Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38342e302f3234203d3e20313331313131.roa
File: 3130332e3135342e38342e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: G9E0UB4VTZj+LcvanIdNiIT6DskYHcqqfh+a2ceQ5Bw=
Subject key identifier: 05:6E:02:E8:AA:C2:25:54:72:9C:E2:A4:19:71:91:C4:3F:03:A5:54
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 44ECDA3C80435F49E4527AA48174E4E120C2AE05
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38342e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:13 +0000
ROA not before: Thu 01 Jul 2021 07:55:13 +0000
ROA not after: Fri 01 Jul 2022 08:00:13 +0000
asID: 131111
IP address blocks: 103.154.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ec:da:3c:80:43:5f:49:e4:52:7a:a4:81:74:e4:e1:20:c2:ae:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:13 2021 GMT
Not After : Jul 1 08:00:13 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:57:38:31:d5:b1:12:07:a3:d7:b6:f4:bf:e8:
cc:f5:4c:e6:97:49:d0:9b:e5:2a:7b:89:ba:94:91:
be:d3:85:fd:86:da:d9:a9:4b:83:8c:c9:f5:69:50:
a0:96:ba:c7:08:28:85:2e:ef:ec:09:e8:fe:dc:32:
65:13:58:c7:2a:c2:6b:1e:fb:e9:bb:3a:2b:25:78:
34:67:c7:ed:6e:08:dc:ad:66:4b:06:67:89:e7:d8:
22:79:69:73:5b:33:dd:f9:39:80:3a:ee:27:0f:72:
61:22:8a:a3:b9:d1:d4:57:2e:cd:d4:aa:5a:5f:e9:
55:a7:c9:29:53:fa:b4:82:ff:e2:f1:7b:95:f2:fd:
3b:08:e6:5c:94:29:6d:ac:ee:ed:67:69:27:bd:ba:
ca:cd:9c:5b:88:6e:ef:8f:8f:b7:b1:6d:49:f8:46:
83:21:b4:3a:4c:d7:5d:47:de:52:7e:a6:41:ac:0e:
00:dc:f4:9b:8d:b1:d1:f5:34:ec:b8:31:45:02:c0:
3e:f7:54:8c:ba:b5:1b:40:b9:c4:81:2b:fe:a9:bb:
24:e8:55:0d:c9:bd:d9:07:96:bd:ec:67:52:80:dc:
c0:cd:17:e2:2d:2e:bc:cc:9e:7f:6a:27:78:f0:b4:
e5:24:84:0d:85:65:be:c7:e1:1b:17:2a:33:cf:fc:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6E:02:E8:AA:C2:25:54:72:9C:E2:A4:19:71:91:C4:3F:03:A5:54
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38342e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.84.0/24
Signature Algorithm: sha256WithRSAEncryption
11:82:a9:a5:e6:2c:67:8b:1a:b9:24:3a:ea:6b:b3:c5:b8:c0:
13:69:6f:05:4d:2d:77:f1:5a:d3:45:96:7b:9d:02:4c:fe:93:
d2:d3:40:90:53:e0:89:8c:2c:e7:5d:8e:a0:23:61:09:3b:df:
eb:51:9c:27:c1:0f:a3:0e:a7:50:9b:f2:a9:2d:55:a2:01:5d:
a5:88:6c:64:7b:75:5a:68:cd:45:53:24:a6:d2:4b:9f:10:04:
40:e4:2e:4d:52:9e:67:46:35:cd:13:70:fc:3f:c8:08:36:79:
14:f0:3a:0e:df:7f:ac:f1:01:70:51:70:b2:fb:35:68:c5:a4:
