Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39312e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e39312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          QdoASRuFM0RxGYkNFrH4MZf2RSgphmaHi9xxw00uIBQ=
Subject key identifier:   F3:97:B9:F3:75:A9:0D:00:D6:8C:4A:03:6F:4A:E4:34:95:06:96:D8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5BD9C657AF257835A4C1E5B2F0719E9E4490D231
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39312e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:09 +0000
ROA not before:           Thu 01 Jul 2021 07:55:09 +0000
ROA not after:            Fri 01 Jul 2022 08:00:09 +0000
asID:                     131111
IP address blocks:        103.154.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d9:c6:57:af:25:78:35:a4:c1:e5:b2:f0:71:9e:9e:44:90:d2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:09 2021 GMT
            Not After : Jul  1 08:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:38:ac:34:17:c2:c0:b0:a5:43:66:db:de:
                    ed:26:a4:49:20:cf:08:77:55:b1:ef:6c:37:2c:4a:
                    d7:ca:66:d6:c5:55:e8:14:47:e0:6c:b4:62:2b:02:
                    70:a7:b2:9c:88:a4:c5:7d:79:ea:94:8d:57:47:bf:
                    3d:9a:45:0a:5f:a2:23:50:75:a2:52:75:54:ad:92:
                    f4:9e:4a:ef:a7:b6:2b:42:d4:41:c2:7a:c1:70:b5:
                    af:c2:72:80:00:d3:41:47:78:c0:fb:57:a5:2e:ea:
                    e0:1e:47:c8:63:58:64:a5:70:01:e4:65:1d:3d:c4:
                    11:70:8c:7e:06:ac:99:d5:a6:49:45:60:e9:5f:88:
                    8c:51:5d:53:98:d4:3e:e4:02:ad:a5:86:e9:79:94:
                    26:69:66:6d:88:f0:ec:01:54:d2:4d:35:fa:fe:99:
                    e6:ba:85:a1:06:da:83:1f:e2:87:9e:4a:a7:9c:17:
                    87:e7:29:83:4a:9f:7f:e4:e2:9f:a0:ad:2d:37:8f:
                    3d:91:e0:77:05:05:77:38:67:a5:9b:3f:3b:e3:81:
                    d1:91:ce:dd:4d:72:65:f3:f7:6e:41:81:58:1a:7e:
                    d0:ff:8f:b6:ee:2e:4d:ad:21:0a:64:54:6d:46:2e:
                    a5:b4:32:a4:17:bd:d4:be:ff:4d:43:a0:fa:9d:57:
                    99:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:97:B9:F3:75:A9:0D:00:D6:8C:4A:03:6F:4A:E4:34:95:06:96:D8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:3c:87:0c:28:73:f5:20:41:19:7f:b3:b9:9b:2c:7c:ab:7b:
         19:7a:c1:38:37:b3:fe:91:db:59:df:0f:d2:7e:c7:c0:e2:ab:
         6a:43:09:5b:7e:7b:d1:9b:f4:56:68:94:3c:b8:9d:d0:6c:d7:
         f8:2b:a4:95:2d:97:bf:82:7e:2a:c9:8f:be:0e:4b:8e:16:79:
         7d:58:fd:a1:9b:1c:6c:d0:c3:26:02:d1:15:b4:51:80:85:4f:
         e3:f1:f2:08:bd:66:b4:72:d5:aa:16:bc:25:8f:5d:c5:7a:27:
         44:40:c9:d3:20:95:31:98:37:4d:36:12:4d:ee:39:c2:39:d4:
         a2:a2:86:dc:61:ee:13:2b:38:ac:6e:25:83:33:72:5b:10:5a:
         00:f7:d7:e4:3f:90:00:69:92:c0:22:2a:c4:42:c1:77:9c:5f:
         7d:15:72:a5:17:c4:9a:45:4e:da:8b:d5:5e:d2:68:89:3d:b1:
         70:c6:0d:fe:8e:a9:31:31:93:e9:61:ec:d7:46:43:37:be:70:
         a0:3e:8d:4c:b0:c4:20:bb:79:57:be:25:17:d3:1a:2e:65:e9:
         c0:78:d9:bb:40:5d:5f:76:63:c0:84:a5:79:5d:ba:d2:80:cc:
         1f:93:ab:7e:55:09:54:f1:6e:9c:4b:7e:e7:aa:22:7e:b0:35:
         50:e2:20:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org