Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133362e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3133362e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          5IyzBD/5vdD6S3sbYGO7DJ3q/JoNTdV70veB3wHJv8I=
Subject key identifier:   28:9B:A3:7D:C1:85:00:15:C2:7F:37:7B:C1:66:15:38:4D:7D:88:EC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1262B7573EC21B7B3FC71F030C36C3F6147A1D54
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133362e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:09 +0000
ROA not before:           Thu 01 Jul 2021 07:55:09 +0000
ROA not after:            Fri 01 Jul 2022 08:00:09 +0000
asID:                     131111
IP address blocks:        103.154.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:62:b7:57:3e:c2:1b:7b:3f:c7:1f:03:0c:36:c3:f6:14:7a:1d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:09 2021 GMT
            Not After : Jul  1 08:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:af:89:c9:fa:42:db:41:0b:7a:3a:07:a2:38:
                    4f:d9:9e:ea:a6:a5:c8:a5:52:2a:20:38:f7:8b:2f:
                    ba:25:6d:88:bc:50:37:e7:8b:e6:11:7b:b6:cd:b5:
                    6a:57:4a:cd:31:ed:5f:5d:ea:27:9d:43:56:19:f8:
                    48:70:c0:a1:af:3e:16:d6:b4:dd:10:62:44:2a:fe:
                    4c:79:3c:d2:40:0d:66:9c:7c:f5:cd:fb:5e:fb:cf:
                    74:ae:64:65:c8:e9:b6:0f:48:5b:5e:41:ab:ce:95:
                    21:15:e9:31:15:08:55:63:8d:a5:1e:e3:ab:0c:95:
                    9d:19:24:0e:72:b5:fd:0e:0f:c7:5a:24:55:61:f5:
                    a3:8b:86:66:bf:26:4c:e6:5c:f2:0b:ab:41:10:29:
                    5e:bc:fd:8d:46:a1:a5:1f:cf:d8:66:08:18:1e:12:
                    28:75:f9:50:35:42:64:f6:7e:12:dc:2e:01:be:2f:
                    86:a7:3c:c3:e4:41:31:d1:28:a3:27:20:37:5b:93:
                    09:6e:26:c7:55:d5:fa:1f:45:91:9a:be:fa:ca:ae:
                    d8:69:b2:e2:05:46:6b:a6:04:fd:e1:ac:04:c7:6f:
                    f1:8c:f4:ee:f7:ed:7e:80:ea:46:a4:a0:b6:b2:d6:
                    48:b7:4d:a0:0b:22:38:e6:07:4f:83:bd:5d:b9:86:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9B:A3:7D:C1:85:00:15:C2:7F:37:7B:C1:66:15:38:4D:7D:88:EC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133362e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:67:43:c8:03:f0:23:58:54:c2:41:42:d0:23:c5:9f:fa:12:
         4a:61:de:e3:93:e6:2a:2e:ef:45:33:4d:86:91:0f:f4:ba:85:
         c9:a1:73:ec:cc:39:61:39:0f:01:51:b2:46:1b:fe:84:ca:7c:
         16:96:27:18:1a:c9:6e:68:44:32:d4:45:29:37:3e:45:5f:00:
