Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3132362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3132362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          oXMam9e1derOCifch82uWQqde2YAb0UJHHQFHgXAimw=
Subject key identifier:   F3:B1:FA:D9:BE:9A:D6:7E:6E:13:95:AF:EA:F7:2F:73:68:0E:34:C6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       410168E5B7006E8003AA9BE4117C0AC9C4111ED6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3132362e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:19 +0000
ROA not before:           Tue 02 Nov 2021 00:38:19 +0000
ROA not after:            Wed 02 Nov 2022 00:43:19 +0000
asID:                     17995
IP address blocks:        103.165.126.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:01:68:e5:b7:00:6e:80:03:aa:9b:e4:11:7c:0a:c9:c4:11:1e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:19 2021 GMT
            Not After : Nov  2 00:43:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:48:2c:38:2b:f8:06:52:cc:6f:6f:30:15:
                    ed:58:48:03:40:f3:3b:d7:ee:c8:70:39:66:55:bf:
                    cf:c7:c4:3c:58:1d:77:3b:05:ad:1f:90:77:33:b0:
                    06:da:04:8b:d2:95:ff:0c:57:29:b0:b6:d9:3c:35:
                    24:b5:09:cc:00:00:e3:f6:d8:41:80:d0:fa:e3:c1:
                    5d:e9:b0:fe:6c:6c:58:12:e0:79:c0:32:8b:ae:e0:
                    38:c2:c6:7b:c0:21:7e:69:11:a5:07:88:f4:47:19:
                    1f:4f:65:04:a4:ed:24:f4:35:af:a2:fa:64:92:c3:
                    43:f4:30:e6:0b:60:20:fe:4d:cc:f7:20:63:37:4b:
                    17:fd:8b:f0:51:64:05:51:e9:f0:c6:46:44:35:cd:
                    9f:24:58:1c:58:93:b7:a8:40:90:cb:f9:e6:2c:39:
                    5d:8a:78:13:64:63:ec:55:0f:bb:95:bb:78:fa:46:
                    72:ea:46:32:5b:53:e0:ef:e4:a6:5b:6b:67:54:d4:
                    52:3b:69:43:61:3b:a4:4c:64:7e:a0:31:ae:84:61:
                    21:84:bc:09:f6:ca:c9:da:c3:ac:62:cd:80:04:a0:
                    4b:d4:a6:54:49:ce:5f:f5:15:58:90:e9:12:2e:45:
                    97:69:f8:5d:33:c8:c5:05:e1:d7:c9:fc:09:54:49:
                    e0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B1:FA:D9:BE:9A:D6:7E:6E:13:95:AF:EA:F7:2F:73:68:0E:34:C6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3132362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:a7:69:a1:e2:d0:23:74:1d:95:b6:06:40:66:01:4a:51:f3:
         8d:ba:c9:da:01:a9:b6:02:29:62:b4:4c:d9:47:d6:61:d5:7c:
         75:74:97:ff:b5:95:5d:ec:c8:92:d2:73:50:e7:a8:57:6b:77:
         79:71:69:8d:7b:16:3f:43:b3:89:17:98:77:39:a5:27:9b:a0:
