Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3235342e302f32342d3234203d3e20313431313034.roa
File:                     3130332e3135362e3235342e302f32342d3234203d3e20313431313034.roa (raw, json)
Hash identifier:          wDe5n0gFxj1tsqWX0x6UESBHXL+Tvh222BYGjesQ/4U=
Subject key identifier:   81:DF:B7:90:44:4D:7D:E9:32:6C:6F:A3:AB:32:4E:0E:A4:A1:04:03
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       063E54D22D4ABFDA5247966C950E16325BD6C06B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3235342e302f32342d3234203d3e20313431313034.roa
Signing time:             Thu 01 Jul 2021 02:42:39 +0000
ROA not before:           Thu 01 Jul 2021 02:37:39 +0000
ROA not after:            Fri 01 Jul 2022 02:42:39 +0000
asID:                     141104
IP address blocks:        103.156.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3e:54:d2:2d:4a:bf:da:52:47:96:6c:95:0e:16:32:5b:d6:c0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 02:37:39 2021 GMT
            Not After : Jul  1 02:42:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:a2:0e:91:75:89:bf:cd:03:5e:bd:d9:60:
                    04:05:f8:ff:37:ef:f2:a7:a9:87:de:60:ec:05:51:
                    59:fc:d0:27:b2:c0:88:42:6a:57:e7:bf:b1:49:ed:
                    5f:bd:19:72:a2:8f:52:60:5f:02:10:77:fc:10:e8:
                    4b:a0:35:b7:f8:06:ff:80:3c:a4:10:ed:45:49:9b:
                    56:3f:92:3d:04:a4:d5:18:f5:ba:8a:2f:11:90:26:
                    0b:ab:8d:ba:28:cf:65:f8:a1:11:c9:89:d6:eb:23:
                    cb:a9:f4:b9:4e:f3:43:08:52:b7:eb:5e:35:f3:15:
                    5b:f3:40:63:22:33:c4:87:6f:4c:7f:d9:02:f4:ab:
                    06:2e:31:63:25:eb:29:f7:3c:23:0b:f8:6a:24:0c:
                    17:bf:4b:d9:4c:29:a1:c2:8c:4c:64:a4:02:f6:db:
                    6a:82:b8:5d:6d:e7:5b:35:d7:1b:3f:73:ee:ba:9f:
                    1d:32:49:19:0e:3c:f2:a7:fa:15:25:2f:ad:99:f8:
                    57:50:2a:8b:32:3c:a1:d5:58:c5:02:9a:e6:4d:7c:
                    04:39:40:77:83:10:65:df:bf:94:5b:27:aa:bd:be:
                    42:3e:9b:a5:e2:87:6b:fe:cf:1c:76:60:09:65:84:
                    11:e1:d0:f6:9f:6f:5f:77:e0:5d:d7:61:88:58:80:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DF:B7:90:44:4D:7D:E9:32:6C:6F:A3:AB:32:4E:0E:A4:A1:04:03
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3235342e302f32342d3234203d3e20313431313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:9e:c6:c6:28:6f:5c:b2:88:99:25:43:43:a5:c7:f7:47:
         b6:be:1c:12:85:c3:91:a4:2d:12:3a:63:fe:a9:84:4f:39:46:
         4d:37:1a:b3:65:9f:95:22:f0:f6:65:76:39:ed:97:23:fa:cf:
         76:e4:4a:c2:93:e4:0b:6f:8b:82:44:2d:ac:d1:72:b2:38:b5:
         37:cb:3c:00:94:0c:28:a7:51:5a:94:9b:c9:b1:00:cd:01:43:
         98:71:fd:76:fc:a0:3d:c2:7f:dd:0f:4a:a1:11:ef:40:83:d5:
         58:3b:0a:01:9e:e2:41:64:a3:b0:63:f3:69:e7:f4:75:a3:a9:
         bb:c5:14:22:41:3f:a1:78:82:ef:bc:52:b2:64:e7:db:4d:60:
         db:a4:8d:b2:f1:93:76:8f:06:9a:0c:fb:5b:5e:28:f4:6b:fd:
         19:9d:25:a6:0a:ff:9e:60:62:8d:34:c6:0b:32:23:1d:e1:19:
         db:c9:c8:29:93:02:d3:4f:50:9a:1c:84:51:9a:31:56:ac:61:
         87:14:eb:9e:97:45:43:ef:45:18:26:25:d4:2f:96:58:f3:9f:
         a5:b1:df:1e:6b:36:f7:8c:a5:c5:83:59:84:44:b9:87:5b:73:
         8e:d1:45:28:6c:71:d4:1d:f9:ca:f6:6c:66:83:5e:8a:d6:0c:
         a7:66:1b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org