d7:4e:27:d5:24:11:1d:16:b8:25:50:fd:1b:fd:44:ca:69:92:
4b:53:19:17:eb:9b:88:ee:b2:90:22:e0:16:79:17:6e:0c:f7:
04:bb:93:04:90:59:7c:a4:c0:a8:24:8f:b3:95:d4:81:25:a2:
43:12:e6:73:d7:3c:19:6c:be:0c:c1:3a:b7:3a:5c:70:20:ad:
ca:0f:f4:ad:c0:7d:17:83:63:45:8d:d2:ab:b2:24:2b:cb:57:
a2:82:a5:fa:02:74:2e:5f:77:fb:fa:44:fe:5a:a5:95:34:6a:
4d:42:e5:2a:b7:83:9f:4c:65:e8:a5:62:59:fb:56:1c:ec:8c:
91:1e:f3:3e
-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgIUROzaPIBDX0nkUnqkgXTk4SDCrgUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUxM1oX
DTIyMDcwMTA4MDAxM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFNTU3MzgzMUQ1QjExMjA3QTNEN0I2RjRCRkU4Q0NGNTRDRTY5NzQ5RDA5
QkU1MkE3Qjg5QkE5NDkxQkVEMzg1RkQ4NkRBRDlBOTRCODM4Q0M5RjU2OTUwQTA5
NkJBQzcwODI4ODUyRUVGRUMwOUU4RkVEQzMyNjUxMzU4QzcyQUMyNkIxRUZCRTlC
QjNBMkIyNTc4MzQ2N0M3RUQ2RTA4RENBRDY2NEIwNjY3ODlFN0Q4MjI3OTY5NzM1
QjMzRERGOTM5ODAzQUVFMjcwRjcyNjEyMjhBQTNCOUQxRDQ1NzJFQ0RENEFBNUE1
RkU5NTVBN0M5Mjk1M0ZBQjQ4MkZGRTJGMTdCOTVGMkZEM0IwOEU2NUM5NDI5NkRB
Q0VFRUQ2NzY5MjdCREJBQ0FDRDlDNUI4ODZFRUY4RjhGQjdCMTZENDlGODQ2ODMy
MUI0M0E0Q0Q3NUQ0N0RFNTI3RUE2NDFBQzBFMDBEQ0Y0OUI4REIxRDFGNTM0RUNC
ODMxNDUwMkMwM0VGNzU0OENCQUI1MUI0MEI5QzQ4MTJCRkVBOUJCMjRFODU1MERD
OUJERDkwNzk2QkRFQzY3NTI4MERDQzBDRDE3RTIyRDJFQkNDQzlFN0Y2QTI3NzhG
MEI0RTUyNDg0MEQ4NTY1QkVDN0UxMUIxNzJBMzNDRkZDQjdCMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlVzgx1bESB6PXtvS/6Mz1
TOaXSdCb5Sp7ibqUkb7Thf2G2tmpS4OMyfVpUKCWuscIKIUu7+wJ6P7cMmUTWMcq
wmse++m7OisleDRnx+1uCNytZksGZ4nn2CJ5aXNbM935OYA67icPcmEiiqO50dRX
Ls3Uqlpf6VWnySlT+rSC/+Lxe5Xy/TsI5lyUKW2s7u1naSe9usrNnFuIbu+Pj7ex
bUn4RoMhtDpM111H3lJ+pkGsDgDc9JuNsdH1NOy4MUUCwD73VIy6tRtAucSBK/6p
uyToVQ3JvdkHlr3sZ1KA3MDNF+ItLrzMnn9qJ3jwtOUkhA2FZb7H4RsXKjPP/Lez
AgMBAAGjggH6MIIB9jAdBgNVHQ4EFgQUBW4C6KrCJVRynOKkGXGRxD8DpVQwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB+BggrBgEF
BQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTM1MzQyZTM4MzQyZTMwMmYzMjM0
MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmlQwDQYJKoZIhvcNAQEL
BQADggEBABGCqaXmLGeLGrkkOuprs8W4wBNpbwVNLXfxWtNFlnudAkz+k9LTQJBT
4ImMLOddjqAjYQk73+tRnCfBD6MOp1Cb8qktVaIBXaWIbGR7dVpozUVTJKbSS58Q
BEDkLk1SnmdGNc0TcPw/yAg2eRTwOg7ff6zxAXBRcLL7NWjFpNdOJ9UkER0WuCVQ
/Rv9RMppkktTGRfrm4juspAi4BZ5F24M9wS7kwSQWXykwKgkj7OV1IElokMS5nPX
PBlsvgzBOrc6XHAgrcoP9K3AfReDY0WN0quyJCvLV6KCpfoCdC5fd/v6RP5apZU0
ak1C5Sq3g59MZeilYln7VhzsjJEe8z4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org