Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132372e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3132372e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          H8GZmns2OT7X5ePnryKqxPvBSYZbzmLaRLemI8Za/mc=
Subject key identifier:   72:F4:37:AF:AD:F0:91:C2:5C:29:FB:89:26:91:CE:73:EE:31:5E:1A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1CB15B0DF09C817A4AB76DA1070E5B5C9ABB88D4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132372e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:07 +0000
ROA not before:           Thu 01 Jul 2021 07:55:07 +0000
ROA not after:            Fri 01 Jul 2022 08:00:07 +0000
asID:                     131111
IP address blocks:        103.154.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b1:5b:0d:f0:9c:81:7a:4a:b7:6d:a1:07:0e:5b:5c:9a:bb:88:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:07 2021 GMT
            Not After : Jul  1 08:00:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:23:33:c0:b5:d6:58:5f:b0:99:b5:2b:fa:
                    b0:3a:3c:fb:33:05:a9:98:98:b5:54:33:a1:00:11:
                    d9:3d:5f:69:18:59:b3:cb:11:78:09:48:1c:13:e9:
                    e3:43:fe:a6:2d:67:bb:ae:54:e0:16:c8:1a:a0:1b:
                    83:65:d9:65:15:6a:63:fa:88:d7:41:4d:33:0b:fb:
                    24:06:bf:75:cb:36:6a:73:c4:69:f1:6c:73:e6:49:
                    fd:f4:a3:ac:81:90:76:18:c0:20:bf:f3:19:3e:7c:
                    7b:67:d3:79:15:0b:8c:82:40:d9:fe:eb:d0:5f:08:
                    4b:d8:5d:d8:0c:93:c5:29:40:ef:8e:58:2c:6a:0d:
                    14:bf:e1:c9:d0:4f:d8:0a:63:96:b7:e8:84:32:c5:
                    3d:ee:4d:71:c5:78:06:5f:4c:42:6d:2c:6a:d4:ae:
                    0b:fd:4c:6d:70:cb:0d:71:49:46:16:6a:10:66:3c:
                    8f:be:da:16:d0:f9:32:ab:be:f6:db:ec:82:0b:b9:
                    ed:9e:20:33:9e:cd:f9:21:b8:25:ce:52:a5:cf:b7:
                    d4:60:d1:3e:87:52:57:c4:2d:7e:cd:4b:7a:fe:77:
                    b6:0c:f4:89:91:bb:42:ad:d7:5d:8a:d3:f0:29:26:
                    53:bf:d9:ec:cf:08:2e:e2:da:01:3e:66:a8:02:0d:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F4:37:AF:AD:F0:91:C2:5C:29:FB:89:26:91:CE:73:EE:31:5E:1A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132372e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:85:50:bd:7f:d0:5f:5c:10:01:1e:0d:48:fe:09:ff:ff:a8:
         21:53:9c:dd:e9:02:ad:e1:9d:75:ae:8c:3d:88:ca:be:6f:bf:
         49:04:40:a9:41:1a:04:f6:19:99:a3:0f:99:99:2c:3c:80:ea:
         cb:26:52:b8:23:6a:be:00:23:79:22:b4:50:65:65:a5:be:9e:
