Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231312e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3231312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          MpOmjvgcZMNzqTuiYjrjfsliZddEeQiUdHbdSX/ciSw=
Subject key identifier:   C1:A9:D4:88:51:2B:12:1C:B5:8C:49:B8:42:79:CD:FB:7E:D1:72:EC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       294F8CAC0BF34A79F26CAF3D0F7B89925C76FDEE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231312e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:06 +0000
ROA not before:           Thu 01 Jul 2021 07:55:06 +0000
ROA not after:            Fri 01 Jul 2022 08:00:06 +0000
asID:                     131111
IP address blocks:        103.154.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4f:8c:ac:0b:f3:4a:79:f2:6c:af:3d:0f:7b:89:92:5c:76:fd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:06 2021 GMT
            Not After : Jul  1 08:00:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:b4:6f:c4:2c:b5:bb:6a:06:f5:b9:83:56:
                    e7:8a:28:9f:45:ee:eb:d3:7c:98:35:04:11:28:7b:
                    d8:8e:9d:c6:3a:cb:90:99:fb:8f:38:ec:34:18:d2:
                    e4:83:12:ad:b5:28:b1:4a:a8:b6:52:ba:8d:8b:57:
                    eb:f9:b3:a8:5f:98:40:06:c8:01:ca:95:4b:6b:8f:
                    34:bf:5f:e8:34:c6:28:d5:93:30:4d:ec:1d:07:c3:
                    fe:c1:d2:63:9a:c6:49:6b:a4:70:01:cc:65:ba:f8:
                    80:50:a9:bf:ac:59:34:4f:15:f1:e6:ae:bf:da:8a:
                    58:25:5d:a8:2c:77:59:6e:67:3c:df:be:40:79:0e:
                    44:a1:b0:09:30:e9:98:2a:2f:df:77:82:c4:ab:40:
                    86:69:c4:a7:76:80:05:ba:ad:ac:38:cc:62:9a:b8:
                    46:13:14:88:92:17:53:c3:78:25:b5:03:a5:ad:9e:
                    33:71:97:ac:16:3a:eb:f5:7d:47:19:41:4c:e2:7d:
                    d7:5a:bf:37:54:d7:95:d9:18:c9:88:d5:9a:7c:d0:
                    94:b4:07:7d:1a:68:3c:f7:51:25:c7:27:17:26:5b:
                    77:c2:16:1e:4b:b7:ad:04:3c:81:c0:b7:b6:0b:17:
                    be:0f:03:21:97:b6:e0:1f:90:32:9d:f6:0a:8b:72:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A9:D4:88:51:2B:12:1C:B5:8C:49:B8:42:79:CD:FB:7E:D1:72:EC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:09:5f:2f:3b:b5:0c:87:72:cd:92:26:94:a8:c9:91:d9:07:
         56:62:27:f7:95:bf:94:37:2d:43:1e:f8:30:29:55:c3:78:17:
         51:45:e3:66:c9:8d:23:22:d0:d9:c3:64:44:a0:78:34:1b:1c:
         87:4b:37:45:42:82:c6:49:e5:f2:57:96:7e:59:d7:1d:e5:33:
         83:66:27:8c:d4:47:da:02:16:0e:2a:62:76:83:d5:ed:d5:b6:
