Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134352e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3134352e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          J3UwwViPUFVfATUF8JHZpNh7vL3R16lQIZu4rFzn44c=
Subject key identifier:   B3:60:51:8F:73:07:A4:92:7A:4E:26:57:C3:CB:8E:5C:83:2E:75:F9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       029C9D25CFD9E212C58E338F27E5D27918972965
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134352e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:05 +0000
ROA not before:           Thu 01 Jul 2021 07:55:05 +0000
ROA not after:            Fri 01 Jul 2022 08:00:05 +0000
asID:                     131111
IP address blocks:        103.154.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9c:9d:25:cf:d9:e2:12:c5:8e:33:8f:27:e5:d2:79:18:97:29:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:05 2021 GMT
            Not After : Jul  1 08:00:05 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b3:da:a6:64:ed:35:1f:9e:2d:27:8b:96:9c:
                    50:59:3f:a6:2c:51:66:97:48:27:cb:b1:0d:8b:90:
                    a8:6f:84:a1:6d:de:9e:93:1a:35:ed:28:e8:b1:4d:
                    66:d6:8a:f4:b6:46:0f:36:b6:85:82:96:2e:cd:ad:
                    ed:a9:33:64:27:c1:e3:e7:44:b5:bb:37:69:a9:2a:
                    05:18:18:b3:8d:89:51:ed:f4:a7:14:04:6e:a7:57:
                    42:97:d1:ce:71:3a:27:ab:10:07:a5:b4:b7:8b:dd:
                    a3:bc:ae:a4:89:c7:fd:02:ab:c4:bb:c8:50:1a:e6:
                    18:ed:8d:ef:ad:dc:9f:09:a0:b1:aa:ab:07:01:1c:
                    e5:6a:3e:d3:4d:db:c9:d1:69:a9:f7:05:13:d2:30:
                    13:9b:39:ba:1e:f4:de:e2:ff:1a:e0:a5:a1:c9:8c:
                    ac:3a:5e:df:78:9f:4e:07:ef:f6:82:50:0a:41:bd:
                    6b:0f:7d:14:f2:9c:27:59:7a:26:79:fa:a4:00:30:
                    fc:10:20:28:1a:42:80:0b:f1:2b:7e:ad:d0:9c:68:
                    70:2a:1d:5c:7c:9a:59:08:f3:4e:ef:d4:30:f9:c6:
                    ca:9a:6b:68:f5:6a:a9:a2:97:b2:fd:92:05:49:16:
                    ac:e9:f9:08:2e:56:4f:5e:8b:b0:6f:1a:ab:dc:c7:
                    37:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:60:51:8F:73:07:A4:92:7A:4E:26:57:C3:CB:8E:5C:83:2E:75:F9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134352e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:70:87:81:4d:86:d8:c4:c8:5f:c8:d4:a5:ec:97:68:ef:fa:
         dd:ce:45:fe:dc:78:a8:5e:1a:ed:05:18:ce:36:33:71:51:0a:
         9c:ff:ec:f7:b7:53:72:d5:49:6a:f3:2e:79:03:af:29:b5:02:
         92:1c:2d:d6:b4:f7:7b:7c:70:3f:ed:d4:19:82:1f:d3:04:73:
         09:62:12:20:29:33:6a:1b:d4:79:c4:c7:7d:0d:5a:7b:ae:f3:
         3e:83:00:18:69:a5:34:74:97:06:fb:25:69:d6:95:16:b5:da:
         9f:96:12:17:22:a0:f8:e4:4f:13:2f:09:65:91:59:66:2b:7c:
         68:41:e2:7d:62:8c:5a:a5:b3:11:d1:63:6e:eb:df:0f:56:39:
         d4:29:95:bd:8f:bf:e8:2c:79:f2:fc:d9:c5:77:21:6e:51:d6:
         ff:12:a0:fc:db:f9:99:39:8b:2c:64:1f:57:8d:42:00:6b:46:
         3c:4c:c4:16:e8:ab:d4:ee:08:3b:fe:fd:b2:0b:5f:19:13:76:
         e0:d2:cb:7d:f2:17:77:f1:a3:fe:03:07:0a:9d:af:22:f9:9c:
         9f:07:2d:7f:b7:f3:4b:54:bf:ec:f8:3f:3b:30:68:57:94:f7:
         7a:d6:ad:e3:66:09:02:b1:49:22:a2:52:55:d6:17:6c:50:8b:
         85:87:8e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org