Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3135322e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3135322e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          M6cK9EiUyDFSgYF/IMG6dN/H2eki8kkh56+P1AvkCzw=
Subject key identifier:   2B:79:0F:F0:6E:E0:89:4B:64:45:20:72:DC:28:87:79:81:11:0C:42
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       135137B9A16A360A9230C2252974BDDDBD5CE35D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3135322e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:14 +0000
ROA not before:           Thu 01 Jul 2021 07:55:14 +0000
ROA not after:            Fri 01 Jul 2022 08:00:14 +0000
asID:                     131111
IP address blocks:        103.154.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:51:37:b9:a1:6a:36:0a:92:30:c2:25:29:74:bd:dd:bd:5c:e3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:14 2021 GMT
            Not After : Jul  1 08:00:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:bb:bb:e9:45:0e:9f:72:85:9a:66:7a:fc:
                    8f:08:96:7f:cb:5c:b5:e1:64:6b:8b:d4:a7:d5:df:
                    1d:b1:f3:0e:c2:4c:d8:77:74:23:bc:88:05:32:22:
                    a9:76:f6:16:d7:c6:21:5a:3a:bb:cd:a3:9a:27:ed:
                    66:c6:4b:27:5b:c2:44:d8:b5:19:47:09:17:e7:df:
                    e0:5c:b6:bd:dc:fb:a6:76:92:01:44:8e:bc:42:f0:
                    67:db:50:51:fc:c8:91:53:db:a2:a0:15:61:17:04:
                    6a:d8:37:4d:4a:33:17:a7:69:5e:c7:d2:af:cc:52:
                    25:0f:cc:a9:40:d9:0e:90:95:86:0e:eb:1a:9d:9a:
                    91:27:1d:83:35:ff:21:fe:c0:0f:e5:f9:5d:7d:1d:
                    b2:56:9c:ab:a6:ab:8a:a5:2a:32:f8:fa:47:4d:ca:
                    17:bf:51:d8:59:6d:2e:cd:2c:c4:21:4e:d2:50:ba:
                    3e:11:6c:4e:8c:93:10:8c:1c:0e:57:61:2c:ba:cc:
                    7d:a8:c0:90:3e:f2:cc:57:ed:3e:04:d7:04:1a:ea:
                    41:b4:2f:93:79:45:12:26:de:97:db:5d:77:80:31:
                    8a:41:ff:ef:11:20:23:80:85:29:9b:ba:82:73:ca:
                    91:0e:5e:e8:aa:e0:16:1e:57:fd:6a:9f:1e:80:b2:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:79:0F:F0:6E:E0:89:4B:64:45:20:72:DC:28:87:79:81:11:0C:42
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3135322e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:db:9d:13:5a:ac:66:9d:6f:b7:a6:95:2c:bd:6e:66:0b:2a:
         68:ee:a7:e5:cb:87:d0:c4:65:c1:06:45:36:be:ee:9e:08:07:
         9b:64:aa:a0:f4:10:3d:89:e7:7a:24:8f:c1:70:2b:d2:26:77:
         33:36:ba:5c:26:d3:e4:4f:50:af:93:ed:6e:74:44:7c:bb:bb:
         ac:0d:10:d3:28:c4:21:91:fc:87:46:b3:7d:e2:7c:d8:4f:d2:
         6b:92:a3:92:5b:ca:c4:64:95:e7:fd:76:bd:12:62:db:86:8a:
         97:76:11:2a:62:05:26:88:6e:1d:e5:a0:d6:e4:7b:dd:87:5d:
         0d:2a:85:1b:91:0d:73:b2:b0:04:99:d7:49:d8:70:72:06:bb:
         9c:ed:d6:dd:6c:2a:c5:d8:d9:2e:9b:6d:0f:e1:6a:f1:c9:eb:
         45:12:39:f2:40:c3:26:f7:ce:14:76:b7:28:7b:d9:2d:5c:c9:
         b4:27:45:ed:92:13:4b:af:50:68:cd:0f:51:df:76:04:80:2f:
         2f:fa:e3:1c:23:9b:bf:e4:bb:a5:38:1e:7e:d1:64:0b:7d:d8:
         07:9a:38:76:54:ad:62:a3:9f:92:df:5a:33:2a:92:7a:35:c1:
         e5:17:dd:8d:f1:ba:d4:ad:76:7b:2e:09:94:6c:5f:f7:a7:81:
         2c:3d:79:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org