Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133312e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3133312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          0JQwUNvlnSRJL56d6PTZqayaikxfYf835bj1X3p5qH0=
Subject key identifier:   65:D4:6C:CE:F3:77:9B:55:D9:72:56:E9:7A:B6:4D:FD:E2:BC:0E:74
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       49868F8CD78FFB0175F699A96D288601BF2A5C36
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133312e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:07 +0000
ROA not before:           Thu 01 Jul 2021 07:55:07 +0000
ROA not after:            Fri 01 Jul 2022 08:00:07 +0000
asID:                     131111
IP address blocks:        103.154.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:86:8f:8c:d7:8f:fb:01:75:f6:99:a9:6d:28:86:01:bf:2a:5c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:07 2021 GMT
            Not After : Jul  1 08:00:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:d2:7d:42:8a:ad:30:17:a8:36:3f:fc:67:
                    7e:0a:b1:c2:a4:39:d9:34:98:00:80:34:67:1b:35:
                    a8:56:90:f3:90:88:23:2f:64:18:dc:10:31:0d:e5:
                    88:b1:3a:3d:72:fa:03:67:af:c0:37:0e:76:c0:e3:
                    d2:d7:7a:84:b4:0f:6c:00:4a:39:ef:bc:7d:85:34:
                    8f:fb:2a:2f:f6:7a:24:fa:9a:50:d6:ef:62:fa:e4:
                    c6:7f:5f:59:ea:24:63:f8:a8:60:56:22:7f:64:6c:
                    40:f6:51:66:af:05:11:1a:76:4d:53:57:20:30:be:
                    db:07:16:60:08:f8:45:16:13:8c:7c:bc:b9:7b:2e:
                    50:c2:62:3d:75:be:df:4d:b2:14:03:b6:67:58:91:
                    34:af:e7:f4:9c:06:f9:9e:20:ef:ed:6b:4c:49:d9:
                    31:88:65:9b:d0:c7:82:a9:50:3f:e9:33:d8:14:24:
                    20:3e:8e:1c:6a:d5:85:d1:90:9b:3c:0b:6e:ae:0c:
                    9e:45:a3:77:77:2d:b1:a9:7b:33:58:e0:4c:60:2e:
                    4b:48:93:b3:ff:07:13:93:12:fe:80:32:e7:c5:38:
                    eb:ec:2b:40:7d:c7:c7:65:26:70:f2:d5:02:4f:74:
                    74:3a:53:7d:8c:f7:b4:72:39:16:ad:31:60:01:87:
                    7a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D4:6C:CE:F3:77:9B:55:D9:72:56:E9:7A:B6:4D:FD:E2:BC:0E:74
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:30:14:e3:af:bd:dc:dd:78:05:db:17:e7:2c:82:7d:3b:66:
         8f:06:54:d5:fa:1e:7a:64:42:27:7e:90:9d:e3:57:00:d0:36:
         70:46:f2:29:9f:dd:70:fa:68:ff:c2:ab:78:15:12:f5:f4:29:
         96:c7:ed:2c:9e:96:02:91:c7:07:1b:93:16:0d:19:ca:6a:fd:
         67:7c:a8:c3:66:7c:10:10:63:92:83:8c:63:8a:35:c6:88:bf:
         0b:15:cb:35:01:92:fd:6b:47:c6:e2:56:f4:e3:2a:57:6c:0a:
         b5:95:ad:b2:63:e8:7a:b4:4b:2c:16:a8:64:a4:d6:95:07:fa:
         58:e7:48:80:56:e4:14:d8:85:02:7d:d4:fd:ba:8b:5e:7c:b2:
         6d:67:2d:ee:d7:cd:a5:47:6f:09:b7:d8:60:81:f6:c8:38:e9:
         f7:fb:a7:08:bc:90:1f:55:9a:77:1d:60:b4:1b:6a:bc:7d:a2:
         b0:47:6f:2e:e9:a4:98:46:36:45:10:5f:f3:e0:70:84:4e:93:
         85:7a:c8:dd:ff:19:41:e9:01:63:05:70:50:7e:48:8a:34:c7:
         a6:dd:3d:fd:8e:14:a0:95:0a:e6:b2:95:16:05:28:22:56:d9:
         3b:2b:da:f0:c5:6a:15:7b:ca:5f:ff:ad:46:33:0c:56:fd:44:
         9d:c9:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org