Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232372e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3232372e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          PMgB6JsGc35WKWnKIKKMjcjIcweLPxsoUcP/ESXDjNo=
Subject key identifier:   F3:E2:16:31:68:2C:D8:66:46:34:BF:8B:35:69:98:10:91:F2:32:F6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1B6BE35AE328084C3B8F9A7FEFD889BBEC862BB1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232372e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:09 +0000
ROA not before:           Thu 01 Jul 2021 07:55:09 +0000
ROA not after:            Fri 01 Jul 2022 08:00:09 +0000
asID:                     131111
IP address blocks:        103.154.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6b:e3:5a:e3:28:08:4c:3b:8f:9a:7f:ef:d8:89:bb:ec:86:2b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:09 2021 GMT
            Not After : Jul  1 08:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:24:56:36:58:70:c2:42:38:67:f6:7a:12:47:
                    b5:49:c3:03:cf:87:71:8d:31:95:0f:02:46:f3:67:
                    11:ba:c4:b0:fc:05:8f:7c:17:a6:65:6d:e2:fa:a2:
                    5c:c3:6b:aa:61:69:5f:65:a0:54:d8:8d:63:0e:c1:
                    74:a6:e0:1d:62:e1:63:2c:3a:21:89:1f:44:8e:72:
                    8a:e9:a9:82:d5:72:44:83:8b:dc:f5:11:39:cc:ad:
                    29:5e:1f:e0:45:1e:1d:b5:f7:12:d6:6b:67:21:6b:
                    1c:0e:3c:77:e7:25:2f:21:f1:09:4c:4b:b1:7a:be:
                    7e:b3:38:1c:db:9e:a3:1f:34:63:69:74:4d:c3:15:
                    45:6c:77:25:25:02:02:11:8c:b6:13:72:da:75:f6:
                    d8:1b:0d:3c:35:3d:2c:8e:f1:a0:36:06:99:ab:8f:
                    f7:3b:36:55:09:18:9b:60:66:c0:21:56:43:1e:46:
                    18:f1:98:22:62:6f:00:ea:62:02:dc:1a:f3:f2:69:
                    76:6f:8f:62:ff:5f:36:42:63:b6:90:bd:18:3c:02:
                    08:3a:5b:17:1b:08:e0:f3:92:d7:a4:75:6c:77:73:
                    a1:77:74:02:69:55:01:25:69:d1:6e:a2:01:7d:af:
                    aa:6a:66:5b:b3:19:72:7d:14:02:5b:8b:ed:2a:dd:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E2:16:31:68:2C:D8:66:46:34:BF:8B:35:69:98:10:91:F2:32:F6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232372e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ba:53:47:18:fc:b3:83:68:2c:8a:a6:10:0f:36:1b:57:63:
         f9:0a:33:f8:56:81:dc:29:5b:01:f4:67:db:c8:67:73:00:50:
         91:b2:85:cd:d2:5b:f8:b3:d5:cd:1d:40:55:bf:42:24:2b:80:
         da:eb:c1:bb:6f:03:e0:13:94:09:33:8e:3e:74:ac:7d:af:fa:
