Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231382e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3231382e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          WFLbNWYTTVC2uqoIFzasLSgb1mwzWX52vDICIf3cM/4=
Subject key identifier:   1C:5E:86:6D:14:FD:E9:F2:8E:17:41:03:1A:4D:E1:26:B7:FA:E2:DE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       139E313898882D564A2F43487BE71D8FF8B3842D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231382e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:06 +0000
ROA not before:           Thu 01 Jul 2021 07:55:06 +0000
ROA not after:            Fri 01 Jul 2022 08:00:06 +0000
asID:                     131111
IP address blocks:        103.154.218.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9e:31:38:98:88:2d:56:4a:2f:43:48:7b:e7:1d:8f:f8:b3:84:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:06 2021 GMT
            Not After : Jul  1 08:00:06 2022 GMT
        Subject: CN=3082010A0282010100B40A2BFA68C7A412AE562AE2D77B9B50E7CC99E6AD195A1B06CDB3369A1595D89D4CC0F08CFC0185317280952061EEB762616249013E895EC9684EF671631CB3CA395236684CDB36DBA48EBF562A4DB4FF270C08F996340C4752FF830B966B0144026762AD117B4B2A98DE8664E93906123814CD63F2B659CE6DE6EA17B1DDB9056857B29EAC966571AF60916FF9E0CEEB77CC095798581B3C858945D46FC50014B0A95F9EAF36B23E8F0F672A54B3B041BA8CC061516A21F7E471A9A186608ED026C3080B2F9B193CC332DE3135270131D9A8B33CE707EB5D54C9B73065941F5FFAA4C34AF3E8ACB130BE5B901112212C155BBAF29571BCBC88C04C421C40870203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:2b:fa:68:c7:a4:12:ae:56:2a:e2:d7:7b:
                    9b:50:e7:cc:99:e6:ad:19:5a:1b:06:cd:b3:36:9a:
                    15:95:d8:9d:4c:c0:f0:8c:fc:01:85:31:72:80:95:
                    20:61:ee:b7:62:61:62:49:01:3e:89:5e:c9:68:4e:
                    f6:71:63:1c:b3:ca:39:52:36:68:4c:db:36:db:a4:
                    8e:bf:56:2a:4d:b4:ff:27:0c:08:f9:96:34:0c:47:
                    52:ff:83:0b:96:6b:01:44:02:67:62:ad:11:7b:4b:
                    2a:98:de:86:64:e9:39:06:12:38:14:cd:63:f2:b6:
                    59:ce:6d:e6:ea:17:b1:dd:b9:05:68:57:b2:9e:ac:
                    96:65:71:af:60:91:6f:f9:e0:ce:eb:77:cc:09:57:
                    98:58:1b:3c:85:89:45:d4:6f:c5:00:14:b0:a9:5f:
                    9e:af:36:b2:3e:8f:0f:67:2a:54:b3:b0:41:ba:8c:
                    c0:61:51:6a:21:f7:e4:71:a9:a1:86:60:8e:d0:26:
                    c3:08:0b:2f:9b:19:3c:c3:32:de:31:35:27:01:31:
                    d9:a8:b3:3c:e7:07:eb:5d:54:c9:b7:30:65:94:1f:
                    5f:fa:a4:c3:4a:f3:e8:ac:b1:30:be:5b:90:11:12:
                    21:2c:15:5b:ba:f2:95:71:bc:bc:88:c0:4c:42:1c:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5E:86:6D:14:FD:E9:F2:8E:17:41:03:1A:4D:E1:26:B7:FA:E2:DE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231382e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:a0:5a:8c:1f:b3:fa:0a:19:78:be:cb:5c:52:58:ad:8a:b2:
