Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3135332e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3135332e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          WgG0RxyLJp1NguM5SWL6DlGOnu3SMa0xcqIckmW3x1k=
Subject key identifier:   FA:AA:7D:39:DB:CE:50:81:AF:84:37:52:9B:13:83:9F:B7:CA:6A:6D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       03A2E4D193A3857B38742FEBA31D3B38333D80C2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3135332e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:05 +0000
ROA not before:           Thu 01 Jul 2021 07:55:05 +0000
ROA not after:            Fri 01 Jul 2022 08:00:05 +0000
asID:                     131111
IP address blocks:        103.154.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a2:e4:d1:93:a3:85:7b:38:74:2f:eb:a3:1d:3b:38:33:3d:80:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:05 2021 GMT
            Not After : Jul  1 08:00:05 2022 GMT
        Subject: CN=3082010A0282010100A4318B4AFEA6A12C4FC9B0063ACAD83E2F52F0C4C64DBB6166E71097EC484282EB391E6A0BCB180427DF1911C90795850ACF760A26BBB1B452F176355CD76ECE1EF823971B1F66C3412C52E38A55EB6FE4DCE0AB3E96091936449A4F9F0FEC7FABBC62F27076F51055FF7623D1A6B037988ED06726F378768DE15D9C333393A8D05F6C65DE6ECCE02C4207375454E21CE0E2776AFBF088CE1A5D7AD21B319395D07DA3DE8F8FA7DE4077AB4B30C3BFC654E876793E7F9F75F702F6EC51E613C7CB95CF8FC22471F797BF60331A097FD10576C8AC1A62EEB243E5B3B54D5E3F0B3BCBC6B1D72C88143E4C23FA7CB159E7064FC7ED3F2686B2397856B1FFB5D7C50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:8b:4a:fe:a6:a1:2c:4f:c9:b0:06:3a:ca:
                    d8:3e:2f:52:f0:c4:c6:4d:bb:61:66:e7:10:97:ec:
                    48:42:82:eb:39:1e:6a:0b:cb:18:04:27:df:19:11:
                    c9:07:95:85:0a:cf:76:0a:26:bb:b1:b4:52:f1:76:
                    35:5c:d7:6e:ce:1e:f8:23:97:1b:1f:66:c3:41:2c:
                    52:e3:8a:55:eb:6f:e4:dc:e0:ab:3e:96:09:19:36:
                    44:9a:4f:9f:0f:ec:7f:ab:bc:62:f2:70:76:f5:10:
                    55:ff:76:23:d1:a6:b0:37:98:8e:d0:67:26:f3:78:
                    76:8d:e1:5d:9c:33:33:93:a8:d0:5f:6c:65:de:6e:
                    cc:e0:2c:42:07:37:54:54:e2:1c:e0:e2:77:6a:fb:
                    f0:88:ce:1a:5d:7a:d2:1b:31:93:95:d0:7d:a3:de:
                    8f:8f:a7:de:40:77:ab:4b:30:c3:bf:c6:54:e8:76:
                    79:3e:7f:9f:75:f7:02:f6:ec:51:e6:13:c7:cb:95:
                    cf:8f:c2:24:71:f7:97:bf:60:33:1a:09:7f:d1:05:
                    76:c8:ac:1a:62:ee:b2:43:e5:b3:b5:4d:5e:3f:0b:
                    3b:cb:c6:b1:d7:2c:88:14:3e:4c:23:fa:7c:b1:59:
                    e7:06:4f:c7:ed:3f:26:86:b2:39:78:56:b1:ff:b5:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AA:7D:39:DB:CE:50:81:AF:84:37:52:9B:13:83:9F:B7:CA:6A:6D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3135332e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:40:5d:b0:4f:51:f3:66:21:0f:68:9e:12:31:42:70:e6:09:
         72:86:af:26:37:96:bf:c8:40:d2:a1:8d:b8:78:b1:65:f6:87:
         71:a2:1e:a2:7c:43:8d:d8:c1:f8:ed:cc:44:53:ea:63:52:96:
         e6:c8:66:c6:9d:97:27:61:b3:b7:bd:49:a9:b3:a5:e1:c4:fa:
         c6:e4:e2:6a:01:67:8f:df:7a:9c:50:19:92:ab:9c:7f:a5:f0:
         9b:76:b2:2c:2d:00:dc:7b:c7:7f:c7:98:84:a0:c4:14:09:59:
         b4:92:61:9c:60:07:03:f1:a8:49:af:f9:13:41:0b:fe:7e:b4:
         9c:18:fd:67:d1:5f:f6:a4:e2:fe:56:71:e5:82:df:60:cd:06:
         fa:c1:54:85:cd:dd:33:49:ad:d2:2f:25:ef:88:16:4e:3c:60:
         34:1e:6e:ff:c7:8e:b7:0f:81:f2:cf:c5:ea:e9:27:40:25:89:
         7f:e1:d2:c7:62:33:eb:ed:24:be:f5:b5:59:91:e6:2b:f4:60:
         58:74:65:9e:bc:e6:5c:9e:6a:71:49:a5:b8:21:61:34:48:e4:
         7d:8b:33:51:ac:9d:bb:72:7c:8e:85:36:2a:24:36:90:99:e7:
         a1:2f:28:10:7e:63:50:0a:0b:87:a8:cb:e4:82:3e:1f:3f:80:
         ab:c7:78:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org