Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39332e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e39332e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          2XePjBfEOhIMeZi2/F1yNuC/VFyIykVS1SgzIqaOTTI=
Subject key identifier:   8C:00:5A:F1:34:D8:83:1F:65:33:2E:88:BF:D4:9C:1D:77:79:13:62
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       46CEF0A82047E4EA7CB0210316FA7D7B810803B9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39332e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:08 +0000
ROA not before:           Thu 01 Jul 2021 07:55:08 +0000
ROA not after:            Fri 01 Jul 2022 08:00:08 +0000
asID:                     131111
IP address blocks:        103.154.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ce:f0:a8:20:47:e4:ea:7c:b0:21:03:16:fa:7d:7b:81:08:03:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:08 2021 GMT
            Not After : Jul  1 08:00:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:a4:3b:a8:0a:5d:d4:70:47:1a:3b:82:3e:
                    a9:ae:8f:4c:4d:6b:40:fc:60:3e:9d:c4:eb:b3:ba:
                    3c:d2:29:33:ff:14:51:9c:13:2f:5f:ef:0a:e8:60:
                    af:ee:2a:93:c3:91:c7:4e:71:9c:60:65:2a:cd:ae:
                    a3:b8:7e:93:c2:89:1d:c0:0d:48:e5:4b:22:c5:d7:
                    55:20:a8:36:a7:60:e3:1a:2f:74:a0:eb:7a:b0:01:
                    be:ce:cb:42:dd:e6:17:11:6b:d7:64:ae:c1:e3:51:
                    1e:d4:39:58:94:94:40:a3:fe:a1:08:7d:3f:01:18:
                    4e:9d:6c:8a:04:6a:4e:90:db:8c:d8:ad:37:53:18:
                    d9:09:d6:cd:cd:de:e9:f4:7c:54:d3:20:0d:ae:8b:
                    36:b9:55:db:a2:49:42:c7:d9:9d:8a:be:9b:27:9b:
                    82:72:71:46:00:33:0f:86:bc:46:88:c9:72:67:b4:
                    b4:4f:95:eb:b7:96:f5:f4:f9:13:6d:24:73:d6:62:
                    7b:bc:36:18:7a:f8:44:bc:96:33:88:9e:ca:90:63:
                    b0:15:1b:a7:28:13:b6:87:6a:8f:4e:ad:64:51:71:
                    de:db:28:f5:a6:40:0c:ff:0c:84:52:82:20:97:ee:
                    47:e8:40:3a:a7:15:0e:25:70:c2:7c:c8:96:5a:c1:
                    39:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:00:5A:F1:34:D8:83:1F:65:33:2E:88:BF:D4:9C:1D:77:79:13:62
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39332e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:8d:86:72:f7:85:1a:fb:05:2d:8d:c3:5b:3c:65:82:42:3a:
         65:3b:b5:a6:20:f9:a1:33:5d:17:0d:ea:4a:83:d4:64:47:df:
         4e:48:d0:2d:81:86:64:38:c5:ba:b0:92:0c:7a:71:23:f6:3e:
         15:db:08:98:9a:4c:00:e9:56:79:21:45:88:dd:9b:74:f8:b6:
         e3:e3:26:0d:a2:2b:2f:4f:7b:27:fd:99:cd:03:07:23:54:e3:
         aa:f5:a8:57:e8:6e:fe:23:f0:3e:b1:5a:f1:7a:82:d9:81:14:
         35:b0:c7:8a:c1:18:58:64:6f:75:51:9a:5a:fa:85:a6:68:36:
         3b:21:db:96:5e:fd:cd:52:1c:5d:90:02:fc:62:cf:e9:cc:b2:
         8a:e0:c9:50:bc:44:f7:12:bb:6c:44:29:f9:70:42:3f:d1:b0:
         b6:f5:56:67:5f:7d:bb:e2:6b:a9:41:10:23:4a:d1:9a:bc:ed:
         38:09:8c:dc:30:59:5c:0a:28:41:bd:0d:b3:4b:4a:78:81:b1:
         64:e1:74:5a:56:d0:14:5c:6e:bc:3d:04:e8:8d:07:ab:72:b7:
         ab:c9:59:bf:73:f5:d4:a7:b7:dc:32:88:aa:4c:37:6e:d9:86:
         5a:66:de:4c:e2:50:54:f1:f0:b7:7c:94:ae:d2:b0:82:b5:fb:
         df:a6:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org