Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231352e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3231352e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          bHnh98Jm9oJ0HCUixaO0s2mNP7mSSFIMG5BKx+HgvHo=
Subject key identifier:   3B:44:80:D2:1E:49:33:16:43:AC:06:40:72:A2:F0:FE:2E:D4:80:1C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       760AD90A673B11F3034A3B8357C9FB0C41A48337
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231352e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:03 +0000
ROA not before:           Thu 01 Jul 2021 07:55:03 +0000
ROA not after:            Fri 01 Jul 2022 08:00:03 +0000
asID:                     131111
IP address blocks:        103.154.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0a:d9:0a:67:3b:11:f3:03:4a:3b:83:57:c9:fb:0c:41:a4:83:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:03 2021 GMT
            Not After : Jul  1 08:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:e2:b1:06:00:0b:a5:5b:68:7d:88:5e:ab:
                    69:2b:06:2f:89:29:30:3a:6f:6f:b6:7f:79:48:60:
                    dd:e1:94:d0:9c:1a:e9:75:45:56:76:54:99:d4:56:
                    77:54:09:fb:a2:51:22:d5:ce:d7:f7:b6:98:0e:f7:
                    62:3d:8b:b1:f0:9c:83:84:e1:15:f1:c4:75:af:89:
                    56:a2:a7:f9:60:82:2c:ed:f5:59:10:3a:70:0a:dc:
                    2b:7f:29:c6:b2:3d:35:74:17:1d:a8:82:c2:ca:ee:
                    cd:98:d6:c6:e3:cb:94:19:c8:ff:f0:21:02:5c:5f:
                    f0:e2:07:97:3f:f0:89:6b:50:60:c9:b9:2a:7f:e1:
                    79:9e:79:6f:b7:10:75:02:b0:3b:a4:71:d2:88:e1:
                    6e:e4:35:26:1b:b9:a0:ec:5d:a3:96:d3:95:a1:85:
                    10:cb:85:02:f4:f0:93:08:4f:58:6d:ac:79:20:e5:
                    c8:21:66:77:6b:5f:99:b9:af:7f:9a:fe:e9:b3:f5:
                    dd:74:22:d9:b7:8f:7b:bc:44:4a:02:a7:b2:62:65:
                    33:8b:cd:d5:ce:e8:e9:ca:93:55:26:44:69:ca:a7:
                    fe:e7:72:b7:bc:67:54:93:f9:59:3d:99:48:b7:f6:
                    da:55:d3:85:a7:0e:6d:c3:cc:eb:e8:9f:13:3d:b0:
                    60:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:44:80:D2:1E:49:33:16:43:AC:06:40:72:A2:F0:FE:2E:D4:80:1C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231352e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:af:9c:14:b3:1c:05:00:4d:80:09:3d:4c:a3:88:d0:57:ec:
         5d:c7:26:c8:dd:53:72:9e:b5:ed:bf:56:0e:d5:2f:73:91:1d:
         b4:d1:55:31:2d:78:e6:87:2a:10:c8:69:c2:d1:a1:38:7f:d8:
         8f:8d:97:f7:ed:5a:1c:b5:07:23:9e:d6:9e:ec:59:f6:57:39:
