Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38352e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e38352e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          TBzvyv8sudPmSKJZRQoidJsPkGIg0f20o1N7YL44fnA=
Subject key identifier:   57:8D:DF:84:E0:95:14:6D:90:A1:CC:9C:B5:57:02:E6:8B:D1:F7:71
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4E6C6B53B44ED325318A3243A6B419B2CF70E1DE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38352e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:03 +0000
ROA not before:           Thu 01 Jul 2021 07:55:03 +0000
ROA not after:            Fri 01 Jul 2022 08:00:03 +0000
asID:                     131111
IP address blocks:        103.154.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6c:6b:53:b4:4e:d3:25:31:8a:32:43:a6:b4:19:b2:cf:70:e1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:03 2021 GMT
            Not After : Jul  1 08:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:15:20:80:d3:cd:28:f7:19:1d:4f:5f:ff:
                    9f:40:8a:2c:3b:48:16:ca:19:8c:30:22:b0:4c:47:
                    24:d2:3f:99:38:fe:bb:35:a1:d6:2b:ee:5e:68:7b:
                    c2:d9:c2:bc:5e:1d:da:77:99:16:30:37:a2:9c:66:
                    4c:b5:48:2c:c4:9c:6e:60:59:32:68:71:ba:0f:da:
                    b7:4e:f3:53:91:07:db:61:f6:1b:8d:fc:1c:6a:a8:
                    ae:15:a9:02:3b:92:78:4e:54:d1:79:ee:5d:3a:d3:
                    5e:c4:e1:a8:ad:5e:2b:e1:f3:70:6c:c2:5f:8b:44:
                    3f:34:bf:37:2d:5b:c6:d4:44:a2:f6:3c:4b:80:ca:
                    5d:fe:2b:c8:14:92:f7:68:53:58:c8:fb:18:a0:df:
                    53:8f:38:d8:7a:bc:b7:68:0c:26:6a:bb:de:28:a3:
                    cf:03:b9:c3:d4:16:54:01:1d:6a:43:cc:03:3a:f5:
                    16:ff:e7:14:b2:5e:99:93:f5:b6:54:3f:09:3d:f9:
                    a8:20:7d:d8:c9:19:7d:78:98:e2:9f:e9:a3:86:d5:
                    36:94:0a:8f:2d:ed:96:71:06:ff:0e:0c:3b:e8:40:
                    f5:03:d4:fe:d7:7c:a0:0b:6b:91:f2:e7:5e:7a:ee:
                    51:3d:b1:36:9f:76:a2:3c:a7:9f:6e:cc:4e:8f:80:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8D:DF:84:E0:95:14:6D:90:A1:CC:9C:B5:57:02:E6:8B:D1:F7:71
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38352e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:45:12:e7:2e:83:fb:77:e8:52:85:96:e7:af:14:0a:e7:63:
         00:d7:4b:a3:f7:79:ea:9b:cf:8c:aa:c4:9b:b2:0e:08:30:d1:
         fa:37:11:4a:5b:03:1f:20:96:0b:05:1c:87:62:d9:5f:fe:17:
         cd:08:05:d2:be:c0:00:7d:1a:62:3b:86:dd:5f:77:e0:f3:88:
         5e:33:7d:05:d0:ef:ef:4b:8e:aa:19:77:64:71:f2:f1:b3:36:
         78:00:88:ff:0f:e2:7b:2c:76:d7:04:49:44:f1:01:0c:f4:4a:
         d1:ec:c5:c1:b8:83:3f:55:36:4f:15:b1:5d:d0:4c:98:ee:8a:
         9a:8f:c0:de:e3:fe:89:b0:fe:6c:1c:dc:24:22:62:67:e4:b9:
         d9:94:4f:d6:41:82:c3:f0:80:94:48:0c:b2:ad:80:23:75:b7:
         31:55:ed:1e:00:dd:7a:81:51:62:ff:65:67:eb:e8:30:1c:97:
         2f:0f:b4:fb:85:60:ef:3c:66:db:be:c1:e4:d7:90:04:1d:93:
         e0:7a:9b:0a:33:30:f6:c4:c6:86:73:e1:f4:11:70:a2:cc:32:
         18:a0:c7:b6:16:10:3a:cc:c9:32:1b:3f:3b:6a:c3:8c:7f:b0:
         99:0f:cf:e8:6e:a8:04:1a:cc:ca:03:6f:cd:0a:6a:d3:88:d2:
         0a:93:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org