Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231392e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3231392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          QVGPWkVssX2GhqzUYWpna3inBAo5sdcJC9G9goiKSmo=
Subject key identifier:   12:A1:11:24:7C:99:B6:2A:D0:1E:C4:9D:5B:43:02:3E:C5:BE:C6:77
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4A23F3CE66E062B80871F32B80999F91FA56B58D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231392e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:10 +0000
ROA not before:           Thu 01 Jul 2021 07:55:10 +0000
ROA not after:            Fri 01 Jul 2022 08:00:10 +0000
asID:                     131111
IP address blocks:        103.154.219.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:23:f3:ce:66:e0:62:b8:08:71:f3:2b:80:99:9f:91:fa:56:b5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:10 2021 GMT
            Not After : Jul  1 08:00:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:b3:27:a9:93:87:54:e4:c4:de:5d:f9:2d:
                    2f:16:06:c5:a5:ea:1d:6b:c6:1d:03:b0:5c:25:2e:
                    2a:49:fc:1a:b0:68:e5:ef:05:23:71:47:36:b5:50:
                    fd:69:c8:71:8b:81:0d:7e:e9:85:98:60:a6:82:96:
                    e0:ed:85:73:ba:61:da:09:3a:c7:65:1c:90:4e:1a:
                    82:99:e5:6b:82:fe:3f:3d:34:01:bb:8b:67:93:87:
                    00:9b:29:2c:1d:c0:66:31:6f:95:ab:4d:39:27:f5:
                    bc:72:61:b8:55:7d:d5:73:5d:74:43:1a:1e:5e:eb:
                    d1:e1:40:fd:25:c8:e4:b9:78:9c:95:eb:3f:38:53:
                    d6:59:88:cc:2a:84:5f:74:90:4e:90:4a:be:35:9b:
                    bd:0d:7e:cc:86:45:a8:d1:c9:a4:b0:a2:20:b1:67:
                    48:3c:74:7f:12:0c:c1:a2:8e:fa:7c:38:80:fc:e0:
                    9f:88:cf:a0:0a:60:1e:52:81:0a:10:e3:9b:06:c6:
                    84:52:09:df:6d:e1:bb:ec:0c:2d:ea:fa:d5:8c:0e:
                    75:fc:0e:c6:21:6a:14:af:b9:32:88:2f:dd:9c:1d:
                    8c:c3:79:10:ab:3e:d1:ca:36:00:0c:0b:43:59:d3:
                    2d:2a:eb:8d:67:24:14:cd:91:b7:fa:8f:bd:de:0c:
                    55:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A1:11:24:7C:99:B6:2A:D0:1E:C4:9D:5B:43:02:3E:C5:BE:C6:77
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231392e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:27:b2:e9:c2:5e:cf:cf:e8:8e:12:be:00:3c:8b:34:fa:b5:
         0f:e2:74:dc:b6:31:25:86:f2:8d:3f:01:2a:4b:de:21:35:ca:
         69:e6:fd:75:4b:5f:29:b0:e8:65:92:84:4f:69:18:fb:51:10:
         e7:19:eb:53:90:d0:48:63:6e:b1:9e:dd:ea:bc:bf:c5:3e:72:
         c6:2b:70:25:e1:be:d1:84:50:c1:83:ff:c7:02:39:e1:09:19:
         a9:b0:0e:88:39:6f:00:c7:76:e3:67:fe:aa:bd:ae:60:e6:44:
         9e:58:41:5e:c2:af:b8:ef:43:73:2a:5a:99:72:8b:6d:66:b1:
         a5:b4:a1:b9:e2:dc:99:07:82:3a:65:38:a8:d5:cd:19:ec:05:
         a8:45:dd:af:38:e1:23:23:39:2c:72:f8:36:18:e2:be:53:56:
         92:88:03:d1:d3:46:84:7d:5c:0c:5f:6d:f6:41:dc:a3:dc:36:
         aa:88:71:e8:64:86:8b:ff:3c:26:46:5f:3e:b1:29:91:4f:b1:
         1b:b6:77:88:0f:3c:33:1a:3b:a1:04:c5:a6:33:55:e2:aa:3d:
         ce:bd:b3:83:b5:8c:ef:6b:ef:3f:f0:a9:4c:b6:5b:cd:53:80:
         bd:10:7c:09:2d:46:ef:cb:8d:ad:c5:e6:ec:c1:74:fd:30:d6:
         e7:dd:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org