Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231372e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3231372e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          3M7Pt+akc5zbYlErkNAX8BEXiGr66C3DRifTm0uw75Q=
Subject key identifier:   FB:EC:12:B0:4D:32:51:FC:D3:49:59:3B:D5:AF:70:00:07:C6:6E:3C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       213B4543D8791244C11409F889EE7808C154EAC1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231372e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:04 +0000
ROA not before:           Thu 01 Jul 2021 07:55:04 +0000
ROA not after:            Fri 01 Jul 2022 08:00:04 +0000
asID:                     131111
IP address blocks:        103.154.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3b:45:43:d8:79:12:44:c1:14:09:f8:89:ee:78:08:c1:54:ea:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:04 2021 GMT
            Not After : Jul  1 08:00:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:e8:21:5b:43:32:cf:48:53:21:c8:a4:37:
                    70:62:24:11:c0:18:86:2d:da:06:fb:d6:88:1a:80:
                    2c:a2:1f:e0:d0:3b:88:1a:10:e6:b2:ea:62:a5:26:
                    82:77:8e:35:70:46:ec:d2:94:b5:3b:41:df:cd:9b:
                    99:b0:71:3e:e0:26:3c:7d:90:cf:7f:62:8a:98:5e:
                    71:8b:95:2c:81:3b:19:92:df:63:0f:f9:af:aa:28:
                    40:23:54:c1:98:5a:ba:aa:d0:7f:46:f8:d4:53:f4:
                    d6:af:a7:14:70:69:f3:c0:13:a9:78:ba:9e:bf:6a:
                    29:94:a8:ac:e2:24:16:f8:c8:b1:9a:56:93:91:92:
                    e7:9f:a3:f2:ca:8b:0e:3a:6e:fb:12:4a:27:2c:72:
                    29:e9:12:45:70:c8:e4:ca:bf:63:ab:ad:66:aa:44:
                    00:03:84:47:fe:3d:b1:48:82:6e:72:9b:18:70:3a:
                    fb:78:83:e3:9d:83:34:04:12:b0:a1:06:3a:8f:cd:
                    d2:bf:7e:39:a0:c0:61:c1:1a:50:68:ac:c1:a2:a1:
                    77:85:61:5c:dd:b2:dd:c9:0c:0c:c1:23:e1:31:75:
                    52:9d:68:5e:cc:b5:89:13:32:8c:8e:95:56:7d:30:
                    e1:37:37:da:e4:ff:9b:fb:4c:f6:cc:3e:7e:1d:cb:
                    70:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:12:B0:4D:32:51:FC:D3:49:59:3B:D5:AF:70:00:07:C6:6E:3C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231372e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:2d:1c:b7:3e:d3:f1:16:24:bc:0c:cb:36:64:0f:48:72:6e:
         bd:c2:fa:d0:1a:c3:19:00:d7:5f:99:82:94:d2:57:f9:f8:c7:
         17:b7:4f:c2:d4:9f:d3:cf:8a:e4:95:4c:38:cb:ff:88:17:14:
         74:ca:5c:8d:2d:1a:30:e1:1d:19:83:65:d3:c0:c1:ea:36:02:
         f1:ae:31:0b:83:17:02:36:e6:61:da:33:9a:65:59:0f:61:dc:
         97:3a:67:8b:d3:97:9b:bd:d3:ae:fe:49:97:29:50:d7:e4:a1:
         95:67:ec:95:28:d1:96:a7:22:ba:12:9c:84:7c:b3:63:f1:26:
         cc:82:02:cd:9a:0e:1a:54:c4:36:65:d9:85:bd:c4:b2:ca:88:
         3e:be:c7:2e:8a:31:80:5c:24:af:67:7e:54:63:2c:0c:44:2e:
         3f:14:ac:20:f1:66:e6:6e:9b:1a:4b:2e:04:27:55:ec:3c:01:
         4b:84:4a:f0:8c:9b:0a:77:6f:ff:01:5b:22:cf:81:6d:62:80:
         f5:04:95:63:74:05:e8:d7:85:36:7d:ec:74:8c:0b:0b:a7:39:
         69:5b:d6:9f:60:c2:31:c1:36:4a:c6:7c:a7:b5:70:23:74:6c:
         85:6f:54:9d:73:76:da:35:61:3d:5c:fb:00:c6:c2:cb:9a:6b:
         f7:bf:b0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org