Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134362e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3134362e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          zxhmqhzXoHRcDxzWyvROZ/widmr0474GJAdmsK3ceGg=
Subject key identifier:   E4:49:7D:B3:96:E1:80:5C:6E:38:ED:6B:02:3B:3B:8F:E6:50:40:12
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0CBABA6B37CB7E5948DCEE8BF63E036CFC01D438
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134362e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:03 +0000
ROA not before:           Thu 01 Jul 2021 07:55:03 +0000
ROA not after:            Fri 01 Jul 2022 08:00:03 +0000
asID:                     131111
IP address blocks:        103.154.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ba:ba:6b:37:cb:7e:59:48:dc:ee:8b:f6:3e:03:6c:fc:01:d4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:03 2021 GMT
            Not After : Jul  1 08:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ee:e0:2e:fe:c8:77:5d:bf:15:ab:71:72:fb:
                    c6:cb:22:d7:b3:11:28:20:2b:a9:67:2f:19:2a:6e:
                    1f:35:a2:7d:ed:62:5d:ea:ed:10:9e:67:e4:d3:00:
                    66:fd:ce:d2:e3:52:9f:e5:8f:84:65:6d:7f:c8:c4:
                    ee:2d:60:6e:6a:e8:80:32:33:28:8d:75:66:bd:75:
                    ff:c2:09:c8:23:41:7a:76:22:0f:a9:4e:ac:d8:c3:
                    fc:37:91:7d:6a:38:20:9e:61:a6:b5:02:d7:13:83:
                    6c:16:4f:13:cd:2b:07:d0:a8:a3:71:b4:01:d0:8c:
                    36:40:68:6a:d9:ab:d9:57:3b:e4:26:e6:ee:03:7a:
                    05:26:2e:0d:19:74:63:df:fc:7b:69:53:12:cd:d4:
                    b1:38:86:e1:b5:79:9a:fb:65:d7:24:62:e6:de:16:
                    3d:4c:e5:af:ed:01:b6:7d:a0:b8:07:97:3b:9f:7b:
                    89:ee:3a:49:7e:77:9c:bd:10:19:df:ba:15:1d:b3:
                    d4:3a:dc:cc:09:3f:ab:70:36:b7:de:be:16:9b:ef:
                    f0:7f:4a:1f:3f:a8:b1:63:71:a5:d1:00:78:d4:09:
                    58:d2:e4:d9:d9:b6:97:43:3c:db:57:48:7b:33:80:
                    31:e3:f9:f3:ed:d0:6e:cb:57:ac:4c:72:fe:d9:c7:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:49:7D:B3:96:E1:80:5C:6E:38:ED:6B:02:3B:3B:8F:E6:50:40:12
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134362e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:da:3b:d1:ed:98:b4:3e:15:d9:cb:af:87:21:81:81:74:ed:
         62:a0:07:78:46:62:7f:d2:00:db:9a:1a:d6:88:b3:f6:df:22:
         69:e4:5c:51:f7:56:63:f4:97:06:53:1b:4b:29:dd:36:66:69:
         2b:a3:33:93:83:fd:f0:39:45:99:e2:02:67:2e:6d:e2:4b:90:
         82:03:9d:f9:9f:7a:6b:6f:1c:6f:cc:04:5d:e8:d9:41:92:fb:
         80:4d:57:54:aa:9e:f4:75:63:ca:12:81:22:56:3d:7b:fb:c0:
         ce:94:b0:c3:de:6b:e3:c1:d9:d0:25:bb:e0:a7:b6:c5:28:d3:
         44:02:45:0b:f4:a7:30:af:54:eb:a4:5b:05:04:15:b5:e6:a3:
         16:6a:b1:68:d3:f1:dc:bc:f0:ec:ea:d4:49:7a:f4:b0:68:f5:
         ff:c8:c4:a9:38:d5:fb:bf:c6:cf:ea:46:39:5b:91:b3:f1:69:
         c4:a0:db:2d:0e:1a:2d:75:5e:80:b7:70:f1:96:2d:e4:58:91:
         ab:1e:f9:d4:ef:a4:59:8b:71:a3:cc:81:35:35:d7:67:cc:d9:
         27:dc:a8:43:db:22:d9:e5:c6:8d:a7:fe:86:d8:ad:fb:5d:10:
         6c:ad:b8:7a:74:a5:74:f8:2d:ce:a9:4d:09:fa:8b:73:63:38:
         99:17:9a:41
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUDLq6azfLfllI3O6L9j4DbPwB1DgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUwM1oX
DTIyMDcwMTA4MDAwM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFMUVFRTAyRUZFQzg3NzVEQkYxNUFCNzE3MkZCQzZDQjIyRDdCMzExMjgy
MDJCQTk2NzJGMTkyQTZFMUYzNUEyN0RFRDYyNURFQUVEMTA5RTY3RTREMzAwNjZG
RENFRDJFMzUyOUZFNThGODQ2NTZEN0ZDOEM0RUUyRDYwNkU2QUU4ODAzMjMzMjg4
RDc1NjZCRDc1RkZDMjA5QzgyMzQxN0E3NjIyMEZBOTRFQUNEOEMzRkMzNzkxN0Q2
QTM4MjA5RTYxQTZCNTAyRDcxMzgzNkMxNjRGMTNDRDJCMDdEMEE4QTM3MUI0MDFE
MDhDMzY0MDY4NkFEOUFCRDk1NzNCRTQyNkU2RUUwMzdBMDUyNjJFMEQxOTc0NjNE
RkZDN0I2OTUzMTJDREQ0QjEzODg2RTFCNTc5OUFGQjY1RDcyNDYyRTZERTE2M0Q0
Q0U1QUZFRDAxQjY3REEwQjgwNzk3M0I5RjdCODlFRTNBNDk3RTc3OUNCRDEwMTlE
RkJBMTUxREIzRDQzQURDQ0MwOTNGQUI3MDM2QjdERUJFMTY5QkVGRjA3RjRBMUYz
RkE4QjE2MzcxQTVEMTAwNzhENDA5NThEMkU0RDlEOUI2OTc0MzNDREI1NzQ4N0Iz
MzgwMzFFM0Y5RjNFREQwNkVDQjU3QUM0QzcyRkVEOUM3OTkyRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh7uAu/sh3Xb8Vq3Fy+8bL
ItezESggK6lnLxkqbh81on3tYl3q7RCeZ+TTAGb9ztLjUp/lj4RlbX/IxO4tYG5q
6IAyMyiNdWa9df/CCcgjQXp2Ig+pTqzYw/w3kX1qOCCeYaa1AtcTg2wWTxPNKwfQ
qKNxtAHQjDZAaGrZq9lXO+Qm5u4DegUmLg0ZdGPf/HtpUxLN1LE4huG1eZr7Zdck
YubeFj1M5a/tAbZ9oLgHlzufe4nuOkl+d5y9EBnfuhUds9Q63MwJP6twNrfevhab
7/B/Sh8/qLFjcaXRAHjUCVjS5NnZtpdDPNtXSHszgDHj+fPt0G7LV6xMcv7Zx5kt
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQU5El9s5bhgFxuOO1rAjs7j+ZQQBIwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMTM0MzYyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmpIwDQYJKoZIhvcN
AQELBQADggEBAAraO9HtmLQ+FdnLr4chgYF07WKgB3hGYn/SANuaGtaIs/bfImnk
XFH3VmP0lwZTG0sp3TZmaSujM5OD/fA5RZniAmcubeJLkIIDnfmfemtvHG/MBF3o
2UGS+4BNV1SqnvR1Y8oSgSJWPXv7wM6UsMPea+PB2dAlu+CntsUo00QCRQv0pzCv
VOukWwUEFbXmoxZqsWjT8dy88Ozq1El69LBo9f/IxKk41fu/xs/qRjlbkbPxacSg
2y0OGi11XoC3cPGWLeRYkase+dTvpFmLcaPMgTU112fM2SfcqEPbItnlxo2n/obY
rftdEGytuHp0pXT4Lc6pTQn6i3NjOJkXmkE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org