         3d:41:ed:d4:bb:f4:54:95:c9:12:d5:ea:c2:8c:6a:73:05:e7:
         f4:99:fb:69:74:60:db:e5:f0:8c:59:5f:99:21:66:56:fa:20:
         55:3a:ee:4c:11:d3:c9:eb:9c:37:01:cb:92:66:6e:55:6e:75:
         c1:8c:56:8c:45:21:f2:1a:e2:22:85:a8:b7:fc:47:3f:43:da:
         2c:4e:fc:be:29:7a:84:aa:97:d2:0e:c9:82:2f:3b:77:a8:6d:
         93:bc:0f:00:c4:dd:fa:36:05:51:aa:e0:56:31:5f:55:94:dd:
         e3:80:ce:8d:f4:40:62:a5:bd:5f:1a:9e:fa:62:54:bc:85:38:
         61:09:38:a3:fd:63:99:a0:b5:56:d1:7b:fd:22:5d:90:7e:07:
         30:07:12:be:d5:71:0c:5c:f9:ed:35:30:1b:8e:a4:66:2a:83:
         23:98:5e:de:bb:a4:48:84:09:5f:f5:40:1a:dd:99:67:d3:c0:
         d1:e7:b4:86
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUHLFbDfCcgXpKt22hBw5bXJq7iNQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUwN1oX
DTIyMDcwMTA4MDAwN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCNUU5MjMzM0MwQjVENjU4NUZCMDk5QjUyQkZBQjAzQTNDRkIzMzA1QTk5
ODk4QjU1NDMzQTEwMDExRDkzRDVGNjkxODU5QjNDQjExNzgwOTQ4MUMxM0U5RTM0
M0ZFQTYyRDY3QkJBRTU0RTAxNkM4MUFBMDFCODM2NUQ5NjUxNTZBNjNGQTg4RDc0
MTREMzMwQkZCMjQwNkJGNzVDQjM2NkE3M0M0NjlGMTZDNzNFNjQ5RkRGNEEzQUM4
MTkwNzYxOEMwMjBCRkYzMTkzRTdDN0I2N0QzNzkxNTBCOEM4MjQwRDlGRUVCRDA1
RjA4NEJEODVERDgwQzkzQzUyOTQwRUY4RTU4MkM2QTBEMTRCRkUxQzlEMDRGRDgw
QTYzOTZCN0U4ODQzMkM1M0RFRTRENzFDNTc4MDY1RjRDNDI2RDJDNkFENEFFMEJG
RDRDNkQ3MENCMEQ3MTQ5NDYxNjZBMTA2NjNDOEZCRURBMTZEMEY5MzJBQkJFRjZE
QkVDODIwQkI5RUQ5RTIwMzM5RUNERjkyMUI4MjVDRTUyQTVDRkI3RDQ2MEQxM0U4
NzUyNTdDNDJEN0VDRDRCN0FGRTc3QjYwQ0Y0ODk5MUJCNDJBREQ3NUQ4QUQzRjAy
OTI2NTNCRkQ5RUNDRjA4MkVFMkRBMDEzRTY2QTgwMjBEMTQ3RDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16SMzwLXWWF+wmbUr+rA6
PPszBamYmLVUM6EAEdk9X2kYWbPLEXgJSBwT6eND/qYtZ7uuVOAWyBqgG4Nl2WUV
amP6iNdBTTML+yQGv3XLNmpzxGnxbHPmSf30o6yBkHYYwCC/8xk+fHtn03kVC4yC
QNn+69BfCEvYXdgMk8UpQO+OWCxqDRS/4cnQT9gKY5a36IQyxT3uTXHFeAZfTEJt
LGrUrgv9TG1wyw1xSUYWahBmPI++2hbQ+TKrvvbb7IILue2eIDOezfkhuCXOUqXP
t9Rg0T6HUlfELX7NS3r+d7YM9ImRu0Kt112K0/ApJlO/2ezPCC7i2gE+ZqgCDRR9
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUcvQ3r63wkcJcKfuJJpHOc+4xXhowHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMTMyMzcyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmn8wDQYJKoZIhvcN
AQELBQADggEBAJiFUL1/0F9cEAEeDUj+Cf//qCFTnN3pAq3hnXWujD2Iyr5vv0kE
QKlBGgT2GZmjD5mZLDyA6ssmUrgjar4AI3kitFBlZaW+nj1B7dS79FSVyRLV6sKM
anMF5/SZ+2l0YNvl8IxZX5khZlb6IFU67kwR08nrnDcBy5JmblVudcGMVoxFIfIa
4iKFqLf8Rz9D2ixO/L4peoSql9IOyYIvO3eobZO8DwDE3fo2BVGq4FYxX1WU3eOA
zo30QGKlvV8anvpiVLyFOGEJOKP9Y5mgtVbRe/0iXZB+BzAHEr7VcQxc+e01MBuO
pGYqgyOYXt67pEiECV/1QBrdmWfTwNHntIY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org