Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132352e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3132352e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          dcOdPME4ZeiI3r6OfeReBNB/fJGrPW7pm4uYMdP2Xq0=
Subject key identifier:   AE:07:03:0B:9D:68:38:01:E6:09:E4:D7:0D:22:BD:83:62:E0:54:1C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       142860F1A263A8DEDBAE94A089CECE916A769456
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132352e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:09 +0000
ROA not before:           Thu 01 Jul 2021 07:55:09 +0000
ROA not after:            Fri 01 Jul 2022 08:00:09 +0000
asID:                     131111
IP address blocks:        103.154.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:28:60:f1:a2:63:a8:de:db:ae:94:a0:89:ce:ce:91:6a:76:94:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:09 2021 GMT
            Not After : Jul  1 08:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:cc:0e:87:11:c3:b9:f4:15:14:6a:94:7d:
                    20:cc:42:62:13:00:c8:b1:0e:8c:8b:cc:de:ae:77:
                    a5:b6:d8:b9:08:e9:93:82:2f:1b:f0:6f:c1:66:52:
                    df:3d:2d:8d:c2:c7:ea:93:58:5b:fd:c7:d7:d7:47:
                    7d:9e:f0:c3:d7:86:0a:f2:93:5f:73:54:f1:be:ba:
                    45:ae:07:4a:0a:4e:ff:fc:8b:f1:53:c9:b6:98:d1:
                    f3:47:60:fd:d3:73:4c:6f:b0:e3:0a:9b:12:d6:ae:
                    ff:d8:6b:6e:79:9e:0c:ae:0f:4a:90:7c:bb:f7:c0:
                    3b:41:46:dc:1d:4c:de:2c:b4:84:57:34:21:fa:c9:
                    65:c7:6e:1c:24:5a:07:76:c1:4a:30:53:b0:08:47:
                    1c:47:e0:96:c0:fc:29:4e:f2:00:c1:66:55:78:cb:
                    14:ad:0b:24:48:86:14:e7:9b:04:47:8b:d4:af:c3:
                    1f:73:a9:44:b8:04:de:da:d3:00:de:83:df:ec:74:
                    81:cd:b2:7f:86:23:ea:e0:68:77:e0:27:30:1b:f3:
                    f8:8c:b0:3b:3a:99:d5:0e:73:bf:55:bd:d1:48:df:
                    c1:c6:c7:e4:70:7a:df:9b:9a:a9:a0:2e:a3:31:26:
                    bf:0a:c0:77:02:41:6b:24:cc:dd:ab:1b:d2:e5:39:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:07:03:0B:9D:68:38:01:E6:09:E4:D7:0D:22:BD:83:62:E0:54:1C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132352e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ff:7c:d2:70:73:e6:b0:8c:b6:5a:f0:af:b4:b3:43:66:9a:
         1c:ef:69:65:49:d1:3b:0f:e3:f5:9c:23:35:aa:8c:de:65:8a:
         0d:be:7e:5e:8d:4e:e7:4e:06:83:cd:fc:1a:b3:b7:e4:d8:17:
         e1:10:d9:29:39:05:f5:ac:34:b1:49:46:4c:1f:d9:4a:65:5a:
         e7:83:4c:aa:9f:ea:e9:01:71:b1:47:92:1a:e4:1c:6a:d5:0b:
         af:77:a4:36:63:ab:40:82:cd:34:38:e7:7b:37:fa:42:b6:4f:
         e9:b4:53:27:df:00:29:c5:4b:f7:9c:d5:b8:8b:96:cc:3f:09:
         78:49:59:e3:39:b6:f0:41:11:1e:df:23:c1:81:c7:37:74:16:
         ff:e8:49:3f:69:1d:d6:9f:50:2b:d9:c3:95:e1:3e:28:d7:88:
         c2:20:a2:5b:e9:34:3a:65:29:f6:f2:41:f1:96:58:8b:63:24:
         c1:bc:98:27:18:92:a8:3a:30:0e:e3:c9:9b:0e:db:09:5e:53:
         de:05:76:f8:2d:ac:05:6c:05:64:4b:c2:b9:37:d6:31:4c:b4:
         99:8f:9c:82:34:5f:13:08:f8:82:ef:fa:99:a2:e8:f5:d1:b2:
         df:51:f5:8f:be:0e:e0:0c:8b:16:76:ec:79:5d:12:db:2f:ed:
         ad:7f:b4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org