Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e31362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e31362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          Qp+AI4MjHPyCQfAdb54A2isNR8qQg2FsTC/gwujWVSo=
Subject key identifier:   66:2A:56:D5:3F:62:1C:D4:B1:DF:22:8A:56:90:50:39:7D:09:62:68
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4B568EA81479926003477D3E023D109A1F640130
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e31362e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 05 Oct 2021 04:24:24 +0000
ROA not before:           Tue 05 Oct 2021 04:19:24 +0000
ROA not after:            Wed 05 Oct 2022 04:24:24 +0000
asID:                     17995
IP address blocks:        103.164.16.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:56:8e:a8:14:79:92:60:03:47:7d:3e:02:3d:10:9a:1f:64:01:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  5 04:19:24 2021 GMT
            Not After : Oct  5 04:24:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:85:73:59:fd:0f:85:c2:99:6d:66:17:60:57:
                    92:96:08:68:2a:1f:1f:3c:15:87:4c:a7:24:45:97:
                    1e:5c:9d:ef:7a:a7:69:6f:cf:73:4b:c3:78:38:9a:
                    26:08:d0:dc:e8:79:08:2a:56:e0:01:78:55:cb:06:
                    22:d8:f0:a8:85:0f:28:1b:b4:78:70:a8:df:ee:50:
                    de:ac:2e:5d:b3:67:07:7b:c0:bd:3a:27:bc:9d:34:
                    ff:3c:84:66:89:32:07:76:8b:ea:ec:a3:b9:d0:a3:
                    4a:41:62:fa:7c:80:e8:09:ec:0a:7c:88:ef:33:34:
                    b0:5c:f1:d8:4d:55:8c:99:2f:b4:87:47:af:bb:62:
                    93:22:55:ce:55:2e:9e:68:84:64:57:7e:82:18:9e:
                    a0:32:78:da:f6:4b:b0:c7:c1:70:09:98:2d:0b:f1:
                    d1:28:43:45:cc:9d:a8:15:38:07:fd:8e:ed:1d:d0:
                    6b:b5:91:06:a5:07:89:5e:80:08:f0:40:24:95:f7:
                    e3:d5:3e:76:34:38:bc:f9:32:8c:35:07:7a:a6:34:
                    6b:14:15:d1:42:89:20:ff:06:de:aa:f2:58:3e:c0:
                    63:ff:2b:99:ac:82:0a:6a:24:48:8a:39:5c:c3:25:
                    54:a4:fe:b1:cf:23:b9:d2:00:e3:75:27:23:c9:8d:
                    ac:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2A:56:D5:3F:62:1C:D4:B1:DF:22:8A:56:90:50:39:7D:09:62:68
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e31362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:95:e6:68:6d:ee:00:97:72:7e:62:ca:a5:2b:d2:b0:ad:32:
         ea:3a:6b:af:f1:93:1e:34:8c:db:42:c6:b3:27:cc:88:54:01:
         09:9e:0d:e2:0b:04:91:38:d2:de:b0:6e:12:10:90:d1:8e:ec:
         f2:5e:4b:dd:11:78:3c:54:c0:98:47:85:a0:52:0e:4e:48:f2:
