Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132392e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3132392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          w0Je/YXowe0jASE9EqnGfRok0GavIDyu68XwmUXkDKo=
Subject key identifier:   9D:64:EF:5E:3A:00:63:D8:81:CE:09:F6:C9:D5:76:37:6F:F2:C6:54
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5060DF54F88A34D20128A5EFBC2D44AAE82828EE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132392e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:09 +0000
ROA not before:           Thu 01 Jul 2021 07:55:09 +0000
ROA not after:            Fri 01 Jul 2022 08:00:09 +0000
asID:                     131111
IP address blocks:        103.154.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:60:df:54:f8:8a:34:d2:01:28:a5:ef:bc:2d:44:aa:e8:28:28:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:09 2021 GMT
            Not After : Jul  1 08:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:3d:bf:61:e7:fb:a1:eb:53:88:bc:8b:37:
                    a1:41:30:85:cc:c6:4c:67:2d:87:73:0c:d4:12:3f:
                    72:06:a4:1f:35:4a:bf:98:f6:85:60:e4:7e:fb:f6:
                    01:2d:06:bb:ea:ce:75:fa:68:f0:40:46:7b:84:13:
                    80:d3:43:b6:97:55:2e:c9:7d:0a:db:7f:63:54:21:
                    fa:ba:49:7a:64:2e:54:fd:06:2f:fb:24:da:fb:b7:
                    8b:a3:22:bf:d2:79:d7:33:b5:67:e7:ea:4c:dd:ff:
                    fb:22:69:ef:c4:0b:ea:6d:ca:a5:c6:82:c2:de:53:
                    ed:1c:0a:5b:05:23:b8:41:3c:94:16:7e:06:72:ac:
                    51:75:d3:67:96:da:c9:79:c1:e3:e5:3c:ed:b9:88:
                    44:e9:07:c7:d2:b1:d7:3d:df:19:9e:19:83:0a:db:
                    9d:bb:ac:5f:f8:ab:05:2e:90:3e:9b:9e:8a:95:28:
                    c5:9e:0c:de:99:b9:38:7e:67:e3:af:34:e1:e7:d1:
                    e4:d2:a7:59:85:17:15:f8:da:fe:ac:5f:37:bf:d7:
                    dd:b1:36:4d:df:23:09:df:86:e0:3f:4c:79:c4:66:
                    c7:0b:8d:81:d4:92:76:88:74:43:59:7e:a8:c5:d5:
                    60:38:bc:c0:44:ca:5d:11:11:73:ac:e5:65:83:70:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:64:EF:5E:3A:00:63:D8:81:CE:09:F6:C9:D5:76:37:6F:F2:C6:54
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132392e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:50:bd:e2:88:d0:5b:37:34:3a:50:75:1c:b7:6e:03:b7:07:
         41:a3:e6:42:90:44:07:dc:f6:4e:20:a5:da:31:ad:58:4f:e5:
         38:6e:73:46:e9:20:f8:01:25:4d:75:b7:01:57:c8:00:5d:de:
         56:81:f9:eb:c2:7e:88:bf:2b:6a:87:d8:cb:b8:87:31:d7:9c:
