Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132322e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3132322e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          oIR54CckU4PP+gqT2mCTCwVK04vo0CwW39KOeyiVhKw=
Subject key identifier:   1A:4C:C2:A6:10:59:76:03:60:74:35:CD:F1:30:62:3D:20:85:C6:F0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2CDF3B17EA46D3FCF8B471739ACB096A0FF74212
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132322e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:12 +0000
ROA not before:           Thu 01 Jul 2021 07:55:12 +0000
ROA not after:            Fri 01 Jul 2022 08:00:12 +0000
asID:                     131111
IP address blocks:        103.154.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:df:3b:17:ea:46:d3:fc:f8:b4:71:73:9a:cb:09:6a:0f:f7:42:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:12 2021 GMT
            Not After : Jul  1 08:00:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:5f:65:3f:8d:bc:a9:0f:34:bf:ab:56:66:
                    b4:19:05:70:89:8e:2e:42:59:c7:22:c5:62:94:93:
                    be:93:fd:9f:fd:d0:e7:ce:23:9d:6e:ae:87:ae:30:
                    26:1f:42:76:c5:d6:2a:1f:70:57:32:38:1a:be:db:
                    be:38:0f:30:50:0c:9b:83:68:a6:ab:37:29:f8:d3:
                    3c:a8:33:7b:77:8d:f3:4c:15:cb:58:71:43:a1:fa:
                    49:8b:a7:e5:27:31:26:26:ae:35:69:02:aa:4b:b7:
                    1a:82:37:d6:10:ee:b2:d6:a1:10:91:17:96:89:7f:
                    ad:2a:2c:75:4b:d2:3f:91:bf:73:08:f6:a8:7c:d0:
                    99:78:2d:22:a4:89:df:42:fb:f2:b6:5f:f3:cd:3b:
                    03:df:27:89:89:d8:20:f9:cd:71:23:dc:ca:52:1f:
                    10:88:c4:1a:9c:a0:15:62:5a:e4:bf:3e:af:d0:59:
                    bd:16:9a:ca:9a:d1:5a:73:b5:e5:0c:46:cc:19:13:
                    44:62:e6:1c:be:6d:49:22:f5:47:74:e1:8d:71:7a:
                    32:c6:6e:3b:a0:7f:51:da:72:6d:bf:0a:0d:5e:f0:
                    62:ab:f1:08:45:22:d4:9f:d7:dc:29:32:52:08:d3:
                    a3:b1:db:93:e0:6d:93:bb:5c:84:49:0b:39:89:ee:
                    4a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4C:C2:A6:10:59:76:03:60:74:35:CD:F1:30:62:3D:20:85:C6:F0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132322e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:19:e6:d4:fe:26:45:08:0f:6f:67:73:20:2d:f7:c9:7a:
         25:03:51:ff:7c:f4:93:d6:c8:7b:54:e4:8f:43:f5:08:0a:78:
         e2:b5:d0:12:7c:a5:63:0d:87:7f:ee:9d:2d:47:a0:b3:0a:ef:
         8a:5d:22:34:a8:63:aa:42:b4:90:ec:6b:33:ad:0a:fc:f4:b1:
         c8:6e:8b:90:2e:b7:66:0c:27:42:27:da:94:6a:66:cd:01:d4:
         ee:ac:64:d5:88:5d:3f:9f:aa:17:87:00:56:1c:30:e1:be:8a:
         8b:11:ce:16:f5:b6:db:44:ab:f8:47:df:45:1d:16:32:84:2e:
         35:e2:a5:5a:b0:27:ec:0b:36:12:d4:67:c4:a0:dd:9d:76:10:
         8a:5d:07:6c:39:bf:74:1a:4f:3c:b2:20:52:75:85:39:4e:8d:
         b8:49:ee:71:7d:89:5a:b6:0d:19:d8:81:09:72:94:5b:a2:e0:
         ea:2a:89:7e:c7:e5:22:da:04:da:f6:62:57:31:2a:f5:9b:9e:
         20:40:bb:66:c6:d1:73:a1:c8:34:4f:e3:ca:e7:e1:c5:b7:1a:
         6f:42:a1:70:5a:e5:2b:7b:61:53:35:3f:0d:d6:19:28:6b:1d:
         9e:04:39:79:61:bb:ce:1f:3a:72:7d:94:c8:6b:94:20:9f:5d:
         0e:95:7f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org