Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3135312e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3135312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          A4+o1XEZZnuV3p58raWUkhpi9QPOs3JWbaF7nMbSTDc=
Subject key identifier:   2C:00:BF:D3:EC:68:E6:BC:0D:91:1A:A7:11:A3:60:EB:68:24:3B:70
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3AF642802448C048EC8BF9A0586B3FB8C005EAD4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3135312e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:05 +0000
ROA not before:           Thu 01 Jul 2021 07:55:05 +0000
ROA not after:            Fri 01 Jul 2022 08:00:05 +0000
asID:                     131111
IP address blocks:        103.154.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f6:42:80:24:48:c0:48:ec:8b:f9:a0:58:6b:3f:b8:c0:05:ea:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:05 2021 GMT
            Not After : Jul  1 08:00:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:9e:f8:5e:2b:43:ae:8a:7e:f0:8d:8c:81:
                    60:82:8e:01:49:90:4b:c9:6b:5c:ad:50:f5:96:c8:
                    1f:10:8b:42:93:41:78:fa:31:a2:d6:81:e0:48:61:
                    3e:4c:a9:be:04:d4:b8:2b:5a:23:bb:5c:c2:48:33:
                    24:c6:90:33:c8:26:c1:67:19:d3:79:43:94:fe:4a:
                    7b:d6:35:27:76:d8:b9:d6:69:8f:de:40:49:3d:11:
                    03:8f:0a:81:ec:02:11:7c:ae:f6:28:24:51:d7:26:
                    ee:30:f9:25:6b:35:49:95:d7:76:79:13:18:6f:7e:
                    db:d2:5d:bf:64:30:ee:58:33:8d:ec:b6:2e:7c:e1:
                    3a:2c:22:3c:da:5f:62:81:44:37:4b:9b:e1:8f:f7:
                    83:3f:f4:65:a6:e6:dc:a4:5c:47:5e:31:94:9d:53:
                    cf:4c:a9:95:83:72:44:14:c9:70:1e:e4:e7:a7:02:
                    a4:4d:0f:c5:d0:1a:6e:8f:5b:bf:c1:97:a6:fe:13:
                    74:44:b5:af:6e:7d:88:c6:e4:eb:5a:2b:10:d6:25:
                    25:4e:cf:a5:44:18:9c:0e:5a:42:7a:d4:ff:3c:45:
                    f0:ac:3e:8b:b0:0e:e8:e9:a4:f3:3e:95:ec:37:34:
                    c2:68:97:e6:d7:4a:9f:b3:01:d4:49:93:7c:f8:1f:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:00:BF:D3:EC:68:E6:BC:0D:91:1A:A7:11:A3:60:EB:68:24:3B:70
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3135312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:3e:6e:68:b8:63:ec:50:f0:34:62:7c:6e:40:20:b8:d8:02:
         1c:da:dc:28:3c:68:c0:f5:33:17:9a:a8:0a:28:e3:9a:22:e9:
         b4:bd:21:38:6b:ab:96:53:a0:d5:91:26:52:f9:67:ec:10:4c:
         53:6c:a8:b4:b1:95:06:f3:db:8e:a3:0f:32:eb:22:0e:db:36:
         ca:cc:63:29:4d:80:63:26:0f:fb:71:70:4a:4c:94:55:fd:9b:
         97:f7:e4:a1:eb:6c:e9:d4:3f:4a:9e:e0:8a:ae:e8:a4:aa:40:
         ac:a2:39:33:67:ff:c1:ed:d1:b4:ee:c4:67:8e:cc:f4:60:f7:
         4a:73:f7:fa:44:15:fe:12:9d:50:43:2e:85:26:31:5d:b7:d6:
         53:2a:ad:03:3b:33:86:0b:8e:5a:f9:44:63:a9:c3:13:b1:3f:
         3f:00:4c:d2:be:0f:90:fb:42:df:f9:ac:39:e1:c5:8d:7e:e7:
         bc:d1:f4:c8:9b:48:e7:3a:ba:e3:bf:3a:6b:c1:9d:75:3a:16:
         2a:3d:e4:b3:f1:44:f3:88:4b:fc:50:a0:de:4b:82:95:91:fb:
         24:7e:57:71:71:d1:f8:4a:8d:b4:48:5e:fb:e3:cd:dd:1c:9c:
         74:a0:32:5f:fd:04:2a:24:d6:d2:16:5f:25:b1:08:ec:a6:0b:
         5a:48:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org