Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232392e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3232392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          NmkB85u4O9csiizoz+0KksYybfmpt85zgyjqrgWcp08=
Subject key identifier:   C7:CB:D4:0B:81:5D:71:EE:36:97:58:CA:A2:BE:EE:6B:AC:4E:86:8D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       54ADEFED934DEC653EA64A482677847647AED47C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232392e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:10 +0000
ROA not before:           Thu 01 Jul 2021 07:55:10 +0000
ROA not after:            Fri 01 Jul 2022 08:00:10 +0000
asID:                     131111
IP address blocks:        103.154.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ad:ef:ed:93:4d:ec:65:3e:a6:4a:48:26:77:84:76:47:ae:d4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:10 2021 GMT
            Not After : Jul  1 08:00:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:bb:7f:e0:32:25:e9:43:4b:17:7a:83:77:
                    45:88:13:44:7f:64:58:cb:91:67:25:f4:8f:f6:36:
                    b7:fc:3f:64:69:e8:83:54:ed:b1:36:13:60:2d:2f:
                    4b:ba:ed:19:c0:ae:b5:11:51:81:fa:ce:5f:d9:9a:
                    1b:e9:30:a1:27:a7:4d:54:1f:86:e6:dc:33:3d:cd:
                    ca:26:69:c6:1a:9b:6e:37:d0:50:77:e5:7c:67:6f:
                    19:e3:08:ef:82:d5:57:4e:ea:0d:2b:a9:0e:1c:04:
                    97:75:b2:5f:a2:76:88:12:ec:86:e2:9b:ca:04:07:
                    37:6f:59:1d:e6:a7:ad:31:ff:e6:bb:a8:62:27:0a:
                    8d:83:fb:44:c0:4c:b7:de:eb:43:4b:99:e8:f3:b0:
                    bc:3c:55:a3:42:3c:53:1b:de:7f:d0:2f:24:52:30:
                    79:94:93:40:95:d5:cc:55:c2:b5:43:dc:4d:96:2c:
                    f1:49:5e:b9:8f:17:cb:0a:09:53:bf:d9:42:f9:aa:
                    c8:36:19:23:14:9b:94:c7:8d:73:a1:9c:39:e6:2e:
                    e0:bc:7d:a7:25:e6:c6:a0:44:17:38:86:58:50:e9:
                    be:a3:8f:4f:cd:4b:ec:40:2d:79:4f:4a:a0:77:e0:
                    b7:1b:43:31:ed:05:e2:e9:b3:26:43:79:84:5a:ca:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CB:D4:0B:81:5D:71:EE:36:97:58:CA:A2:BE:EE:6B:AC:4E:86:8D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232392e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:bd:b8:f5:2d:01:ed:60:0e:49:0c:50:3c:18:aa:f1:36:
         02:ab:86:33:5f:61:47:c6:af:95:4e:07:1a:1a:83:37:26:04:
         3f:01:58:18:e4:aa:93:ca:e6:96:f1:9d:1a:56:ac:98:1e:13:
         22:fe:b2:fb:a4:2a:61:79:a1:8f:ba:74:11:67:e0:07:65:5c:
         52:86:eb:e7:da:c2:58:07:81:19:b0:53:9d:ca:4c:a1:fc:6f:
         7a:0c:bd:e0:db:c8:92:0c:8e:8b:b7:d4:98:79:bd:83:06:3e:
         70:5d:7d:a2:c4:7b:9e:ac:38:ea:ab:51:b6:a9:49:e0:6c:aa:
         4c:33:17:7d:47:2e:3e:c6:95:08:b1:a1:d5:c2:80:d8:7f:6a:
         2f:39:bf:2e:a5:5a:84:c9:8c:2f:59:15:3e:26:a5:86:4f:31:
         56:3f:c6:7d:f6:ea:fc:bc:ca:c7:6a:8d:61:e1:52:58:12:23:
         d0:e6:0b:89:63:c7:e8:fd:2e:3c:1c:bf:f5:93:4c:d5:17:c7:
         19:82:7f:36:21:2a:7c:63:88:57:9f:66:02:4f:05:4d:6b:f3:
         cb:81:47:0c:d9:f0:04:2c:90:36:45:45:e8:b0:51:3a:88:41:
         a4:52:28:4d:d6:eb:42:15:da:b7:92:a7:1d:c5:0f:aa:2e:aa:
         15:2d:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org