         de:9b:e9:b0:21:b0:96:be:62:ec:2e:2a:c0:6f:4d:3d:4c:17:
         c9:d7:1a:e1:cd:bf:47:b2:b2:9b:61:17:7d:28:1d:15:fe:0c:
         25:22:01:ca:6d:8b:a9:19:aa:43:6d:94:68:30:af:e4:e0:ff:
         f8:20:5c:ca:47:76:37:47:db:68:81:f2:59:bb:bb:75:aa:27:
         c1:7f:58:96:c5:13:d9:12:59:10:a8:63:58:96:7c:e5:21:2f:
         f6:28:d0:48:43:bb:6c:4a:25:5f:bd:67:cd:57:9e:a0:ce:51:
         3a:63:ba:e5:d8:8c:6d:b6:eb:9f:31:01:f5:9d:bf:d8:c4:c8:
         fd:3a:7d:85:a3:45:b3:69:b5:99:16:e2:fb:9b:30:24:5b:1c:
         5d:b8:50:45:82:e6:fd:4d:bf:78:df:c1:b3:2f:74:50:ca:41:
         dd:ba:86:53:8c:8a:7d:b0:8d:bb:dc:1f:83:3c:76:55:33:bc:
         ef:cd:1e:b2
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUUGDfVPiKNNIBKKXvvC1EqugoKO4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUwOVoX
DTIyMDcwMTA4MDAwOVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFMEIzM0RCRjYxRTdGQkExRUI1Mzg4QkM4QjM3QTE0MTMwODVDQ0M2NEM2
NzJEODc3MzBDRDQxMjNGNzIwNkE0MUYzNTRBQkY5OEY2ODU2MEU0N0VGQkY2MDEy
RDA2QkJFQUNFNzVGQTY4RjA0MDQ2N0I4NDEzODBEMzQzQjY5NzU1MkVDOTdEMEFE
QjdGNjM1NDIxRkFCQTQ5N0E2NDJFNTRGRDA2MkZGQjI0REFGQkI3OEJBMzIyQkZE
Mjc5RDczM0I1NjdFN0VBNENEREZGRkIyMjY5RUZDNDBCRUE2RENBQTVDNjgyQzJE
RTUzRUQxQzBBNUIwNTIzQjg0MTNDOTQxNjdFMDY3MkFDNTE3NUQzNjc5NkRBQzk3
OUMxRTNFNTNDRURCOTg4NDRFOTA3QzdEMkIxRDczRERGMTk5RTE5ODMwQURCOURC
QkFDNUZGOEFCMDUyRTkwM0U5QjlFOEE5NTI4QzU5RTBDREU5OUI5Mzg3RTY3RTNB
RjM0RTFFN0QxRTREMkE3NTk4NTE3MTVGOERBRkVBQzVGMzdCRkQ3RERCMTM2NERE
RjIzMDlERjg2RTAzRjRDNzlDNDY2QzcwQjhEODFENDkyNzY4ODc0NDM1OTdFQThD
NUQ1NjAzOEJDQzA0NENBNUQxMTExNzNBQ0U1NjU4MzcwODA1NzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgsz2/Yef7oetTiLyLN6FB
MIXMxkxnLYdzDNQSP3IGpB81Sr+Y9oVg5H779gEtBrvqznX6aPBARnuEE4DTQ7aX
VS7JfQrbf2NUIfq6SXpkLlT9Bi/7JNr7t4ujIr/SedcztWfn6kzd//siae/EC+pt
yqXGgsLeU+0cClsFI7hBPJQWfgZyrFF102eW2sl5wePlPO25iETpB8fSsdc93xme
GYMK2527rF/4qwUukD6bnoqVKMWeDN6ZuTh+Z+OvNOHn0eTSp1mFFxX42v6sXze/
192xNk3fIwnfhuA/THnEZscLjYHUknaIdENZfqjF1WA4vMBEyl0REXOs5WWDcIBX
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUnWTvXjoAY9iBzgn2ydV2N2/yxlQwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMTMyMzkyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmoEwDQYJKoZIhvcN
AQELBQADggEBAIdQveKI0Fs3NDpQdRy3bgO3B0Gj5kKQRAfc9k4gpdoxrVhP5Thu
c0bpIPgBJU11twFXyABd3laB+evCfoi/K2qH2Mu4hzHXnN6b6bAhsJa+YuwuKsBv
TT1MF8nXGuHNv0eyspthF30oHRX+DCUiAcpti6kZqkNtlGgwr+Tg//ggXMpHdjdH
22iB8lm7u3WqJ8F/WJbFE9kSWRCoY1iWfOUhL/Yo0EhDu2xKJV+9Z81XnqDOUTpj
uuXYjG22658xAfWdv9jEyP06fYWjRbNptZkW4vubMCRbHF24UEWC5v1Nv3jfwbMv
dFDKQd26hlOMin2wjbvcH4M8dlUzvO/NHrI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org