         ef:79:e1:b3:a6:ef:3f:15:d7:78:07:c0:7f:c7:57:58:82:bf:
         d5:89:b2:c6:1e:4a:a8:06:68:fc:d2:c8:b4:67:ed:3c:55:d6:
         92:1e:eb:99:7a:75:60:a8:b4:cb:63:55:a0:77:14:75:7f:e7:
         b9:84:ce:d2:dc:37:1e:07:f8:ea:ee:59:f9:81:c9:9d:2e:99:
         6d:cd:d2:0a:e4:3b:08:a7:7e:96:48:f7:75:15:54:5f:0e:c3:
         c6:13:e5:53:ea:00:9a:71:f5:e1:e0:ad:64:ad:21:b4:c4:0c:
         ef:7e:24:37:26:97:03:8b:cd:97:86:24:7a:91:d3:24:ae:14:
         e5:d2:fc:c5:35:87:05:f3:d6:6c:0e:36:2c:a4:5e:7a:b5:f8:
         f5:47:ad:69:5e:51:71:54:52:1a:a2:5a:34:63:ff:e6:f0:af:
         17:11:b8:2d:ae:df:32:9b:b3:f5:e4:28:90:c2:8f:85:3c:a5:
         eb:1c:a6:e1
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUQQFo5bcAboADqpvkEXwKycQRHtYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTEwMjAwMzgxOVoX
DTIyMTEwMjAwNDMxOVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDQTI0NDgyQzM4MkJGODA2NTJDQzZGNkYzMDE1RUQ1ODQ4MDM0MEYzM0JE
N0VFQzg3MDM5NjY1NUJGQ0ZDN0M0M0M1ODFENzczQjA1QUQxRjkwNzczM0IwMDZE
QTA0OEJEMjk1RkYwQzU3MjlCMEI2RDkzQzM1MjRCNTA5Q0MwMDAwRTNGNkQ4NDE4
MEQwRkFFM0MxNURFOUIwRkU2QzZDNTgxMkUwNzlDMDMyOEJBRUUwMzhDMkM2N0JD
MDIxN0U2OTExQTUwNzg4RjQ0NzE5MUY0RjY1MDRBNEVEMjRGNDM1QUZBMkZBNjQ5
MkMzNDNGNDMwRTYwQjYwMjBGRTREQ0NGNzIwNjMzNzRCMTdGRDhCRjA1MTY0MDU1
MUU5RjBDNjQ2NDQzNUNEOUYyNDU4MUM1ODkzQjdBODQwOTBDQkY5RTYyQzM5NUQ4
QTc4MTM2NDYzRUM1NTBGQkI5NUJCNzhGQTQ2NzJFQTQ2MzI1QjUzRTBFRkU0QTY1
QjZCNjc1NEQ0NTIzQjY5NDM2MTNCQTQ0QzY0N0VBMDMxQUU4NDYxMjE4NEJDMDlG
NkNBQzlEQUMzQUM2MkNEODAwNEEwNEJENEE2NTQ0OUNFNUZGNTE1NTg5MEU5MTIy
RTQ1OTc2OUY4NUQzM0M4QzUwNUUxRDdDOUZDMDk1NDQ5RTBDQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJEgsOCv4BlLMb28wFe1Y
SANA8zvX7shwOWZVv8/HxDxYHXc7Ba0fkHczsAbaBIvSlf8MVymwttk8NSS1CcwA
AOP22EGA0PrjwV3psP5sbFgS4HnAMouu4DjCxnvAIX5pEaUHiPRHGR9PZQSk7ST0
Na+i+mSSw0P0MOYLYCD+Tcz3IGM3Sxf9i/BRZAVR6fDGRkQ1zZ8kWBxYk7eoQJDL
+eYsOV2KeBNkY+xVD7uVu3j6RnLqRjJbU+Dv5KZba2dU1FI7aUNhO6RMZH6gMa6E
YSGEvAn2ysnaw6xizYAEoEvUplRJzl/1FViQ6RIuRZdp+F0zyMUF4dfJ/AlUSeDL
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQU87H62b6a1n5uE5Wv6vcvc2gONMYwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM1MmUzMTMyMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6V+MA0GCSqG
SIb3DQEBCwUAA4IBAQAIp2mh4tAjdB2VtgZAZgFKUfONusnaAam2AilitEzZR9Zh
1Xx1dJf/tZVd7MiS0nNQ56hXa3d5cWmNexY/Q7OJF5h3OaUnm6DveeGzpu8/Fdd4
B8B/x1dYgr/VibLGHkqoBmj80si0Z+08VdaSHuuZenVgqLTLY1WgdxR1f+e5hM7S
3DceB/jq7ln5gcmdLpltzdIK5DsIp36WSPd1FVRfDsPGE+VT6gCacfXh4K1krSG0
xAzvfiQ3JpcDi82XhiR6kdMkrhTl0vzFNYcF89ZsDjYspF56tfj1R61pXlFxVFIa
olo0Y//m8K8XEbgtrt8ym7P15CiQwo+FPKXrHKbh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org