Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134322e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3134322e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          HUEwBn46+4DpReSIo+AgQHBdzs35ilhlSmdJCRirj3Y=
Subject key identifier:   B5:F9:B5:AC:08:97:C1:85:FD:FC:CA:DC:FF:2E:02:F8:F4:7D:78:37
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       437ED7359A78E40DDA24E959A3FFAF991B9625CD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134322e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:13 +0000
ROA not before:           Thu 01 Jul 2021 07:55:13 +0000
ROA not after:            Fri 01 Jul 2022 08:00:13 +0000
asID:                     131111
IP address blocks:        103.154.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7e:d7:35:9a:78:e4:0d:da:24:e9:59:a3:ff:af:99:1b:96:25:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:13 2021 GMT
            Not After : Jul  1 08:00:13 2022 GMT
        Subject: CN=3082010A02820101009A9811560DF29EE001D37BB4AB4F06961AFC965F8B81043CD73D0EBEBFFC64442593598BA8342A6673B8C3235E613CB50214FEC4AC22948288B7AE8A7F070363029DD8897BB0DFD217861AF8541E96D5071B85F00B8D5A749E587387AE347184F6BA3635E605169A46466B39A4D1C564BB75835443A5E771AAA47D402F7D2D32E08032416ECF43093D3D0C48B0414118FB08D9E43D284FBD017CD122AA0498724408A8566211463AB1B5A6B6277095BD041D5D9D6D096CFEF1F4DBB5B5A6A34F99EA75F0799DF787A8D948FD1A821EB3D02D4EB5FEAD463F97214343A676819A1D27FA24044049B2ED380C7CC10D48EC86472E40073C7BFC1E5DE4F278EA49DB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:98:11:56:0d:f2:9e:e0:01:d3:7b:b4:ab:4f:
                    06:96:1a:fc:96:5f:8b:81:04:3c:d7:3d:0e:be:bf:
                    fc:64:44:25:93:59:8b:a8:34:2a:66:73:b8:c3:23:
                    5e:61:3c:b5:02:14:fe:c4:ac:22:94:82:88:b7:ae:
                    8a:7f:07:03:63:02:9d:d8:89:7b:b0:df:d2:17:86:
                    1a:f8:54:1e:96:d5:07:1b:85:f0:0b:8d:5a:74:9e:
                    58:73:87:ae:34:71:84:f6:ba:36:35:e6:05:16:9a:
                    46:46:6b:39:a4:d1:c5:64:bb:75:83:54:43:a5:e7:
                    71:aa:a4:7d:40:2f:7d:2d:32:e0:80:32:41:6e:cf:
                    43:09:3d:3d:0c:48:b0:41:41:18:fb:08:d9:e4:3d:
                    28:4f:bd:01:7c:d1:22:aa:04:98:72:44:08:a8:56:
                    62:11:46:3a:b1:b5:a6:b6:27:70:95:bd:04:1d:5d:
                    9d:6d:09:6c:fe:f1:f4:db:b5:b5:a6:a3:4f:99:ea:
                    75:f0:79:9d:f7:87:a8:d9:48:fd:1a:82:1e:b3:d0:
                    2d:4e:b5:fe:ad:46:3f:97:21:43:43:a6:76:81:9a:
                    1d:27:fa:24:04:40:49:b2:ed:38:0c:7c:c1:0d:48:
                    ec:86:47:2e:40:07:3c:7b:fc:1e:5d:e4:f2:78:ea:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F9:B5:AC:08:97:C1:85:FD:FC:CA:DC:FF:2E:02:F8:F4:7D:78:37
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134322e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:5e:f9:cd:d8:6e:4b:6c:0b:14:62:bf:0c:e1:1e:78:a2:4c:
         f5:be:1d:b3:7f:65:b8:e6:2c:fe:2a:b1:a7:5f:3a:38:ba:be:
         84:94:df:24:22:f3:66:dd:29:09:68:43:ec:56:76:d3:b2:db:
         87:e3:22:9e:82:82:d8:cf:44:6b:5c:82:0b:9d:3b:1c:1e:35:
         f8:24:c0:53:ed:ae:14:8c:4d:1a:47:12:7d:1f:06:d2:da:56:
         fc:c3:7e:8b:d8:cb:3f:f8:11:16:1b:25:5e:ad:5b:5b:3d:f7:
         b3:ae:68:71:a0:fd:e7:b0:73:b7:da:b3:b4:99:ed:f4:df:b1:
         5e:cf:e2:61:d8:95:18:92:1d:f0:00:0d:65:9d:60:1c:c4:bb:
         d9:b6:b2:70:94:de:8b:cf:53:b4:00:3c:e6:fc:9d:00:ba:bf:
         ec:d1:a1:2d:49:96:93:f8:ad:1f:12:84:de:a5:a1:7f:82:97:
         9b:2e:9a:00:05:41:74:99:a5:35:c8:cf:10:4a:87:3d:20:bf:
         f8:03:a0:9a:1d:1f:53:b7:06:6b:d8:5b:7b:48:17:91:38:59:
         8a:0c:38:af:3a:d9:8f:b7:60:46:59:71:58:ef:64:a4:ff:c8:
         1e:0a:ad:16:d3:7d:47:60:ff:ec:bb:fe:95:21:4a:66:1d:b5:
         1b:b5:1d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org