Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132332e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3132332e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          d353NVldcNfamMfYMEjKm5Wr3vDXX+yn8F7iV+Kg8dg=
Subject key identifier:   18:65:B3:64:56:3C:5C:FD:CE:E3:46:02:03:B5:B2:80:F6:C1:E6:6D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7D266E1FAA4291568A9224FB603015CE9F4D3402
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132332e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:05 +0000
ROA not before:           Thu 01 Jul 2021 07:55:05 +0000
ROA not after:            Fri 01 Jul 2022 08:00:05 +0000
asID:                     131111
IP address blocks:        103.154.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:26:6e:1f:aa:42:91:56:8a:92:24:fb:60:30:15:ce:9f:4d:34:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:05 2021 GMT
            Not After : Jul  1 08:00:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:7d:64:c2:17:ae:59:1a:83:8a:23:57:53:
                    ff:5b:b6:7b:59:46:3c:02:a4:0c:1e:b3:29:e2:7e:
                    ef:f0:d0:63:cd:aa:95:a4:a3:ae:a9:13:8b:09:3d:
                    cd:8a:41:9b:bc:ca:47:50:0f:64:fe:b2:8d:fc:23:
                    44:b3:5d:74:64:7c:1b:0e:5d:c8:42:0c:77:f6:1a:
                    d3:67:9f:1b:3f:1b:09:22:38:f7:1e:df:ab:32:3f:
                    61:d3:eb:44:3f:3b:4a:df:0a:0e:7d:79:d5:82:9c:
                    8a:1d:7a:36:c2:59:0b:32:51:6c:da:95:ef:2d:ac:
                    3d:d5:ca:ed:2b:e4:b5:cb:ae:1b:a1:23:14:32:38:
                    0d:41:94:53:3d:2c:23:cb:ea:da:51:a4:62:75:c3:
                    5e:76:e2:01:10:75:6c:79:3d:b7:64:2e:f5:0f:84:
                    7d:67:5f:73:60:06:78:7d:13:7f:5a:bd:10:3f:ab:
                    6b:ea:85:54:e5:f0:24:1c:e5:45:81:22:ae:af:71:
                    1f:10:9d:f2:80:7d:b8:fe:00:e4:ad:a0:81:67:7d:
                    87:20:e2:54:75:b6:e8:cd:29:96:36:21:3f:89:71:
                    63:42:ef:a3:0c:ff:67:68:de:6e:48:9f:a3:76:0b:
                    f1:78:0c:bf:98:ec:0d:5b:7c:8c:f0:73:c5:fc:c5:
                    10:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:65:B3:64:56:3C:5C:FD:CE:E3:46:02:03:B5:B2:80:F6:C1:E6:6D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132332e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:4f:c5:8e:35:64:fa:11:2e:d4:40:b5:2c:e8:0d:ed:74:
         b0:23:e2:37:03:52:fb:e9:84:d0:05:75:de:b3:f4:90:ac:c3:
         57:05:28:09:fc:af:e7:34:b9:f7:62:51:c3:df:12:38:b3:9e:
         d8:30:50:0a:fa:d2:40:64:12:65:8c:64:a3:be:35:63:7e:6d:
         ef:ba:7f:c1:97:e8:fa:03:37:8f:d7:d9:b1:a2:30:4c:1d:46:
         b4:19:2c:19:78:19:1e:0d:f6:79:9e:b3:b2:37:df:39:56:be:
         1f:8a:ab:7a:fe:30:b7:16:cd:d4:0d:5c:a8:01:18:6a:80:ec:
         74:12:ca:65:fc:07:6e:3a:b8:25:cd:2f:8e:4c:c5:07:d0:35:
         10:1f:7d:1d:df:1a:f7:08:35:10:30:36:be:c2:63:b3:74:32:
         87:5d:ad:ca:ea:ed:4b:6b:33:ec:8c:bb:68:93:2c:96:42:7d:
         ff:52:ae:ab:77:98:eb:76:9c:43:62:0a:4d:0f:b7:2c:33:6f:
         04:23:75:ea:35:2c:dc:02:02:f3:aa:e2:d8:8c:f9:ca:ae:0d:
         d2:d7:aa:ba:02:bb:73:ee:54:8a:d7:cd:21:7e:bc:32:0a:37:
         3a:4c:0e:1c:3d:6d:81:b4:ef:41:bf:06:b6:6d:c3:89:06:89:
         43:e0:97:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org