         51:66:3d:61:89:e0:66:4d:48:dc:99:48:6c:48:27:50:6d:53:
         84:64:45:89:a5:f5:ed:05:9f:41:04:38:be:e1:4d:14:c1:8c:
         7b:a9:6f:50:9f:3e:bc:f2:23:10:87:f2:53:57:dc:b3:3f:c0:
         b6:8c:ca:e9:43:22:ba:f0:fd:a9:48:ed:34:d4:ed:49:18:63:
         f4:04:88:2e:ee:97:4f:c3:5c:bc:b2:e5:68:59:c5:13:15:17:
         b2:a2:2b:fc:f4:25:1f:76:7c:07:61:35:8c:6d:f0:33:8d:a7:
         87:4d:af:af:70:50:53:c2:72:f3:1e:14:00:ca:a8:0b:2e:34:
         97:c2:0d:25:84:56:16:6c:11:f5:d1:ec:04:9a:57:60:91:3f:
         3b:af:f1:c3:e8:dc:0b:d4:19:54:d0:35:7c:ee:be:3c:75:2a:
         75:e4:06:33:b0:79:5b:19:a9:78:1c:4f:f5:4d:38:b1:14:50:
         b3:56:07:20
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUG2vjWuMoCEw7j5p/79iJu+yGK7EwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUwOVoX
DTIyMDcwMTA4MDAwOVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBQjI0NTYzNjU4NzBDMjQyMzg2N0Y2N0ExMjQ3QjU0OUMzMDNDRjg3NzE4
RDMxOTUwRjAyNDZGMzY3MTFCQUM0QjBGQzA1OEY3QzE3QTY2NTZERTJGQUEyNUND
MzZCQUE2MTY5NUY2NUEwNTREODhENjMwRUMxNzRBNkUwMUQ2MkUxNjMyQzNBMjE4
OTFGNDQ4RTcyOEFFOUE5ODJENTcyNDQ4MzhCRENGNTExMzlDQ0FEMjk1RTFGRTA0
NTFFMURCNUY3MTJENjZCNjcyMTZCMUMwRTNDNzdFNzI1MkYyMUYxMDk0QzRCQjE3
QUJFN0VCMzM4MUNEQjlFQTMxRjM0NjM2OTc0NERDMzE1NDU2Qzc3MjUyNTAyMDIx
MThDQjYxMzcyREE3NUY2RDgxQjBEM0MzNTNEMkM4RUYxQTAzNjA2OTlBQjhGRjcz
QjM2NTUwOTE4OUI2MDY2QzAyMTU2NDMxRTQ2MThGMTk4MjI2MjZGMDBFQTYyMDJE
QzFBRjNGMjY5NzY2RjhGNjJGRjVGMzY0MjYzQjY5MEJEMTgzQzAyMDgzQTVCMTcx
QjA4RTBGMzkyRDdBNDc1NkM3NzczQTE3Nzc0MDI2OTU1MDEyNTY5RDE2RUEyMDE3
REFGQUE2QTY2NUJCMzE5NzI3RDE0MDI1QjhCRUQyQURENjM2RjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJFY2WHDCQjhn9noSR7VJ
wwPPh3GNMZUPAkbzZxG6xLD8BY98F6ZlbeL6olzDa6phaV9loFTYjWMOwXSm4B1i
4WMsOiGJH0SOcorpqYLVckSDi9z1ETnMrSleH+BFHh219xLWa2chaxwOPHfnJS8h
8QlMS7F6vn6zOBzbnqMfNGNpdE3DFUVsdyUlAgIRjLYTctp19tgbDTw1PSyO8aA2
Bpmrj/c7NlUJGJtgZsAhVkMeRhjxmCJibwDqYgLcGvPyaXZvj2L/XzZCY7aQvRg8
Agg6WxcbCODzktekdWx3c6F3dAJpVQEladFuogF9r6pqZluzGXJ9FAJbi+0q3WNv
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQU8+IWMWgs2GZGNL+LNWmYEJHyMvYwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMjMyMzcyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmuMwDQYJKoZIhvcN
AQELBQADggEBAEW6U0cY/LODaCyKphAPNhtXY/kKM/hWgdwpWwH0Z9vIZ3MAUJGy
hc3SW/iz1c0dQFW/QiQrgNrrwbtvA+ATlAkzjj50rH2v+lFmPWGJ4GZNSNyZSGxI
J1BtU4RkRYml9e0Fn0EEOL7hTRTBjHupb1CfPrzyIxCH8lNX3LM/wLaMyulDIrrw
/alI7TTU7UkYY/QEiC7ul0/DXLyy5WhZxRMVF7KiK/z0JR92fAdhNYxt8DONp4dN
r69wUFPCcvMeFADKqAsuNJfCDSWEVhZsEfXR7ASaV2CRPzuv8cPo3AvUGVTQNXzu
vjx1KnXkBjOweVsZqXgcT/VNOLEUULNWByA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org