:9c:38:a6:bf:25:51:63:c6:1d:ee:dc:c1:58:b3:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:51:B9:4A:C1:D6:F4:5B:D5:13:2E:A1:6F:BA:66:96:5A:5E:9F:F6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:9b:4d:16:6d:93:62:18:cf:c1:69:93:eb:87:43:f8:b1:40:
         34:61:6f:c2:46:76:79:c8:8d:d2:10:0e:4d:20:02:a1:8e:ee:
         3c:02:63:d9:36:a4:a1:2f:b0:34:24:25:d1:e8:e0:ee:4e:de:
         f7:76:ce:49:23:59:8c:02:61:93:37:11:76:83:cc:59:c7:42:
         2a:16:b0:40:35:b8:b1:09:7f:14:16:56:5b:f8:cf:7f:0e:ee:
         e6:01:7c:c1:2e:57:f5:b5:7d:44:d0:de:29:1e:5c:27:f7:a5:
         59:bb:61:93:bc:31:f3:d1:9a:de:d3:d8:e6:36:dc:81:b0:cc:
         4b:c3:d3:5c:1c:f2:59:30:18:82:87:2b:ef:81:d0:7a:49:a4:
         f6:ea:64:fb:1f:19:1f:ef:f8:bd:2e:62:07:95:1b:30:07:d9:
         04:d7:94:a9:47:59:04:06:ef:77:f4:ea:0d:6f:55:62:99:98:
         b9:98:56:fe:e5:31:d8:da:fd:8e:05:91:33:5a:6c:a1:fe:13:
         be:28:65:c7:97:41:ab:98:68:07:b7:e5:6a:09:1e:fe:bb:f3:
         7e:2e:b4:02:84:d0:05:a4:67:6a:64:a8:1b:f2:65:47:e4:bc:
         b6:69:fe:dd:b4:fc:20:b3:d8:a1:ea:e1:d1:88:4d:20:72:4b:
         97:a0:26:e2
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUeVZL8N3CCnrfbBJQesBy+5AILCowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUxMloX
DTIyMDcwMTA4MDAxMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFN0UyOTdENDVFNjM2QjI2OTFDQzQzNkFCQUM2Nzc1MDRFNTU4QkIzQTgy
N0Y5Q0RCQkM0OEFDRTA2MzEyM0VDQjcxQjBCQjcwQjg5MDk3NDcwQzUxNUMwMUU3
RjRDRTBERUNGNzUxNDI0RUI3QjVGNzAzMUZEMkQzN0U2Njk4NTEyMTY4RUM1MTk2
MkNCQzIyQjhEOTUzM0E3MjU0REU5NDI3REUyODVENTJBOEE1RDUxN0NCNjc5NEVB
MzM5QUQyNThBMDFDQzM3RUIyREQ1RDc1QTI3MUJCMEI5RjhCQzk2QjBBQTdENzQ2
OTJCNUE5OURGMDgxMDMwRUY0MkM0NjY1MjMwMjVDQUI3QTBDRUQ4MTkzNTJCRDBG
RUJFRTc4QzNFNzhEMjgwOERCNzdDRjczOUNEM0I1MzgyNTJEQUIyMUIyQjEzMDdD
NzY4NUM4NjE2MjVDMkIyRjI0Q0REODU1NTlEOUEwOTdEODRBN0RCN0I5QzYwMzBB
NzRFNEJDM0ZGRkE0MjRCNTEwRDlDQTdFMjAzMjYxNkZBRUExOEU3Q0I1Njc4M0Ew
QTFCOTUyQzU5RjQ0NDE2MDJDQ0IyQTM2OTQwRDI2QUE4REE1QTg1NjhGOThEODJE
QThGQkQ5QzM4QTZCRjI1NTE2M0M2MURFRURDQzE1OEIzNjFCNTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn4pfUXmNrJpHMQ2q6xndQ
TlWLs6gn+c27xIrOBjEj7LcbC7cLiQl0cMUVwB5/TODez3UUJOt7X3Ax/S035mmF
EhaOxRliy8IrjZUzpyVN6UJ94oXVKopdUXy2eU6jOa0ligHMN+st1ddaJxuwufi8
lrCqfXRpK1qZ3wgQMO9CxGZSMCXKt6DO2Bk1K9D+vueMPnjSgI23fPc5zTtTglLa
shsrEwfHaFyGFiXCsvJM3YVVnZoJfYSn23ucYDCnTkvD//pCS1ENnKfiAyYW+uoY
58tWeDoKG5UsWfREFgLMsqNpQNJqqNpahWj5jYLaj72cOKa/JVFjxh3u3MFYs2G1
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUs1G5SsHW9FvVEy6hb7pmllpen/YwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMTMyMzEyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmnkwDQYJKoZIhvcN
AQELBQADggEBAH2bTRZtk2IYz8Fpk+uHQ/ixQDRhb8JGdnnIjdIQDk0gAqGO7jwC
Y9k2pKEvsDQkJdHo4O5O3vd2zkkjWYwCYZM3EXaDzFnHQioWsEA1uLEJfxQWVlv4
z38O7uYBfMEuV/W1fUTQ3ikeXCf3pVm7YZO8MfPRmt7T2OY23IGwzEvD01wc8lkw
GIKHK++B0HpJpPbqZPsfGR/v+L0uYgeVGzAH2QTXlKlHWQQG73f06g1vVWKZmLmY
Vv7lMdja/Y4FkTNabKH+E74oZceXQauYaAe35WoJHv67834utAKE0AWkZ2pkqBvy
ZUfkvLZp/t20/CCz2KHq4dGITSByS5egJuI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org