Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231332e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3231332e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          GKAZh1WnxoNOY4S0TEM0za3bXkyZES9KjBBmSZ4wYAo=
Subject key identifier:   02:D5:A9:11:BD:DF:CC:BD:2D:1D:DB:9D:84:09:B8:5D:42:7A:5C:8C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6248D129C5CBC1BA1726DF56C84CEE64C691D10A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231332e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:07 +0000
ROA not before:           Thu 01 Jul 2021 07:55:07 +0000
ROA not after:            Fri 01 Jul 2022 08:00:07 +0000
asID:                     131111
IP address blocks:        103.154.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:48:d1:29:c5:cb:c1:ba:17:26:df:56:c8:4c:ee:64:c6:91:d1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:07 2021 GMT
            Not After : Jul  1 08:00:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6f:16:b9:a2:62:45:07:39:00:90:09:2d:e1:
                    fa:33:19:e7:93:e5:a2:4a:c6:72:78:af:83:b9:81:
                    fd:36:05:84:bf:41:2a:9f:40:fe:b8:f7:16:13:0d:
                    69:95:05:60:93:63:03:73:e7:cf:1d:01:00:1e:e5:
                    cf:0f:e8:47:3b:3d:64:0b:8c:ac:14:15:c5:81:32:
                    ea:28:03:fb:95:21:30:5c:d5:0b:8f:97:42:4c:de:
                    c1:57:3a:6e:3b:68:5f:7e:d1:9c:f9:64:26:bc:7b:
                    ab:dc:85:c7:ca:a8:1f:67:1a:f9:c6:89:e3:cc:3f:
                    ab:4c:59:40:c1:c6:8d:0d:13:32:c7:d8:3b:5e:76:
                    d8:a2:35:78:a8:20:71:ec:e0:53:e9:1c:62:67:9f:
                    52:b4:bc:df:c0:1f:c2:d8:88:3a:5c:a9:6f:92:2e:
                    58:77:b6:69:af:99:4e:bd:f1:c9:a1:44:2c:da:28:
                    4b:f1:9b:74:49:32:e6:df:61:31:f5:c0:f3:93:07:
                    f5:1e:dd:15:b2:cc:f3:d7:89:cb:62:bd:02:64:90:
                    25:d9:ee:c0:d6:39:46:62:e8:38:5f:66:d8:bf:1c:
                    46:d4:02:cd:49:52:c2:ee:8c:7d:26:86:a3:7a:56:
                    ff:8d:bb:27:1e:a5:a7:54:32:62:86:9a:27:43:49:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D5:A9:11:BD:DF:CC:BD:2D:1D:DB:9D:84:09:B8:5D:42:7A:5C:8C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231332e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:49:e2:38:b4:d3:7b:07:d4:12:39:1a:6f:89:e2:d8:41:f9:
         4d:1c:83:15:72:4e:2c:57:33:f7:5d:cd:4d:f5:ef:6d:32:c3:
         75:39:e7:e1:6f:81:76:21:83:56:7f:32:2f:9f:ef:67:bd:75:
         08:5c:75:69:29:fd:ff:50:d4:bb:47:7d:f7:5c:27:27:12:9a:
         a9:e8:b3:9b:4d:96:3b:a9:2e:d2:43:cc:89:80:a1:d1:77:71:
         74:86:95:f2:8f:1f:31:e9:61:66:80:68:a5:4a:19:49:25:30:
         19:b4:09:41:7d:43:2d:8e:2e:2d:c4:1b:b5:c9:3c:ac:3f:92:
         db:fe:9e:e3:f9:21:ca:10:fa:b8:66:b8:25:b1:96:4b:24:32:
         2c:45:0e:99:13:82:99:ba:6f:37:41:fa:0d:74:61:d2:a4:14:
         00:f4:14:97:b1:38:11:2d:5a:fd:25:b2:42:be:10:b4:8e:03:
         03:01:4b:18:e2:84:23:a7:0c:44:93:84:a4:d8:aa:b4:17:02:
         bc:18:16:01:8c:d7:33:ae:2a:93:52:37:01:82:52:df:c2:e6:
         44:48:37:f6:7b:ea:cf:c3:36:99:8b:57:56:e4:4f:b8:a1:d7:
         07:6b:cf:40:c4:a1:0d:77:f6:0c:d6:68:6b:c5:3f:93:88:84:
         16:55:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org