         28:6c:1a:1e:a4:62:2d:12:1f:8e:db:3d:30:c5:e2:3e:5c:83:
         34:27:b6:b5:d1:39:c4:c7:e9:ca:dc:fe:1d:2d:ed:fa:30:7c:
         4b:66:4e:72:66:e3:01:55:11:6d:e0:61:c6:0e:65:37:fe:7a:
         6c:06:7f:21:53:b0:a2:ea:61:3b:b8:fb:61:27:a9:4e:8d:b6:
         86:b8:7f:8e:67:69:c7:03:54:c3:00:9e:00:06:aa:ca:32:94:
         ca:63:2c:21:4e:1b:79:b2:45:6c:81:79:07:20:00:4f:63:36:
         da:0f:91:29:cc:7f:d0:fe:0f:db:c5:41:f7:fa:70:3c:b9:61:
         fc:ce:3a:c0:71:a5:e3:4d:32:4e:36:79:25:8b:f7:58:c5:01:
         0e:4d:6d:ae:93:00:e7:09:a4:a7:36:a0:c7:05:2d:c6:ba:cb:
         60:ea:6e:ca:02:4c:c7:e0:b6:c8:7f:2c:77:af:94:21:80:27:
         c4:52:b7:47
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUdgrZCmc7EfMDSjuDV8n7DEGkgzcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUwM1oX
DTIyMDcwMTA4MDAwM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCNDFFRTJCMTA2MDAwQkE1NUI2ODdEODg1RUFCNjkyQjA2MkY4OTI5MzAz
QTZGNkZCNjdGNzk0ODYwRERFMTk0RDA5QzFBRTk3NTQ1NTY3NjU0OTlENDU2Nzc1
NDA5RkJBMjUxMjJENUNFRDdGN0I2OTgwRUY3NjIzRDhCQjFGMDlDODM4NEUxMTVG
MUM0NzVBRjg5NTZBMkE3Rjk2MDgyMkNFREY1NTkxMDNBNzAwQURDMkI3RjI5QzZC
MjNEMzU3NDE3MURBODgyQzJDQUVFQ0Q5OEQ2QzZFM0NCOTQxOUM4RkZGMDIxMDI1
QzVGRjBFMjA3OTczRkYwODk2QjUwNjBDOUI5MkE3RkUxNzk5RTc5NkZCNzEwNzUw
MkIwM0JBNDcxRDI4OEUxNkVFNDM1MjYxQkI5QTBFQzVEQTM5NkQzOTVBMTg1MTBD
Qjg1MDJGNEYwOTMwODRGNTg2REFDNzkyMEU1QzgyMTY2Nzc2QjVGOTlCOUFGN0Y5
QUZFRTlCM0Y1REQ3NDIyRDlCNzhGN0JCQzQ0NEEwMkE3QjI2MjY1MzM4QkNERDVD
RUU4RTlDQTkzNTUyNjQ0NjlDQUE3RkVFNzcyQjdCQzY3NTQ5M0Y5NTkzRDk5NDhC
N0Y2REE1NUQzODVBNzBFNkRDM0NDRUJFODlGMTMzREIwNjAwMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HuKxBgALpVtofYheq2kr
Bi+JKTA6b2+2f3lIYN3hlNCcGul1RVZ2VJnUVndUCfuiUSLVztf3tpgO92I9i7Hw
nIOE4RXxxHWviVaip/lggizt9VkQOnAK3Ct/KcayPTV0Fx2ogsLK7s2Y1sbjy5QZ
yP/wIQJcX/DiB5c/8IlrUGDJuSp/4XmeeW+3EHUCsDukcdKI4W7kNSYbuaDsXaOW
05WhhRDLhQL08JMIT1htrHkg5cghZndrX5m5r3+a/umz9d10Itm3j3u8REoCp7Ji
ZTOLzdXO6OnKk1UmRGnKp/7ncre8Z1ST+Vk9mUi39tpV04WnDm3DzOvonxM9sGAD
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUO0SA0h5JMxZDrAZAcqLw/i7UgBwwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMjMxMzUyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmtcwDQYJKoZIhvcN
AQELBQADggEBAG6vnBSzHAUATYAJPUyjiNBX7F3HJsjdU3Kete2/Vg7VL3ORHbTR
VTEteOaHKhDIacLRoTh/2I+Nl/ftWhy1ByOe1p7sWfZXOShsGh6kYi0SH47bPTDF
4j5cgzQntrXROcTH6crc/h0t7fowfEtmTnJm4wFVEW3gYcYOZTf+emwGfyFTsKLq
YTu4+2EnqU6Ntoa4f45naccDVMMAngAGqsoylMpjLCFOG3myRWyBeQcgAE9jNtoP
kSnMf9D+D9vFQff6cDy5YfzOOsBxpeNNMk42eSWL91jFAQ5Nba6TAOcJpKc2oMcF
Lca6y2DqbsoCTMfgtsh/LHevlCGAJ8RSt0c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org