Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38312e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e38312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          2wMjQAKEeIrPs5X3PM4LrHIzLF/JJuK+ljYpJj+pXOA=
Subject key identifier:   67:05:A4:B6:10:DB:10:38:CE:3A:D1:60:33:53:23:86:D2:EB:70:A2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       73802E9FE195DC8E82E05B7E8DCEBA33F085E2AA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38312e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:13 +0000
ROA not before:           Thu 01 Jul 2021 07:55:13 +0000
ROA not after:            Fri 01 Jul 2022 08:00:13 +0000
asID:                     131111
IP address blocks:        103.154.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:80:2e:9f:e1:95:dc:8e:82:e0:5b:7e:8d:ce:ba:33:f0:85:e2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:13 2021 GMT
            Not After : Jul  1 08:00:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:57:23:5e:74:10:1a:e9:7b:17:aa:50:31:
                    df:59:b5:a2:69:dc:f8:41:dc:b4:6c:02:ba:d3:ca:
                    0a:00:89:7f:b9:b4:fa:12:ed:2a:98:80:81:a7:9c:
                    80:62:82:e9:9c:05:66:fa:7b:7a:e4:e6:9c:5a:48:
                    fa:3a:d3:af:c6:24:05:93:d1:6e:73:5b:35:f2:af:
                    ba:89:12:b9:b8:b1:17:29:ae:8d:c0:91:d8:1e:f5:
                    ce:60:b6:25:d5:b4:57:01:76:99:71:d9:c3:47:e7:
                    c5:82:66:c9:da:38:8e:5d:58:60:11:e1:63:e1:a1:
                    83:c8:d8:1d:d6:4b:7a:cd:bd:e1:26:67:22:79:1e:
                    e2:9a:fa:61:ae:a0:6a:c5:fa:af:de:65:09:3d:19:
                    92:ff:e9:17:bd:e9:85:a7:37:be:8e:ba:67:2c:37:
                    3d:61:86:57:f6:f7:f8:93:74:6b:11:ee:98:5a:98:
                    71:0b:a8:17:c6:fe:5f:84:51:b7:c2:e1:d5:c2:ca:
                    97:ce:be:d5:cb:ac:f6:24:12:7e:61:fc:73:ac:3d:
                    44:d7:52:1d:65:57:81:89:fb:21:6e:fe:9a:61:99:
                    5b:d2:b3:2f:be:dd:6a:df:3f:41:b6:9a:45:2d:fd:
                    0f:0f:4a:58:e7:d6:b5:27:47:5a:94:a1:c6:4c:10:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:05:A4:B6:10:DB:10:38:CE:3A:D1:60:33:53:23:86:D2:EB:70:A2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:03:af:71:23:47:95:d6:98:cc:92:ef:bc:51:af:05:92:f9:
         4e:40:f3:37:e0:f7:f9:76:6e:4f:82:c7:f0:bc:0b:df:e2:f8:
         0f:e8:90:f4:8d:02:18:90:71:c3:e9:db:65:a0:01:bd:1c:1f:
         fd:9b:db:6b:f4:0d:0a:f1:a2:99:8a:66:59:25:55:f8:fd:9d:
         0e:50:5a:a6:fd:43:2d:f8:77:12:75:59:1b:b8:d3:44:fc:0f:
         9d:0e:e5:db:28:ad:25:d1:4d:81:09:b6:a3:99:f5:7d:e3:8d:
         45:e9:87:9f:48:a2:a6:e6:ec:1d:98:3a:22:0b:ca:0d:4f:d3:
         20:cc:c7:8b:a8:02:f5:93:dd:a1:b3:62:7d:cf:9c:6e:f3:81:
         5c:5c:24:90:87:e1:79:c3:b4:9a:0f:38:9a:9a:de:47:5d:e4:
         50:61:b3:0b:7d:9e:42:6e:92:89:68:f8:d4:68:bd:92:61:8c:
         6a:37:54:09:c1:a1:19:54:41:ab:8d:7f:7a:0d:4f:24:55:49:
         d9:ac:8f:ae:1d:6e:2a:96:24:23:4e:bf:29:b2:f5:87:64:0c:
         2c:47:93:19:2c:c6:e3:eb:72:43:d4:d6:f5:0e:96:97:2d:67:
         74:28:0f:5e:8f:e1:f1:78:e0:c2:ed:63:85:67:6c:88:7b:3e:
         2d:89:f5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org