         90:7a:51:14:ea:93:73:25:2c:49:1a:29:78:33:9a:c9:91:b0:
         b7:61:d9:b4:6d:82:de:b2:06:67:f9:e5:c8:cb:33:bf:a0:29:
         cf:40:89:d4:ec:9a:5a:72:ac:c5:d1:59:54:ae:5a:d7:fa:b0:
         3c:86:b2:5e:1f:45:4d:f6:81:40:b9:9f:35:d3:5d:9d:fc:66:
         3a:e1:b6:ec:fc:45:e0:c1:29:53:97:e8:21:77:86:d7:4f:d1:
         fe:e9:40:11:cb:79:86:13:8f:5c:0f:c0:af:ed:06:5b:0c:d3:
         0c:1c:89:a5:3a:4a:e5:eb:3d:82:c9:04:b7:40:00:73:99:e9:
         95:d6:8e:31:63:98:8f:ca:ea:5c:c6:57:02:42:11:ca:63:a1:
         6a:4c:ea:1b:93:06:94:28:0d:52:aa:46:35:98:ee:65:b0:e2:
         85:41:be:c0:f0:ba:28:98:16:0f:d1:71:f3:4a:ed:3e:0c:b3:
         b7:f2:0a:ef
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUEmK3Vz7CG3s/xx8DDDbD9hR6HVQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUwOVoX
DTIyMDcwMTA4MDAwOVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBERkFGODlDOUZBNDJEQjQxMEI3QTNBMDdBMjM4NEZEOTlFRUFBNkE1QzhB
NTUyMkEyMDM4Rjc4QjJGQkEyNTZEODhCQzUwMzdFNzhCRTYxMTdCQjZDREI1NkE1
NzRBQ0QzMUVENUY1REVBMjc5RDQzNTYxOUY4NDg3MEMwQTFBRjNFMTZENkI0REQx
MDYyNDQyQUZFNEM3OTNDRDI0MDBENjY5QzdDRjVDREZCNUVGQkNGNzRBRTY0NjVD
OEU5QjYwRjQ4NUI1RTQxQUJDRTk1MjExNUU5MzExNTA4NTU2MzhEQTUxRUUzQUIw
Qzk1OUQxOTI0MEU3MkI1RkQwRTBGQzc1QTI0NTU2MUY1QTM4Qjg2NjZCRjI2NENF
NjVDRjIwQkFCNDExMDI5NUVCQ0ZEOEQ0NkExQTUxRkNGRDg2NjA4MTgxRTEyMjg3
NUY5NTAzNTQyNjRGNjdFMTJEQzJFMDFCRTJGODZBNzNDQzNFNDQxMzFEMTI4QTMy
NzIwMzc1QjkzMDk2RTI2Qzc1NUQ1RkExRjQ1OTE5QUJFRkFDQUFFRDg2OUIyRTIw
NTQ2NkJBNjA0RkRFMUFDMDRDNzZGRjE4Q0Y0RUVGN0VEN0U4MEVBNDZBNEEwQjZC
MkQ2NDhCNzREQTAwQjIyMzhFNjA3NEY4M0JENURCOTg2QjUyOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfr4nJ+kLbQQt6OgeiOE/Z
nuqmpcilUiogOPeLL7olbYi8UDfni+YRe7bNtWpXSs0x7V9d6iedQ1YZ+EhwwKGv
PhbWtN0QYkQq/kx5PNJADWacfPXN+177z3SuZGXI6bYPSFteQavOlSEV6TEVCFVj
jaUe46sMlZ0ZJA5ytf0OD8daJFVh9aOLhma/JkzmXPILq0EQKV68/Y1GoaUfz9hm
CBgeEih1+VA1QmT2fhLcLgG+L4anPMPkQTHRKKMnIDdbkwluJsdV1fofRZGavvrK
rthpsuIFRmumBP3hrATHb/GM9O737X6A6kakoLay1ki3TaALIjjmB0+DvV25hrUp
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUKJujfcGFABXCfzd7wWYVOE19iOwwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMTMzMzYyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmogwDQYJKoZIhvcN
AQELBQADggEBAGtnQ8gD8CNYVMJBQtAjxZ/6Ekph3uOT5iou70UzTYaRD/S6hcmh
c+zMOWE5DwFRskYb/oTKfBaWJxgayW5oRDLURSk3PkVfAJB6URTqk3MlLEkaKXgz
msmRsLdh2bRtgt6yBmf55cjLM7+gKc9AidTsmlpyrMXRWVSuWtf6sDyGsl4fRU32
gUC5nzXTXZ38Zjrhtuz8ReDBKVOX6CF3htdP0f7pQBHLeYYTj1wPwK/tBlsM0wwc
iaU6SuXrPYLJBLdAAHOZ6ZXWjjFjmI/K6lzGVwJCEcpjoWpM6huTBpQoDVKqRjWY
7mWw4oVBvsDwuiiYFg/RcfNK7T4Ms7fyCu8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org