         bb:a6:0e:a6:a1:12:99:74:b3:71:2f:3b:fc:93:32:05:51:b0:
         06:c8:12:02:99:e8:1d:ce:f1:21:8f:5e:71:39:88:90:f4:2e:
         6b:31:27:dd:57:42:fc:c4:f3:d3:9c:89:76:4d:36:48:0b:c6:
         e2:86:e7:1b:3e:09:be:de:9f:a2:c4:69:6a:fc:6f:19:ef:29:
         e4:09:d3:5b:bc:69:a2:78:34:48:0a:fc:e0:b4:9d:e1:7c:88:
         60:47:8c:a9:a1:b1:fc:2f:12:1c:5f:96:06:4e:2d:79:73:d4:
         35:6a:58:93:a7:e4:df:96:54:79:d4:7a:da:a8:d0:21:61:70:
         78:86:97:69:47:f0:36:49:6d:e1:af:af:c7:69:23:8d:7c:02:
         b3:b3:ef:4c:86:1f:9c:15:19:25:66:a2:c1:b3:41:c6:cf:3c:
         1d:28:3f:e1:b1:3f:61:76:dd:49:bf:ed:ba:6f:69:07:69:03:
         9e:2b:33:14:df:ac:a6:77:bb:57:0a:71:7d:00:d0:2b:97:e9:
         16:ce:24:ab:43:b5:b6:30:51:34:53:d4:15:7b:25:ef:eb:88:
         09:94:c0:a9:f7:a7:24:7a:2c:5e:90:ee:9b:77:5d:0d:c1:bf:
         f8:d4:84:fd
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUE54xOJiILVZKL0NIe+cdj/izhC0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUwNloX
DTIyMDcwMTA4MDAwNlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCNDBBMkJGQTY4QzdBNDEyQUU1NjJBRTJENzdCOUI1MEU3Q0M5OUU2QUQx
OTVBMUIwNkNEQjMzNjlBMTU5NUQ4OUQ0Q0MwRjA4Q0ZDMDE4NTMxNzI4MDk1MjA2
MUVFQjc2MjYxNjI0OTAxM0U4OTVFQzk2ODRFRjY3MTYzMUNCM0NBMzk1MjM2Njg0
Q0RCMzZEQkE0OEVCRjU2MkE0REI0RkYyNzBDMDhGOTk2MzQwQzQ3NTJGRjgzMEI5
NjZCMDE0NDAyNjc2MkFEMTE3QjRCMkE5OERFODY2NEU5MzkwNjEyMzgxNENENjNG
MkI2NTlDRTZERTZFQTE3QjFEREI5MDU2ODU3QjI5RUFDOTY2NTcxQUY2MDkxNkZG
OUUwQ0VFQjc3Q0MwOTU3OTg1ODFCM0M4NTg5NDVENDZGQzUwMDE0QjBBOTVGOUVB
RjM2QjIzRThGMEY2NzJBNTRCM0IwNDFCQThDQzA2MTUxNkEyMUY3RTQ3MUE5QTE4
NjYwOEVEMDI2QzMwODBCMkY5QjE5M0NDMzMyREUzMTM1MjcwMTMxRDlBOEIzM0NF
NzA3RUI1RDU0QzlCNzMwNjU5NDFGNUZGQUE0QzM0QUYzRThBQ0IxMzBCRTVCOTAx
MTEyMjEyQzE1NUJCQUYyOTU3MUJDQkM4OEMwNEM0MjFDNDA4NzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Civ6aMekEq5WKuLXe5tQ
58yZ5q0ZWhsGzbM2mhWV2J1MwPCM/AGFMXKAlSBh7rdiYWJJAT6JXsloTvZxYxyz
yjlSNmhM2zbbpI6/VipNtP8nDAj5ljQMR1L/gwuWawFEAmdirRF7SyqY3oZk6TkG
EjgUzWPytlnObebqF7HduQVoV7KerJZlca9gkW/54M7rd8wJV5hYGzyFiUXUb8UA
FLCpX56vNrI+jw9nKlSzsEG6jMBhUWoh9+RxqaGGYI7QJsMICy+bGTzDMt4xNScB
MdmoszznB+tdVMm3MGWUH1/6pMNK8+issTC+W5AREiEsFVu68pVxvLyIwExCHECH
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUHF6GbRT96fKOF0EDGk3hJrf64t4wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMjMxMzgyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmtowDQYJKoZIhvcN
AQELBQADggEBAAagWowfs/oKGXi+y1xSWK2KsrumDqahEpl0s3EvO/yTMgVRsAbI
EgKZ6B3O8SGPXnE5iJD0LmsxJ91XQvzE89OciXZNNkgLxuKG5xs+Cb7en6LEaWr8
bxnvKeQJ01u8aaJ4NEgK/OC0neF8iGBHjKmhsfwvEhxflgZOLXlz1DVqWJOn5N+W
VHnUetqo0CFhcHiGl2lH8DZJbeGvr8dpI418ArOz70yGH5wVGSVmosGzQcbPPB0o
P+GxP2F23Um/7bpvaQdpA54rMxTfrKZ3u1cKcX0A0CuX6RbOJKtDtbYwUTRT1BV7
Je/riAmUwKn3pyR6LF6Q7pt3XQ3Bv/jUhP0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org