Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132382e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3132382e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          CODxF8QUwEC5dW4jaG635rp+wOmPiBONaF1rh3vW2gQ=
Subject key identifier:   A5:7D:B5:88:25:3D:DD:A6:FC:54:F1:73:01:03:97:CD:40:FC:1F:31
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       561D99CC913F38370875705507F1AAAB48CD9ADC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132382e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:11 +0000
ROA not before:           Thu 01 Jul 2021 07:55:11 +0000
ROA not after:            Fri 01 Jul 2022 08:00:11 +0000
asID:                     131111
IP address blocks:        103.154.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1d:99:cc:91:3f:38:37:08:75:70:55:07:f1:aa:ab:48:cd:9a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:11 2021 GMT
            Not After : Jul  1 08:00:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:4c:c2:11:d0:e4:5e:87:90:4b:8b:50:d8:
                    f5:36:02:99:93:21:eb:9c:df:20:11:7d:95:0c:91:
                    e9:3e:70:ed:ae:b1:81:bc:22:8f:5d:85:00:fa:6e:
                    7f:2b:5a:1a:74:9d:6e:94:fc:a1:75:5f:6d:92:98:
                    fb:73:51:3b:04:76:f9:b6:4a:ff:40:5a:83:60:4f:
                    7a:47:fb:ab:74:b1:2b:cd:f6:35:9c:a1:6f:63:7a:
                    5b:7d:40:ac:98:56:63:60:75:0a:7a:3a:bf:ad:21:
                    ae:72:82:cb:17:7b:6b:54:19:4e:1d:ef:1e:4c:ad:
                    fc:e2:35:cc:4c:2c:88:d0:c6:34:6c:fd:12:0a:b1:
                    7f:15:f2:d2:e4:50:4a:16:b2:07:91:96:02:8e:9c:
                    e6:d9:d4:aa:9f:8e:39:72:df:27:04:d4:de:dd:56:
                    08:11:9d:26:c4:99:c0:57:c2:b4:63:21:8a:b4:a3:
                    7a:0c:43:5f:64:4b:09:a5:5d:56:e0:ef:9f:1c:ac:
                    82:fc:9d:5e:e6:2b:d4:89:b2:80:f4:04:1f:8b:ce:
                    04:ac:e5:33:3f:d3:e8:d5:a0:63:f6:c1:00:c5:da:
                    3d:0f:4c:d0:28:9e:c4:8e:63:ac:be:e0:70:14:22:
                    55:b8:24:d5:67:b8:dc:3e:6a:f8:4b:80:1a:90:16:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7D:B5:88:25:3D:DD:A6:FC:54:F1:73:01:03:97:CD:40:FC:1F:31
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132382e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:5f:cf:52:e9:38:f6:7b:82:5b:73:72:ca:9a:1f:fe:7f:54:
         95:33:4d:72:18:43:db:80:b3:c1:da:dd:3f:3a:ae:a0:ac:eb:
         8c:17:ee:3d:79:6c:35:e3:b1:45:e6:61:8c:98:4d:d2:dc:ac:
         dd:17:b3:a1:90:e9:31:b2:82:2d:f0:b1:b5:c7:02:cd:ec:a5:
