Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231342e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3231342e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          M351crc3IcPHXf7n9EbuNxNZkjig0fcdxVaO1KuEMQQ=
Subject key identifier:   13:9D:16:A7:2A:CE:2C:0A:8B:C6:9E:D2:0B:4F:DA:40:C5:33:D3:75
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       64ECFE2A97AF3D507BB8726E353709B452E34B78
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231342e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:06 +0000
ROA not before:           Thu 01 Jul 2021 07:55:06 +0000
ROA not after:            Fri 01 Jul 2022 08:00:06 +0000
asID:                     131111
IP address blocks:        103.154.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ec:fe:2a:97:af:3d:50:7b:b8:72:6e:35:37:09:b4:52:e3:4b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:06 2021 GMT
            Not After : Jul  1 08:00:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b7:4b:56:8c:cb:fd:27:54:5c:3e:83:8b:d8:
                    42:ca:90:e7:fe:54:79:f1:ba:79:1b:6a:c0:c7:55:
                    0b:bd:a8:81:2b:42:58:9e:fa:6b:80:82:6f:b7:c3:
                    7b:1f:74:b4:56:a0:2d:aa:76:ea:55:e2:1f:64:34:
                    f2:cc:2a:f2:54:b5:73:53:f8:78:08:ff:92:5e:d8:
                    a3:16:c7:97:48:26:59:b4:3b:38:a8:58:39:6b:c4:
                    e3:b9:5a:50:bf:49:86:3c:47:e9:1b:03:6f:21:9f:
                    76:52:45:26:91:6d:a0:56:52:55:7d:32:76:14:75:
                    c0:a0:74:ec:13:a2:65:9b:a5:61:33:bb:66:f5:f5:
                    1b:0b:56:79:dc:80:c8:3d:d9:e8:e6:cd:14:a4:5b:
                    ea:a9:47:b2:8d:e2:83:2a:f2:85:d2:56:cb:b1:b6:
                    ad:70:1a:59:94:48:ce:a4:b1:2a:0c:87:a4:b1:d0:
                    0d:dd:90:08:a9:9d:64:ac:01:22:2a:b6:03:fa:64:
                    43:9f:a7:4c:56:68:61:4a:f1:60:07:cd:90:21:da:
                    f6:d2:09:05:e0:ba:de:8e:05:2d:17:37:75:ab:38:
                    e0:39:fa:39:22:60:fe:68:e2:b5:86:67:e0:94:ae:
                    70:7b:31:c0:64:43:d6:32:11:ac:76:49:cc:ef:9f:
                    11:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9D:16:A7:2A:CE:2C:0A:8B:C6:9E:D2:0B:4F:DA:40:C5:33:D3:75
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231342e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:33:95:a7:63:26:a6:6c:f9:bb:2b:90:24:52:5a:7b:c7:7c:
         5e:df:d5:70:33:fe:d2:a2:41:15:99:46:c3:b2:9c:72:51:84:
         e1:07:a5:1b:62:bf:66:cb:ae:7f:12:07:a5:fc:6e:17:c8:95:
         9c:ff:72:95:86:9f:48:09:99:2f:08:18:b9:0b:2d:5d:8a:2f:
         f3:8f:3c:65:39:a0:db:27:8b:2d:a0:35:ce:f9:82:f9:d1:68:
         db:b6:1f:31:f9:9b:f1:b8:ab:96:2c:5a:fe:92:3f:4d:95:13:
         2d:10:3c:e0:b6:92:43:12:d1:76:eb:04:75:49:21:c7:22:eb:
         c0:7e:7b:65:f2:63:65:2a:89:78:5c:9e:74:06:13:0b:ff:f8:
         56:d5:86:ad:00:f2:df:0b:5a:21:09:13:c8:88:bd:20:50:97:
         59:55:45:51:c4:b4:1c:03:51:07:ff:9a:f8:32:5d:ae:1b:de:
         2a:54:7a:eb:a7:48:e1:42:0d:34:6f:c8:30:24:6e:91:28:14:
         c8:60:bf:92:8b:f8:c8:05:c4:16:cf:09:0c:90:63:da:be:52:
         ae:c8:aa:9b:33:8a:6d:5d:1b:15:14:f7:b5:18:5c:0c:ef:7a:
         c4:26:17:0b:6f:cc:01:81:8d:c4:7f:03:5b:81:ec:62:e0:8f:
         7d:80:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org