Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e36382e302f32342d3234203d3e20313431363433.roa
File:                     3130332e3136322e36382e302f32342d3234203d3e20313431363433.roa (raw, json)
Hash identifier:          4LJBqd+JhF0vD5N7MGdN8eT5RoNqhcByj04Fkzc/NqY=
Subject key identifier:   07:41:6D:4F:92:33:38:EB:55:14:0F:80:CF:E9:FE:F4:4D:3A:BE:66
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       757A9908025810CD7317EADA0A5819EFCB3DCA90
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e36382e302f32342d3234203d3e20313431363433.roa
Signing time:             Mon 06 Sep 2021 04:09:07 +0000
ROA not before:           Mon 06 Sep 2021 04:04:07 +0000
ROA not after:            Tue 06 Sep 2022 04:09:07 +0000
asID:                     141643
IP address blocks:        103.162.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7a:99:08:02:58:10:cd:73:17:ea:da:0a:58:19:ef:cb:3d:ca:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  6 04:04:07 2021 GMT
            Not After : Sep  6 04:09:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:76:51:d5:05:a8:c5:fc:22:4a:71:9a:ab:e9:
                    23:c3:b7:24:0b:ed:e4:63:65:c8:09:d8:5c:7c:69:
                    75:2f:99:b7:27:63:63:13:09:fb:9c:2e:4f:75:ea:
                    cd:e5:98:07:8b:07:af:7d:9c:4c:4e:21:92:9f:74:
                    ba:82:4f:c1:77:05:4f:76:71:a8:a4:b2:00:fe:36:
                    7c:8b:49:fe:60:92:42:b3:06:49:95:d4:bd:80:8e:
                    9c:2d:5b:8b:10:2d:15:8d:ae:49:71:d8:0a:cb:74:
                    c0:70:f4:dc:c0:48:a5:cf:f4:53:26:f0:eb:b5:03:
                    5a:8a:bf:fc:be:29:97:07:f2:56:da:d2:83:5d:35:
                    1e:3d:5e:a8:b6:bb:db:8e:d0:66:32:7e:5a:1d:7e:
                    20:1c:c2:a0:84:aa:fb:d7:c8:49:21:ac:ef:fb:6e:
                    3d:f3:bd:3b:ca:b6:66:b9:a0:ac:11:2d:de:4b:4c:
                    47:c9:88:40:ce:d0:a5:0b:81:61:2c:3d:53:93:bf:
                    e5:f4:a3:59:4e:a9:e3:8f:3a:92:03:f6:ad:55:f1:
                    b0:c6:d8:f9:c5:d8:ca:91:59:ab:cb:93:5a:3d:05:
                    1f:13:58:ac:26:f5:2d:8d:38:7b:2d:14:52:5e:56:
                    d7:e1:c2:74:db:95:5a:aa:71:87:89:45:b7:ac:56:
                    ce:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:41:6D:4F:92:33:38:EB:55:14:0F:80:CF:E9:FE:F4:4D:3A:BE:66
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e36382e302f32342d3234203d3e20313431363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:45:1d:f8:3f:30:32:6d:ec:a3:55:7d:22:8f:51:f4:97:98:
         38:18:c0:60:e3:00:f0:73:25:42:05:35:d8:cd:3f:26:9c:57:
         26:ef:b1:f3:d5:70:fa:d2:e9:f2:4b:f5:32:c2:3b:6f:aa:44:
         56:77:51:c7:be:e1:7b:89:c7:20:09:95:49:39:dd:df:5a:25:
         d1:41:8d:bb:b4:cb:9c:f2:55:1c:34:b2:ff:bf:ae:b6:bf:a1:
         0d:8b:ef:eb:35:5b:0b:c4:83:3d:3a:3f:a2:33:7a:d5:68:98:
         3d:de:58:a1:a2:c9:24:eb:ee:bc:3b:d4:be:0b:7c:25:52:b3:
         c4:44:79:41:3f:52:ab:57:58:34:2b:00:25:de:f1:1a:68:6d:
         eb:ba:db:e0:f1:b1:2d:a8:0e:40:d8:bf:7a:33:cf:8a:5d:6d:
         ce:36:89:d9:ec:f2:75:bb:a5:ca:a4:b1:53:00:85:f4:8d:41:
         09:64:45:08:1f:dd:d2:4f:b0:c3:73:60:5f:36:3b:c9:64:3b:
         03:89:c8:ae:0f:a9:fc:56:1f:5f:0c:61:a7:fe:ac:6c:de:12:
         3e:08:35:02:2e:66:d4:7e:d9:77:7c:79:3e:40:e5:cd:3b:e3:
         cf:25:ac:64:a7:e1:ab:69:fb:37:9c:02:cc:3c:36:c7:5c:46:
         3c:46:a3:8d
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUdXqZCAJYEM1zF+raClgZ78s9ypAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkwNjA0MDQwN1oX
DTIyMDkwNjA0MDkwN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDQzc2NTFENTA1QThDNUZDMjI0QTcxOUFBQkU5MjNDM0I3MjQwQkVERTQ2
MzY1QzgwOUQ4NUM3QzY5NzUyRjk5QjcyNzYzNjMxMzA5RkI5QzJFNEY3NUVBQ0RF
NTk4MDc4QjA3QUY3RDlDNEM0RTIxOTI5Rjc0QkE4MjRGQzE3NzA1NEY3NjcxQThB
NEIyMDBGRTM2N0M4QjQ5RkU2MDkyNDJCMzA2NDk5NUQ0QkQ4MDhFOUMyRDVCOEIx
MDJEMTU4REFFNDk3MUQ4MEFDQjc0QzA3MEY0RENDMDQ4QTVDRkY0NTMyNkYwRUJC
NTAzNUE4QUJGRkNCRTI5OTcwN0YyNTZEQUQyODM1RDM1MUUzRDVFQThCNkJCREI4
RUQwNjYzMjdFNUExRDdFMjAxQ0MyQTA4NEFBRkJEN0M4NDkyMUFDRUZGQjZFM0RG
M0JEM0JDQUI2NjZCOUEwQUMxMTJEREU0QjRDNDdDOTg4NDBDRUQwQTUwQjgxNjEy
QzNENTM5M0JGRTVGNEEzNTk0RUE5RTM4RjNBOTIwM0Y2QUQ1NUYxQjBDNkQ4RjlD
NUQ4Q0E5MTU5QUJDQjkzNUEzRDA1MUYxMzU4QUMyNkY1MkQ4RDM4N0IyRDE0NTI1
RTU2RDdFMUMyNzREQjk1NUFBQTcxODc4OTQ1QjdBQzU2Q0UwQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdlHVBajF/CJKcZqr6SPD
tyQL7eRjZcgJ2Fx8aXUvmbcnY2MTCfucLk916s3lmAeLB699nExOIZKfdLqCT8F3
BU92caiksgD+NnyLSf5gkkKzBkmV1L2AjpwtW4sQLRWNrklx2ArLdMBw9NzASKXP
9FMm8Ou1A1qKv/y+KZcH8lba0oNdNR49Xqi2u9uO0GYyflodfiAcwqCEqvvXyEkh
rO/7bj3zvTvKtma5oKwRLd5LTEfJiEDO0KULgWEsPVOTv+X0o1lOqeOPOpID9q1V
8bDG2PnF2MqRWavLk1o9BR8TWKwm9S2NOHstFFJeVtfhwnTblVqqcYeJRbesVs4L
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUB0FtT5IzOOtVFA+Az+n+9E06vmYwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjMyMmUzNjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6JEMA0GCSqG
SIb3DQEBCwUAA4IBAQCSRR34PzAybeyjVX0ij1H0l5g4GMBg4wDwcyVCBTXYzT8m
nFcm77Hz1XD60unyS/UywjtvqkRWd1HHvuF7iccgCZVJOd3fWiXRQY27tMuc8lUc
NLL/v662v6ENi+/rNVsLxIM9Oj+iM3rVaJg93lihoskk6+68O9S+C3wlUrPERHlB
P1KrV1g0KwAl3vEaaG3rutvg8bEtqA5A2L96M8+KXW3ONonZ7PJ1u6XKpLFTAIX0
jUEJZEUIH93ST7DDc2BfNjvJZDsDiciuD6n8Vh9fDGGn/qxs3hI+CDUCLmbUftl3
fHk+QOXNO+PPJaxkp+Grafs3nALMPDbHXEY8RqON
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org