         33:f3:94:37:11:46:43:31:c5:68:89:f3:da:71:3d:47:37:60:
         7f:da:b8:1e:7d:8b:91:de:ac:43:e6:8b:86:39:80:38:c1:82:
         4f:01:5b:08:3e:f5:e1:42:83:cb:17:74:2a:60:cd:7b:2b:6d:
         1b:c4:de:bc:7d:bd:c3:18:5e:76:13:f5:6d:a0:1b:39:5b:8a:
         e2:dd:d1:20:31:a5:b4:b7:71:8b:7a:5d:6d:a3:2e:8b:a6:58:
         e9:eb:cf:e8:d4:45:91:6d:7e:96:3a:40:52:c3:5b:51:23:98:
         9a:79:26:bb:c0:aa:27:3f:0f:f5:49:f5:79:03:d5:d7:c9:bb:
         95:40:59:a3:c3:94:06:b6:26:cc:48:d1:6b:eb:3e:54:6f:ae:
         02:1b:cb:05:20:7c:84:79:af:aa:2d:1e:e2:5c:d9:15:2b:b9:
         4e:2f:5b:61:f8:88:74:b1:68:9f:58:56:e5:ae:c8:b6:55:e7:
         38:7d:a7:47
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUVh2ZzJE/ODcIdXBVB/Gqq0jNmtwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUxMVoX
DTIyMDcwMTA4MDAxMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCM0M3NENDMjExRDBFNDVFODc5MDRCOEI1MEQ4RjUzNjAyOTk5MzIxRUI5
Q0RGMjAxMTdEOTUwQzkxRTkzRTcwRURBRUIxODFCQzIyOEY1RDg1MDBGQTZFN0Yy
QjVBMUE3NDlENkU5NEZDQTE3NTVGNkQ5Mjk4RkI3MzUxM0IwNDc2RjlCNjRBRkY0
MDVBODM2MDRGN0E0N0ZCQUI3NEIxMkJDREY2MzU5Q0ExNkY2MzdBNUI3RDQwQUM5
ODU2NjM2MDc1MEE3QTNBQkZBRDIxQUU3MjgyQ0IxNzdCNkI1NDE5NEUxREVGMUU0
Q0FERkNFMjM1Q0M0QzJDODhEMEM2MzQ2Q0ZEMTIwQUIxN0YxNUYyRDJFNDUwNEEx
NkIyMDc5MTk2MDI4RTlDRTZEOUQ0QUE5RjhFMzk3MkRGMjcwNEQ0REVERDU2MDgx
MTlEMjZDNDk5QzA1N0MyQjQ2MzIxOEFCNEEzN0EwQzQzNUY2NDRCMDlBNTVENTZF
MEVGOUYxQ0FDODJGQzlENUVFNjJCRDQ4OUIyODBGNDA0MUY4QkNFMDRBQ0U1MzMz
RkQzRThENUEwNjNGNkMxMDBDNURBM0QwRjRDRDAyODlFQzQ4RTYzQUNCRUUwNzAx
NDIyNTVCODI0RDU2N0I4REMzRTZBRjg0QjgwMUE5MDE2MzdEOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzx0zCEdDkXoeQS4tQ2PU2
ApmTIeuc3yARfZUMkek+cO2usYG8Io9dhQD6bn8rWhp0nW6U/KF1X22SmPtzUTsE
dvm2Sv9AWoNgT3pH+6t0sSvN9jWcoW9jelt9QKyYVmNgdQp6Or+tIa5ygssXe2tU
GU4d7x5MrfziNcxMLIjQxjRs/RIKsX8V8tLkUEoWsgeRlgKOnObZ1Kqfjjly3ycE
1N7dVggRnSbEmcBXwrRjIYq0o3oMQ19kSwmlXVbg758crIL8nV7mK9SJsoD0BB+L
zgSs5TM/0+jVoGP2wQDF2j0PTNAonsSOY6y+4HAUIlW4JNVnuNw+avhLgBqQFjfZ
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUpX21iCU93ab8VPFzAQOXzUD8HzEwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMTMyMzgyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmoAwDQYJKoZIhvcN
AQELBQADggEBAAlfz1LpOPZ7gltzcsqaH/5/VJUzTXIYQ9uAs8Ha3T86rqCs64wX
7j15bDXjsUXmYYyYTdLcrN0Xs6GQ6TGygi3wsbXHAs3spTPzlDcRRkMxxWiJ89px
PUc3YH/auB59i5HerEPmi4Y5gDjBgk8BWwg+9eFCg8sXdCpgzXsrbRvE3rx9vcMY
XnYT9W2gGzlbiuLd0SAxpbS3cYt6XW2jLoumWOnrz+jURZFtfpY6QFLDW1EjmJp5
JrvAqic/D/VJ9XkD1dfJu5VAWaPDlAa2JsxI0WvrPlRvrgIbywUgfIR5r6otHuJc
2RUruU4vW2H4iHSxaJ9YVuWuyLZV5zh9p0c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org