Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133352e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3133352e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          FpJZKV4tFCKtSp410C/FZR0ZhhvwipB19LnxnH/qglM=
Subject key identifier:   17:15:38:B4:3B:2A:1D:1E:CC:B6:C2:56:ED:FF:94:A4:A8:69:DE:E8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7EB67C2FB122A0B721CB52ABF8F952C7E0CA2AAD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133352e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:04 +0000
ROA not before:           Thu 01 Jul 2021 07:55:04 +0000
ROA not after:            Fri 01 Jul 2022 08:00:04 +0000
asID:                     131111
IP address blocks:        103.154.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b6:7c:2f:b1:22:a0:b7:21:cb:52:ab:f8:f9:52:c7:e0:ca:2a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:04 2021 GMT
            Not After : Jul  1 08:00:04 2022 GMT
        Subject: CN=3082010A0282010100C5D015ECE4E55D21235A302EDF04668CAB6C6B3831FBEE332DE93A05A491BF5BA88E98646C1AD864305D38A717800F92DEA11F2AD948307267761863743E8838ECF4E421891CC0A030EF47653EDF5C3BE90733A88EF23D1EC59519193B82F942264944BD2EC3DEC589F5EDD622FBD03913FF1CDFD5C7CF418FADAF73C49B58F171589ABAFC81F0630BDF4B5BF05FA348CEBED836113866D3BDB17D628DB5D36BF04B38C58AE32801B9646C4311F7EB337DED29746B9E37E8C8C414C6F691D707DA0ED7FAC874E08E0E1AF40E479C7F06F48DBB656D75D713482A81509895B5DA4893E7CA9A0A13A94FEEC3B6370B721DE2359A27AF30224E87855E88918D838F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:15:ec:e4:e5:5d:21:23:5a:30:2e:df:04:
                    66:8c:ab:6c:6b:38:31:fb:ee:33:2d:e9:3a:05:a4:
                    91:bf:5b:a8:8e:98:64:6c:1a:d8:64:30:5d:38:a7:
                    17:80:0f:92:de:a1:1f:2a:d9:48:30:72:67:76:18:
                    63:74:3e:88:38:ec:f4:e4:21:89:1c:c0:a0:30:ef:
                    47:65:3e:df:5c:3b:e9:07:33:a8:8e:f2:3d:1e:c5:
                    95:19:19:3b:82:f9:42:26:49:44:bd:2e:c3:de:c5:
                    89:f5:ed:d6:22:fb:d0:39:13:ff:1c:df:d5:c7:cf:
                    41:8f:ad:af:73:c4:9b:58:f1:71:58:9a:ba:fc:81:
                    f0:63:0b:df:4b:5b:f0:5f:a3:48:ce:be:d8:36:11:
                    38:66:d3:bd:b1:7d:62:8d:b5:d3:6b:f0:4b:38:c5:
                    8a:e3:28:01:b9:64:6c:43:11:f7:eb:33:7d:ed:29:
                    74:6b:9e:37:e8:c8:c4:14:c6:f6:91:d7:07:da:0e:
                    d7:fa:c8:74:e0:8e:0e:1a:f4:0e:47:9c:7f:06:f4:
                    8d:bb:65:6d:75:d7:13:48:2a:81:50:98:95:b5:da:
                    48:93:e7:ca:9a:0a:13:a9:4f:ee:c3:b6:37:0b:72:
                    1d:e2:35:9a:27:af:30:22:4e:87:85:5e:88:91:8d:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:15:38:B4:3B:2A:1D:1E:CC:B6:C2:56:ED:FF:94:A4:A8:69:DE:E8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133352e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:26:71:51:6a:a1:8c:1e:37:50:41:5a:5e:17:f9:17:52:
         bf:d3:47:7e:ad:c2:a2:31:67:70:38:39:da:19:c9:8e:55:9c:
         2e:f6:cb:b1:92:26:29:f8:b4:c6:2c:a3:93:d5:eb:bb:48:07:
         24:b8:d5:b5:ac:e6:7d:ef:50:6c:79:0b:cb:a0:bc:84:0f:82:
         d9:74:ff:b0:d4:d2:df:82:19:62:71:64:c0:b4:be:d5:0c:f8:
         1a:e9:4d:dc:d6:d9:6e:e4:37:37:47:0d:c5:f6:8b:92:f4:07:
         4e:88:a8:a6:57:c4:be:85:00:bb:29:ba:fd:c2:f2:26:d9:45:
         d5:71:83:4e:75:88:25:51:5e:15:f4:ea:cc:59:92:18:c9:a7:
         95:4e:4b:5b:f1:b9:a2:df:51:95:21:36:f6:86:f1:37:9b:dd:
         2d:2f:2d:1c:ba:67:38:41:53:01:6e:d2:e4:aa:77:3a:e7:74:
         a8:de:5c:84:a7:77:94:a8:cd:d1:de:87:97:97:54:90:f2:eb:
         49:34:4b:c2:de:bc:2e:86:98:a1:5a:c1:4e:ba:ec:82:62:8a:
         8e:64:3f:a9:41:df:fe:c6:9a:ce:3c:1e:fb:22:04:47:0b:44:
         52:e6:d2:78:da:02:46:d8:31:56:aa:e3:c8:0d:b5:af:84:94:
         72:08:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org