Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231362e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3231362e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          PqGGHZ2KY4ivfC9Yo/VQbs33eWcOtUqDUW5PJuQobIM=
Subject key identifier:   29:9E:4E:4A:8E:11:E7:86:3B:2F:5B:2F:2F:B2:3B:91:72:1C:2E:E2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       089F383A5326F624472741D64EABFEAB69046780
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231362e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:07 +0000
ROA not before:           Thu 01 Jul 2021 07:55:07 +0000
ROA not after:            Fri 01 Jul 2022 08:00:07 +0000
asID:                     131111
IP address blocks:        103.154.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9f:38:3a:53:26:f6:24:47:27:41:d6:4e:ab:fe:ab:69:04:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:07 2021 GMT
            Not After : Jul  1 08:00:07 2022 GMT
        Subject: CN=3082010A0282010100B72AE43E6B20216C1BEF8B6719CB96A291428C042473A11490EC084407F2F3C2B7FCB57E808F8D53B947F6FA5650087C02863105CBF14ACDE6C4827BA052BD2231E4A473E138FCAF956305A5B9310EB0AE7C1F04B0AB1C0F8E039CD2F861BA8AB3CA3172B573E9D63F8807EAEC9D15143DACA4C6369A3CE279FE523BB126E1482616794011175029163AD7C41369A8EA068B9D8844D340A8F7BEB9E38D7D4AAF7BACF16DA0D9232102B5CA22194D1CB45C01A7C2F0ADFFCF9FEEBFBCAFE0C977A0AF33079AF8FFA14AEB7AC8BB9BE6F29B682D8CDF65C26C255D48DB5D84010B44894F089AC4682C906EA35E02B4CE895FCFC9F34925698BD4D0F17D057ED01F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:e4:3e:6b:20:21:6c:1b:ef:8b:67:19:cb:
                    96:a2:91:42:8c:04:24:73:a1:14:90:ec:08:44:07:
                    f2:f3:c2:b7:fc:b5:7e:80:8f:8d:53:b9:47:f6:fa:
                    56:50:08:7c:02:86:31:05:cb:f1:4a:cd:e6:c4:82:
                    7b:a0:52:bd:22:31:e4:a4:73:e1:38:fc:af:95:63:
                    05:a5:b9:31:0e:b0:ae:7c:1f:04:b0:ab:1c:0f:8e:
                    03:9c:d2:f8:61:ba:8a:b3:ca:31:72:b5:73:e9:d6:
                    3f:88:07:ea:ec:9d:15:14:3d:ac:a4:c6:36:9a:3c:
                    e2:79:fe:52:3b:b1:26:e1:48:26:16:79:40:11:17:
                    50:29:16:3a:d7:c4:13:69:a8:ea:06:8b:9d:88:44:
                    d3:40:a8:f7:be:b9:e3:8d:7d:4a:af:7b:ac:f1:6d:
                    a0:d9:23:21:02:b5:ca:22:19:4d:1c:b4:5c:01:a7:
                    c2:f0:ad:ff:cf:9f:ee:bf:bc:af:e0:c9:77:a0:af:
                    33:07:9a:f8:ff:a1:4a:eb:7a:c8:bb:9b:e6:f2:9b:
                    68:2d:8c:df:65:c2:6c:25:5d:48:db:5d:84:01:0b:
                    44:89:4f:08:9a:c4:68:2c:90:6e:a3:5e:02:b4:ce:
                    89:5f:cf:c9:f3:49:25:69:8b:d4:d0:f1:7d:05:7e:
                    d0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9E:4E:4A:8E:11:E7:86:3B:2F:5B:2F:2F:B2:3B:91:72:1C:2E:E2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231362e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:33:d2:b1:79:5c:53:cc:20:01:7b:23:3d:41:8d:f7:9b:8d:
         90:95:0a:07:68:4c:37:63:95:65:01:9b:db:37:63:1f:8a:94:
         e6:20:02:e1:64:02:a1:fd:e7:0c:cd:9c:f1:71:86:4b:8e:27:
         b2:7a:be:6b:89:5a:2f:97:ad:91:ee:c0:cf:f0:03:46:12:25:
         d6:00:c9:b0:6a:13:66:84:e3:ce:84:87:55:33:52:6d:b0:8b:
         08:6a:a6:b6:ef:a6:db:dc:ea:90:f1:f7:6d:d1:ce:00:c6:37:
         fe:dd:8e:1c:25:84:94:c9:31:e3:64:5e:9c:01:04:ae:21:f1:
         b5:b9:29:f9:53:a6:9d:17:68:1c:5c:29:4b:bb:82:3d:86:91:
         c1:41:37:da:f7:80:74:a3:f7:e4:e2:aa:fc:e9:0f:57:56:eb:
         77:65:6e:a9:17:12:c1:56:93:fa:76:58:d5:94:f7:4c:85:37:
         cd:32:a1:42:11:ea:fd:15:ae:bc:46:92:b4:16:ab:ac:27:eb:
         d5:3c:cb:57:95:a9:b9:15:97:aa:72:7d:97:11:23:8f:40:1e:
         c7:24:db:1e:51:ef:1f:d2:5e:19:c1:ef:7b:e9:72:57:9d:1f:
         f6:cd:ca:5a:9d:f6:0a:29:28:68:6b:05:49:56:b0:b0:7f:e8:
         48:a4:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org