Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134382e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3134382e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          RQ5yEE5l3/LL1dySnUcPSyRB3jH+96o0LQmyJ+8pQ38=
Subject key identifier:   40:03:44:31:AC:8A:AB:96:0B:76:F3:15:A1:85:A1:E3:08:9A:73:71
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2A539EBC7699EF6D54BFB9D3A60D2D6A41142124
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134382e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:08 +0000
ROA not before:           Thu 01 Jul 2021 07:55:08 +0000
ROA not after:            Fri 01 Jul 2022 08:00:08 +0000
asID:                     131111
IP address blocks:        103.154.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:53:9e:bc:76:99:ef:6d:54:bf:b9:d3:a6:0d:2d:6a:41:14:21:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:08 2021 GMT
            Not After : Jul  1 08:00:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:4f:be:59:bb:b4:6c:a3:2a:f7:fb:8c:13:
                    bd:ad:01:f7:a2:2b:59:ea:9d:7b:75:e5:cc:81:ef:
                    e8:5f:37:e1:95:3d:89:a3:72:16:74:34:e2:9c:22:
                    26:0b:d7:1a:c2:38:2b:ea:4c:f2:07:b5:f4:bd:6c:
                    97:b6:32:d0:9c:c3:2c:87:3b:95:9d:a9:35:ba:2f:
                    a9:dc:b7:e9:0d:df:a9:26:d5:d5:f1:96:1d:ad:d2:
                    5d:fb:8f:76:5f:42:a5:3c:90:69:9c:68:e4:4b:3d:
                    19:81:ec:26:78:07:d0:09:05:50:55:66:eb:c7:4b:
                    78:54:1a:e4:22:a6:e6:69:d9:5b:97:85:49:4c:0b:
                    6a:12:24:d4:19:57:ac:43:a3:63:d4:db:85:d9:4c:
                    b8:cc:e2:0d:50:be:34:05:97:fd:ff:c0:32:92:91:
                    8e:f8:14:c2:ec:9e:0e:6e:32:f2:19:55:10:ab:0f:
                    3d:91:62:cb:4d:b1:26:9c:69:ca:f1:f7:14:02:70:
                    27:0f:6f:71:99:11:3a:7f:90:f8:5f:fd:8a:20:fd:
                    85:6b:e8:9b:37:fd:f3:89:9e:36:a2:13:bb:34:7a:
                    fc:62:6c:46:f2:cf:21:48:f6:28:2c:7a:7b:04:a6:
                    66:61:d8:7a:69:97:1b:24:1e:ed:18:c0:5c:78:06:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:03:44:31:AC:8A:AB:96:0B:76:F3:15:A1:85:A1:E3:08:9A:73:71
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134382e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:f3:31:57:01:07:48:f8:dd:91:74:d6:a1:c0:6f:d2:29:6a:
         7a:bf:56:27:92:ac:b9:11:d7:b3:23:34:79:e4:65:12:58:92:
         e2:cd:65:27:60:99:4a:73:b2:40:92:bb:f2:f4:22:1d:26:7f:
         d6:b1:84:69:2d:55:26:91:62:b4:72:14:54:3a:7b:6b:ff:6b:
         9e:f3:a3:a6:3a:e0:28:c6:77:56:1e:8f:27:a4:32:1a:67:a2:
         56:a2:20:53:4d:c7:e0:fc:60:d8:5a:59:21:6e:60:d7:42:06:
         d4:e0:8e:1b:c4:9b:00:dc:d2:48:43:a6:ff:6c:cd:f3:6f:d3:
         56:54:48:56:16:a5:9f:a3:4e:2d:85:dc:ed:d7:18:43:c6:93:
         97:cd:8a:9f:e3:ab:ac:d6:f9:43:b5:8e:61:57:bc:60:49:c7:
         ca:42:5b:aa:59:42:5f:0e:d2:4a:28:a0:c9:af:3b:5a:9e:af:
         df:cb:98:78:03:b4:10:f0:00:96:45:69:94:21:97:13:dc:da:
         56:48:13:0c:f4:f8:f4:13:db:5e:d0:15:4d:3f:7b:91:19:66:
         43:49:d9:20:48:f7:cf:47:ba:4b:b7:99:8a:05:0d:6b:31:d3:
         ab:33:0e:a6:dd:a3:29:5f:12:d8:ef:c6:4e:fc:9f:1a:6b:c4:
         c2:77:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org