         04:26:4b:f3:03:b9:5f:3a:1d:eb:aa:ba:c7:4c:21:00:f0:20:
         ae:fd:67:68:1a:d6:a3:86:4f:16:48:13:71:0f:e7:07:89:39:
         65:9a:59:b8:09:ed:6e:6c:0e:81:69:f9:c2:98:bf:ff:8c:54:
         00:b4:8b:10:1a:6d:60:54:c6:49:a4:54:5a:f8:33:d4:5f:c3:
         28:16:ee:62:40:ac:ed:bc:6f:93:76:64:8e:d1:ac:de:0a:cc:
         70:98:13:d2:7a:7d:75:4d:c7:b7:c1:da:21:86:2b:0f:1f:a1:
         ac:85:f6:63:75:20:0e:67:9a:97:fd:2b:b7:21:2e:d9:98:56:
         29:ff:7a:75:ba:93:88:7b:9d:f2:7f:a9:91:3e:cd:ed:e7:50:
         11:1a:6a:29:39:f9:7e:51:0c:af:fa:b5:bf:cd:a3:b8:2d:0b:
         ff:f4:60:94:16:3d:6b:08:ca:51:0c:65:45:a6:de:18:34:78:
         dc:56:83:c1
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUS1aOqBR5kmADR30+Aj0Qmh9kATAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAwNTA0MTkyNFoX
DTIyMTAwNTA0MjQyNFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFNDg1NzM1OUZEMEY4NUMyOTk2RDY2MTc2MDU3OTI5NjA4NjgyQTFGMUYz
QzE1ODc0Q0E3MjQ0NTk3MUU1QzlERUY3QUE3Njk2RkNGNzM0QkMzNzgzODlBMjYw
OEQwRENFODc5MDgyQTU2RTAwMTc4NTVDQjA2MjJEOEYwQTg4NTBGMjgxQkI0Nzg3
MEE4REZFRTUwREVBQzJFNURCMzY3MDc3QkMwQkQzQTI3QkM5RDM0RkYzQzg0NjY4
OTMyMDc3NjhCRUFFQ0EzQjlEMEEzNEE0MTYyRkE3QzgwRTgwOUVDMEE3Qzg4RUYz
MzM0QjA1Q0YxRDg0RDU1OEM5OTJGQjQ4NzQ3QUZCQjYyOTMyMjU1Q0U1NTJFOUU2
ODg0NjQ1NzdFODIxODlFQTAzMjc4REFGNjRCQjBDN0MxNzAwOTk4MkQwQkYxRDEy
ODQzNDVDQzlEQTgxNTM4MDdGRDhFRUQxREQwNkJCNTkxMDZBNTA3ODk1RTgwMDhG
MDQwMjQ5NUY3RTNENTNFNzYzNDM4QkNGOTMyOEMzNTA3N0FBNjM0NkIxNDE1RDE0
Mjg5MjBGRjA2REVBQUYyNTgzRUMwNjNGRjJCOTlBQzgyMEE2QTI0NDg4QTM5NUND
MzI1NTRBNEZFQjFDRjIzQjlEMjAwRTM3NTI3MjNDOThEQUM2RjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkhXNZ/Q+FwpltZhdgV5KW
CGgqHx88FYdMpyRFlx5cne96p2lvz3NLw3g4miYI0NzoeQgqVuABeFXLBiLY8KiF
DygbtHhwqN/uUN6sLl2zZwd7wL06J7ydNP88hGaJMgd2i+rso7nQo0pBYvp8gOgJ
7Ap8iO8zNLBc8dhNVYyZL7SHR6+7YpMiVc5VLp5ohGRXfoIYnqAyeNr2S7DHwXAJ
mC0L8dEoQ0XMnagVOAf9ju0d0Gu1kQalB4legAjwQCSV9+PVPnY0OLz5Mow1B3qm
NGsUFdFCiSD/Bt6q8lg+wGP/K5msggpqJEiKOVzDJVSk/rHPI7nSAON1JyPJjaxv
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUZipW1T9iHNSx3yKKVpBQOX0JYmgwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM0MmUzMTM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWekEDANBgkqhkiG
9w0BAQsFAAOCAQEAMZXmaG3uAJdyfmLKpSvSsK0y6jprr/GTHjSM20LGsyfMiFQB
CZ4N4gsEkTjS3rBuEhCQ0Y7s8l5L3RF4PFTAmEeFoFIOTkjyBCZL8wO5Xzod66q6
x0whAPAgrv1naBrWo4ZPFkgTcQ/nB4k5ZZpZuAntbmwOgWn5wpi//4xUALSLEBpt
YFTGSaRUWvgz1F/DKBbuYkCs7bxvk3ZkjtGs3grMcJgT0np9dU3Ht8HaIYYrDx+h
rIX2Y3UgDmeal/0rtyEu2ZhWKf96dbqTiHud8n+pkT7N7edQERpqKTn5flEMr/q1
v82juC0L//RglBY9awjKUQxlRabeGDR43FaDwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org