Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39322e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e39322e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          Hnr35fRmftOhEzfpbI4cmxfM+3uUX8h3arOj51LHzpo=
Subject key identifier:   A3:72:6E:BF:D4:80:CB:44:30:92:1A:DB:E9:1F:70:7C:A4:1A:AC:76
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       45371498EAEA95FB39C69604A0D3B52FDFCC1822
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39322e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:07 +0000
ROA not before:           Thu 01 Jul 2021 07:55:07 +0000
ROA not after:            Fri 01 Jul 2022 08:00:07 +0000
asID:                     131111
IP address blocks:        103.154.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:37:14:98:ea:ea:95:fb:39:c6:96:04:a0:d3:b5:2f:df:cc:18:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:07 2021 GMT
            Not After : Jul  1 08:00:07 2022 GMT
        Subject: CN=3082010A0282010100C02DFA8C62C62DA0830FF6CC342A24F3CA8758A30A53BB252C27A8BB53C1A4A28B697F783006343459DA84843FC057985006AAB289536EBCA9300C2A7C5CBEEDB4D65046A3010D8664F76AA4B60EAB16C52103B0BD4AC4620DC69D5554202E45EDCE4AC77063B62A9126B8EB8E11282936FB4F455D5EF8A69C74D6442BBCE7823E248945FDD91EFFC8BE6B890C3308795EC9F3898ABDDC399A3DEF251B36301E579BF618233041CE983BEFCA44BDB958FA0A0FAAB81B8CA6177649033C0536F9E5D0D56BA4D77D49BB6D6DCC04716275D75571D486683D6B70901770924149AB1D3C363A7194FD8A1E04911AABD48B49C4D641743948ACA1791CB58E094B44DB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:fa:8c:62:c6:2d:a0:83:0f:f6:cc:34:2a:
                    24:f3:ca:87:58:a3:0a:53:bb:25:2c:27:a8:bb:53:
                    c1:a4:a2:8b:69:7f:78:30:06:34:34:59:da:84:84:
                    3f:c0:57:98:50:06:aa:b2:89:53:6e:bc:a9:30:0c:
                    2a:7c:5c:be:ed:b4:d6:50:46:a3:01:0d:86:64:f7:
                    6a:a4:b6:0e:ab:16:c5:21:03:b0:bd:4a:c4:62:0d:
                    c6:9d:55:54:20:2e:45:ed:ce:4a:c7:70:63:b6:2a:
                    91:26:b8:eb:8e:11:28:29:36:fb:4f:45:5d:5e:f8:
                    a6:9c:74:d6:44:2b:bc:e7:82:3e:24:89:45:fd:d9:
                    1e:ff:c8:be:6b:89:0c:33:08:79:5e:c9:f3:89:8a:
                    bd:dc:39:9a:3d:ef:25:1b:36:30:1e:57:9b:f6:18:
                    23:30:41:ce:98:3b:ef:ca:44:bd:b9:58:fa:0a:0f:
                    aa:b8:1b:8c:a6:17:76:49:03:3c:05:36:f9:e5:d0:
                    d5:6b:a4:d7:7d:49:bb:6d:6d:cc:04:71:62:75:d7:
                    55:71:d4:86:68:3d:6b:70:90:17:70:92:41:49:ab:
                    1d:3c:36:3a:71:94:fd:8a:1e:04:91:1a:ab:d4:8b:
                    49:c4:d6:41:74:39:48:ac:a1:79:1c:b5:8e:09:4b:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:72:6E:BF:D4:80:CB:44:30:92:1A:DB:E9:1F:70:7C:A4:1A:AC:76
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39322e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:6d:81:bf:c6:1e:8b:6d:fe:22:33:c7:24:65:8c:dc:b7:02:
         b4:ec:e5:69:98:35:b9:e0:59:2f:29:c6:07:f6:aa:21:e7:ea:
         35:43:4a:ca:59:b7:aa:b9:8f:b5:b7:44:12:d8:53:ee:71:e5:
         22:5c:80:83:b6:c9:53:59:69:03:53:80:eb:35:59:62:71:7a:
         4b:74:ea:a4:22:21:2c:b9:b2:f7:0e:14:de:e3:5f:d9:52:a5:
         0e:0c:68:ec:bd:e6:09:96:bb:8c:08:9d:8a:f5:8d:c0:28:f5:
         fa:59:90:c2:f5:2f:03:b3:20:09:bd:43:f8:fc:fb:c0:3d:4d:
         4b:d3:e2:e7:7c:f2:68:28:3a:20:58:24:9a:51:b4:c5:e4:81:
         42:37:cf:e2:40:12:0e:26:41:df:c2:70:14:b6:6e:c4:d6:ff:
         13:c1:8a:aa:fc:f4:4f:7c:d9:75:2b:7e:51:d9:70:62:e5:b8:
         04:5e:77:f4:9f:4c:fc:10:11:ed:6a:df:7e:12:02:5e:a0:07:
         13:db:cf:57:9c:b8:f7:f9:15:2e:e8:e2:87:0b:8e:66:49:d6:
         3f:f7:bf:b5:70:0d:05:8d:be:fc:30:48:60:89:33:d1:71:d4:
         09:95:0f:a2:bc:ca:d3:bf:78:5a:49:ce:53:31:fe:b6:9b:d3:
         75:5e:d8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org