Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3234382e302f32332d3234203d3e203538383231.roa
File:                     3130332e3135362e3234382e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier:          vd2Kgly8MuKPG5fFd9WEcHwcMFqkdsl2CYyYbuX6jwo=
Subject key identifier:   5E:A3:DF:9D:28:80:25:13:AB:0F:1A:10:9B:41:3E:27:4F:84:6D:CD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3FAB008CFF20C5B376A98E654587E7CEB82CAA94
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3234382e302f32332d3234203d3e203538383231.roa
Signing time:             Thu 24 Jun 2021 05:10:19 +0000
ROA not before:           Thu 24 Jun 2021 05:05:19 +0000
ROA not after:            Fri 24 Jun 2022 05:10:19 +0000
asID:                     58821
IP address blocks:        103.156.248.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ab:00:8c:ff:20:c5:b3:76:a9:8e:65:45:87:e7:ce:b8:2c:aa:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 24 05:05:19 2021 GMT
            Not After : Jun 24 05:10:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:05:c8:5f:82:c0:9c:14:9f:7e:80:bd:08:
                    ad:b5:d9:3a:5c:b2:a3:5a:a8:01:d9:ca:14:ad:f6:
                    ba:b1:04:0d:70:ee:60:35:81:02:31:6f:a2:37:02:
                    e4:76:f7:1a:a1:d7:11:87:75:4a:ef:07:08:26:83:
                    c5:1b:b8:76:b0:2a:db:ce:3f:46:9b:e7:0e:0a:db:
                    9c:b5:30:62:41:7f:1b:9b:74:c6:51:8c:fe:47:42:
                    e0:87:09:e8:5e:80:8d:61:b1:56:25:7a:88:c0:6b:
                    da:04:59:d7:03:5b:4a:26:17:66:af:3f:d4:c2:68:
                    d7:94:35:4d:89:8a:01:cd:41:3f:1e:91:49:5e:2a:
                    d9:7e:80:d2:73:5e:e6:57:a3:1c:ec:1e:f9:4f:6b:
                    3f:31:33:07:8f:be:83:0b:ad:a7:98:61:34:ed:7a:
                    42:01:2f:91:b7:7e:65:7f:e0:40:40:1b:72:9c:cb:
                    80:bc:0b:1f:e8:48:9e:71:45:e7:ff:87:c3:05:9e:
                    3f:7d:16:6b:6f:e8:48:78:23:f8:e9:e3:1d:11:8a:
                    b7:72:c1:b3:cd:05:17:cd:da:5a:5e:bc:c7:55:5c:
                    63:f1:63:22:e4:b4:64:26:19:2e:f7:05:df:99:e8:
                    b1:9a:13:23:a7:46:94:cb:f2:7b:d5:d3:89:83:f8:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A3:DF:9D:28:80:25:13:AB:0F:1A:10:9B:41:3E:27:4F:84:6D:CD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3234382e302f32332d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:dd:76:1b:86:34:5c:7c:6f:6f:5a:09:9d:1d:59:b6:63:53:
         e4:59:d7:c9:a2:32:46:57:40:46:93:d9:59:ed:c5:34:23:4d:
         0c:c0:b0:36:55:1a:dd:44:19:a5:60:7e:e8:2a:a8:37:7a:be:
         23:2c:9b:d3:31:3a:7f:a4:d4:fa:71:cc:5e:69:98:60:00:1a:
         d3:d9:7e:94:08:e7:cc:e8:c1:71:a9:ab:46:a2:ac:13:6a:77:
         93:b3:87:86:b2:60:69:f0:a2:c1:8d:e6:3f:c2:3a:23:06:d7:
         8b:55:c5:ac:bf:02:6e:67:9f:b8:95:b5:7e:f2:07:06:9a:9a:
         7b:a2:7f:d3:4f:d5:6a:e5:8e:95:a7:aa:97:e8:22:04:26:6c:
         c3:28:8a:e3:84:a2:62:3b:b3:74:4b:60:ec:d2:3c:8d:88:e6:
         20:97:80:7d:a8:d6:dc:3e:6a:00:14:e1:01:74:63:a2:1f:49:
         4a:3a:8c:0c:1a:8d:3d:90:dd:48:b5:f8:2c:96:34:1a:ba:1c:
         31:b8:cb:99:bb:1d:d5:e7:68:e3:c4:14:c2:d1:68:93:80:fb:
         8e:9a:4c:8f:9e:2b:15:69:cf:3a:c7:03:38:d7:6d:41:36:cb:
         97:47:9d:eb:b0:98:1d:cb:83:fa:8b:6f:8f:a4:55:55:1d:d6:
         c6:2f:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org