Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38302e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e38302e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          cK+AHxK7xTozTNUHLNQxPS/t511S3vqswjm/XxgjUyY=
Subject key identifier:   3E:A2:58:A6:0F:C3:01:EC:0F:7A:52:BA:ED:F5:49:A9:CB:81:E9:A3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       44976A15DBB3879A3E8166C6F17D25EAA2D60D1D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38302e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:03 +0000
ROA not before:           Thu 01 Jul 2021 07:55:03 +0000
ROA not after:            Fri 01 Jul 2022 08:00:03 +0000
asID:                     131111
IP address blocks:        103.154.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:97:6a:15:db:b3:87:9a:3e:81:66:c6:f1:7d:25:ea:a2:d6:0d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:03 2021 GMT
            Not After : Jul  1 08:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:f5:98:16:46:2b:2e:19:9d:e0:e1:74:82:
                    73:5e:12:07:b9:49:d2:e7:fd:08:c8:6e:d4:89:1d:
                    95:51:5a:10:eb:95:a0:2b:ed:c4:8e:87:c4:70:40:
                    f5:44:9a:5b:f8:7a:bf:71:30:d6:ad:63:6f:7d:de:
                    fa:b4:87:20:11:72:a8:71:e4:d4:c7:cb:dd:8a:6b:
                    87:ab:f7:1d:27:cc:51:5f:2b:e7:f0:1b:62:99:c6:
                    c1:50:72:aa:c1:51:56:9a:24:bc:44:e3:f8:cd:31:
                    c5:6f:55:a6:96:a0:47:1f:76:04:69:94:9f:8d:05:
                    75:4d:a1:05:c7:0b:e5:b3:de:60:5d:54:23:9a:58:
                    4a:9a:c7:09:63:fe:fe:29:de:42:e7:1e:59:55:4a:
                    30:a7:0a:39:76:46:66:86:7c:c6:58:91:e8:f7:06:
                    17:04:f2:da:d5:01:94:8b:15:65:9c:77:f1:33:fd:
                    c4:1b:1e:6f:ba:64:2e:a7:10:db:7a:a0:c0:5a:0d:
                    40:f3:9e:b1:60:98:6b:3e:d1:53:9c:75:2a:0d:1c:
                    9c:40:27:41:0c:10:95:07:0a:bf:75:a7:fd:99:ac:
                    d2:de:73:e5:91:85:ad:b9:28:1e:4c:5a:34:a6:9d:
                    44:bb:06:1c:38:bf:25:27:6c:b2:c5:d8:07:00:b0:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A2:58:A6:0F:C3:01:EC:0F:7A:52:BA:ED:F5:49:A9:CB:81:E9:A3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38302e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ca:80:ef:18:9b:d3:24:2f:3d:04:13:0d:94:59:ce:9a:70:
         43:7c:22:1b:2e:a1:42:35:19:b0:7a:b3:4e:88:f0:81:f5:43:
         a4:c1:ee:34:12:92:1c:42:4e:d0:2a:b9:25:82:c8:52:1d:ce:
         e5:51:08:17:2f:7c:3e:33:4d:0b:37:f4:f3:8d:7e:d8:5d:a6:
         87:29:91:5d:e9:91:39:90:c5:92:60:f7:a0:0f:ae:82:5f:cc:
         21:4d:72:5f:dc:95:ff:52:34:02:af:ca:d9:ae:44:35:da:4e:
         60:2d:c3:39:1c:52:0b:8a:14:9a:c0:d4:16:69:22:b9:55:71:
         7c:be:96:45:1f:62:ca:fa:1e:2e:e6:87:2c:86:a8:77:78:5d:
         a7:78:ba:94:12:b5:ea:d7:04:c3:6f:fd:46:89:72:2a:e6:d5:
         bd:a2:bd:92:15:59:a2:da:fd:1a:d3:84:71:0e:1b:75:a0:0a:
         8a:53:e6:f9:3d:e9:41:7f:a7:be:c5:cc:f7:a0:6a:fb:f5:a0:
         1f:a1:5e:2d:40:90:7e:3e:9b:72:00:97:64:ad:6c:d4:40:08:
         b7:9a:cd:5f:b1:36:e2:5a:e2:80:e1:0e:60:76:36:b8:1c:2e:
         62:91:27:b5:ef:5a:ea:a2:92:c9:c7:3a:b9:0b:37:0f:34:8e:
         25:e1:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org