         13:f4:76:cf:e9:64:6c:d2:1f:73:3a:17:2d:f8:29:e4:d3:b5:
         b1:92:38:a3:0e:79:65:9f:7d:40:34:ef:f4:5e:a9:fc:b3:72:
         ec:7f:1f:25:4d:37:61:cf:ae:de:3e:68:22:2b:e2:25:e0:91:
         41:02:7f:ed:b6:41:95:8a:8a:25:36:d5:4f:67:84:e3:62:9b:
         c9:61:fd:2a:ec:bc:a0:b1:ff:4e:f2:af:f7:45:53:94:35:d2:
         49:14:73:f6:6e:0f:8f:9d:c6:1e:5d:e3:5c:43:e1:e0:f4:06:
         3a:30:2b:35:9c:b3:f1:ea:a3:25:ba:28:b7:ab:e1:a4:03:ae:
         a2:27:06:3d:c7:c0:81:78:ca:e1:d0:fb:7b:5d:c2:8b:83:40:
         4e:9d:82:b3:c7:19:36:eb:78:d7:b8:10:7d:c6:d1:42:84:a2:
         88:e4:e1:f6
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUKU+MrAvzSnnybK89D3uJklx2/e4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUwNloX
DTIyMDcwMTA4MDAwNlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDMDEyQjQ2RkM0MkNCNUJCNkEwNkY1Qjk4MzU2RTc4QTI4OUY0NUVFRUJE
MzdDOTgzNTA0MTEyODdCRDg4RTlEQzYzQUNCOTA5OUZCOEYzOEVDMzQxOEQyRTQ4
MzEyQURCNTI4QjE0QUE4QjY1MkJBOEQ4QjU3RUJGOUIzQTg1Rjk4NDAwNkM4MDFD
QTk1NEI2QjhGMzRCRjVGRTgzNEM2MjhENTkzMzA0REVDMUQwN0MzRkVDMUQyNjM5
QUM2NDk2QkE0NzAwMUNDNjVCQUY4ODA1MEE5QkZBQzU5MzQ0RjE1RjFFNkFFQkZE
QThBNTgyNTVEQTgyQzc3NTk2RTY3M0NERkJFNDA3OTBFNDRBMUIwMDkzMEU5OTgy
QTJGREY3NzgyQzRBQjQwODY2OUM0QTc3NjgwMDVCQUFEQUMzOENDNjI5QUI4NDYx
MzE0ODg5MjE3NTNDMzc4MjVCNTAzQTVBRDlFMzM3MTk3QUMxNjNBRUJGNTdENDcx
OTQxNENFMjdERDc1QUJGMzc1NEQ3OTVEOTE4Qzk4OEQ1OUE3Q0QwOTRCNDA3N0Qx
QTY4M0NGNzUxMjVDNzI3MTcyNjVCNzdDMjE2MUU0QkI3QUQwNDNDODFDMEI3QjYw
QjE3QkUwRjAzMjE5N0I2RTAxRjkwMzI5REY2MEE4QjcyNjFBNTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAErRvxCy1u2oG9bmDVueK
KJ9F7uvTfJg1BBEoe9iOncY6y5CZ+4847DQY0uSDEq21KLFKqLZSuo2LV+v5s6hf
mEAGyAHKlUtrjzS/X+g0xijVkzBN7B0Hw/7B0mOaxklrpHABzGW6+IBQqb+sWTRP
FfHmrr/ailglXagsd1luZzzfvkB5DkShsAkw6ZgqL993gsSrQIZpxKd2gAW6raw4
zGKauEYTFIiSF1PDeCW1A6WtnjNxl6wWOuv1fUcZQUzifddavzdU15XZGMmI1Zp8
0JS0B30aaDz3USXHJxcmW3fCFh5Lt60EPIHAt7YLF74PAyGXtuAfkDKd9gqLcmGl
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUwanUiFErEhy1jEm4QnnN+37RcuwwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMjMxMzEyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmtMwDQYJKoZIhvcN
AQELBQADggEBAEIJXy87tQyHcs2SJpSoyZHZB1ZiJ/eVv5Q3LUMe+DApVcN4F1FF
42bJjSMi0NnDZESgeDQbHIdLN0VCgsZJ5fJXln5Z1x3lM4NmJ4zUR9oCFg4qYnaD
1e3VthP0ds/pZGzSH3M6Fy34KeTTtbGSOKMOeWWffUA07/Reqfyzcux/HyVNN2HP
rt4+aCIr4iXgkUECf+22QZWKiiU21U9nhONim8lh/SrsvKCx/07yr/dFU5Q10kkU
c/ZuD4+dxh5d41xD4eD0BjowKzWcs/HqoyW6KLer4aQDrqInBj3HwIF4yuHQ+3td
wouDQE6dgrPHGTbreNe4EH3G0UKEoojk4fY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org