Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3232322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3232322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          TT20zbVh0eujr5CM+b8q/12ycwCVcp/O+JOviSLxtxE=
Subject key identifier:   4D:C1:1C:D4:2D:1A:30:65:E7:41:7E:3C:5D:C3:03:AC:E3:72:8A:89
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6BAF08A519C84AD29DDF222C553B78D8B6DA80F2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3232322e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:16 +0000
ROA not before:           Tue 02 Nov 2021 00:38:16 +0000
ROA not after:            Wed 02 Nov 2022 00:43:16 +0000
asID:                     17995
IP address blocks:        103.164.222.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:af:08:a5:19:c8:4a:d2:9d:df:22:2c:55:3b:78:d8:b6:da:80:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:16 2021 GMT
            Not After : Nov  2 00:43:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:18:ce:dc:c5:53:d9:02:08:d2:96:d3:d5:
                    14:4f:99:8f:08:02:36:fb:8c:25:6b:fe:d5:1f:25:
                    a2:d9:ef:d4:9c:92:39:e6:00:86:57:91:31:64:89:
                    4a:60:b5:b1:55:c9:31:1a:15:f2:f1:bc:f1:60:c1:
                    a2:ab:fa:78:20:f7:f8:35:d0:76:88:34:98:3d:d9:
                    81:99:5f:31:51:48:d2:f1:15:cf:6d:da:9c:dc:9c:
                    d9:9c:c3:da:0c:35:2a:e5:9b:b1:38:b8:dd:06:6c:
                    95:72:cd:59:91:f0:3d:d5:9c:d4:87:0e:9b:e2:5a:
                    7d:e0:4a:23:36:c1:57:10:45:2a:20:12:e0:ab:e4:
                    5d:7c:04:df:48:cb:81:1f:24:4f:43:9e:ae:6f:f1:
                    99:44:a8:91:a3:91:08:9d:6a:c1:41:da:e0:9f:6f:
                    60:f3:00:8e:03:8c:56:f9:e2:7e:f1:ae:d4:6f:87:
                    65:de:50:c1:ba:93:6d:42:0f:50:0c:dc:8b:3f:aa:
                    09:f0:50:d0:d2:27:dc:16:20:43:92:fb:60:91:76:
                    92:16:8c:17:c8:ce:5d:14:a0:50:20:69:9a:96:cf:
                    44:10:98:c1:fc:04:3c:37:ee:fd:27:07:41:2d:51:
                    08:fa:6b:f5:4c:f8:80:ba:08:53:47:04:93:d0:10:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C1:1C:D4:2D:1A:30:65:E7:41:7E:3C:5D:C3:03:AC:E3:72:8A:89
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3232322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:b7:f7:2f:b6:72:f4:20:81:fa:8a:ec:07:6e:61:2c:c8:4d:
         3e:0f:09:cd:d2:a0:8c:d2:d3:00:20:b9:62:5f:de:c6:b4:83:
         3c:f1:ff:3b:7f:45:ec:4a:8d:b0:cf:8d:0c:4f:91:11:e2:ed:
         86:c7:5a:9a:dc:02:de:89:87:e1:a9:6f:32:4b:e0:52:1f:fb:
         cf:e8:ff:33:b9:a8:20:c6:94:fe:07:db:6f:0c:02:c1:4b:4c:
         e7:6a:8e:96:a1:92:a4:81:b2:cf:c0:90:0a:66:63:33:00:9f:
         e0:35:b9:fe:d0:36:e7:c3:c3:5e:40:b1:54:fc:7e:9a:8c:7d:
         03:b5:a3:09:48:ff:77:13:bc:3c:97:95:f9:2f:de:da:01:27:
         ca:1a:e7:21:aa:8f:60:42:31:8c:6e:30:2b:42:60:5e:f0:01:
         20:60:fc:1d:1c:df:9a:3d:0a:82:70:8a:cb:1c:05:b9:b7:c2:
         31:bb:8b:fd:f5:f7:ba:c6:73:14:74:2b:4f:06:90:87:74:fb:
         ae:70:f4:f6:42:72:26:6f:31:6e:df:e5:83:48:4d:94:b6:77:
         1f:9a:28:71:1d:77:68:f5:5d:db:56:d4:47:28:7b:92:7e:93:
         9f:4a:7c:6b:db:0b:32:2e:7e:e2:6d:1d:5a:5c:a6:f8:ff:49:
         94:b1:d5:8f
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUa68IpRnIStKd3yIsVTt42LbagPIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTEwMjAwMzgxNloX
DTIyMTEwMjAwNDMxNlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDQkZFMThDRURDQzU1M0Q5MDIwOEQyOTZEM0Q1MTQ0Rjk5OEYwODAyMzZG
QjhDMjU2QkZFRDUxRjI1QTJEOUVGRDQ5QzkyMzlFNjAwODY1NzkxMzE2NDg5NEE2
MEI1QjE1NUM5MzExQTE1RjJGMUJDRjE2MEMxQTJBQkZBNzgyMEY3RjgzNUQwNzY4
ODM0OTgzREQ5ODE5OTVGMzE1MTQ4RDJGMTE1Q0Y2RERBOUNEQzlDRDk5Q0MzREEw
QzM1MkFFNTlCQjEzOEI4REQwNjZDOTU3MkNENTk5MUYwM0RENTlDRDQ4NzBFOUJF
MjVBN0RFMDRBMjMzNkMxNTcxMDQ1MkEyMDEyRTBBQkU0NUQ3QzA0REY0OENCODEx
RjI0NEY0MzlFQUU2RkYxOTk0NEE4OTFBMzkxMDg5RDZBQzE0MURBRTA5RjZGNjBG
MzAwOEUwMzhDNTZGOUUyN0VGMUFFRDQ2Rjg3NjVERTUwQzFCQTkzNkQ0MjBGNTAw
Q0RDOEIzRkFBMDlGMDUwRDBEMjI3REMxNjIwNDM5MkZCNjA5MTc2OTIxNjhDMTdD
OENFNUQxNEEwNTAyMDY5OUE5NkNGNDQxMDk4QzFGQzA0M0MzN0VFRkQyNzA3NDEy
RDUxMDhGQTZCRjU0Q0Y4ODBCQTA4NTM0NzA0OTNEMDEwODEwMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/hjO3MVT2QII0pbT1RRP
mY8IAjb7jCVr/tUfJaLZ79SckjnmAIZXkTFkiUpgtbFVyTEaFfLxvPFgwaKr+ngg
9/g10HaINJg92YGZXzFRSNLxFc9t2pzcnNmcw9oMNSrlm7E4uN0GbJVyzVmR8D3V
nNSHDpviWn3gSiM2wVcQRSogEuCr5F18BN9Iy4EfJE9Dnq5v8ZlEqJGjkQidasFB
2uCfb2DzAI4DjFb54n7xrtRvh2XeUMG6k21CD1AM3Is/qgnwUNDSJ9wWIEOS+2CR
dpIWjBfIzl0UoFAgaZqWz0QQmMH8BDw37v0nB0EtUQj6a/VM+IC6CFNHBJPQEIED
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUTcEc1C0aMGXnQX48XcMDrONyiokwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM0MmUzMjMyMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6TeMA0GCSqG
SIb3DQEBCwUAA4IBAQAGt/cvtnL0IIH6iuwHbmEsyE0+DwnN0qCM0tMAILliX97G
tIM88f87f0XsSo2wz40MT5ER4u2Gx1qa3ALeiYfhqW8yS+BSH/vP6P8zuaggxpT+
B9tvDALBS0znao6WoZKkgbLPwJAKZmMzAJ/gNbn+0Dbnw8NeQLFU/H6ajH0DtaMJ
SP93E7w8l5X5L97aASfKGuchqo9gQjGMbjArQmBe8AEgYPwdHN+aPQqCcIrLHAW5
t8Ixu4v99fe6xnMUdCtPBpCHdPuucPT2QnImbzFu3+WDSE2UtncfmihxHXdo9V3b
VtRHKHuSfpOfSnxr2wsyLn7ibR1aXKb4/0mUsdWP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org