Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3232302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          kESWUQ5r0uWgpB5InuWU8uoZevYIloWPtD5jN21rPvA=
Subject key identifier:   CE:D0:69:F6:CF:DF:0D:8C:5C:30:DD:3E:37:C9:D2:C3:C0:2C:3B:FD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7423058B6DF69F6D33A1B2CB3ECBBB9572D01B29
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232302e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:18 +0000
ROA not before:           Tue 02 Nov 2021 00:38:18 +0000
ROA not after:            Wed 02 Nov 2022 00:43:18 +0000
asID:                     17995
IP address blocks:        103.165.220.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:23:05:8b:6d:f6:9f:6d:33:a1:b2:cb:3e:cb:bb:95:72:d0:1b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:18 2021 GMT
            Not After : Nov  2 00:43:18 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:f6:93:b4:08:49:78:a7:0c:26:b7:66:0d:
                    29:57:43:b4:a1:b6:7f:7c:21:96:f6:92:20:8b:e8:
                    f0:6b:ae:20:20:f4:a3:53:ce:08:a6:77:0e:a2:47:
                    32:97:e7:6e:1f:20:d0:bd:64:94:2e:f4:07:bb:e7:
                    c0:50:f2:57:86:ab:9a:f7:c0:0d:07:4a:15:25:da:
                    12:2f:0b:1f:93:9a:cb:8f:3c:92:c3:88:6e:a7:10:
                    f4:0d:e5:79:91:be:57:0b:90:d0:4b:6b:f3:4b:05:
                    9f:3d:a9:de:c4:f9:47:65:eb:2c:03:e7:bc:3e:1f:
                    12:67:41:d1:45:a2:19:78:13:86:37:64:b9:f0:71:
                    6e:01:31:bb:df:24:20:54:9f:48:c6:a7:d9:de:df:
                    eb:18:0b:57:0b:84:3c:a1:1f:5c:21:f0:62:68:b0:
                    28:40:2e:1e:e3:17:e7:a4:94:5e:8b:a1:32:ff:ab:
                    52:27:e6:31:86:2a:f9:a6:3e:8e:a4:1a:16:82:19:
                    b3:57:61:df:0b:00:46:f0:6e:de:ca:bb:db:58:26:
                    3f:5e:98:34:b4:5a:81:29:3c:a2:55:02:35:5a:97:
                    54:1f:5b:78:dd:33:24:7e:82:6b:6f:96:ca:17:5a:
                    be:71:87:bd:e9:0e:d4:40:11:69:e2:a9:e8:be:be:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D0:69:F6:CF:DF:0D:8C:5C:30:DD:3E:37:C9:D2:C3:C0:2C:3B:FD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:29:c5:4d:ea:e7:6a:1a:fa:5c:6d:0a:64:bc:d0:30:0f:ce:
         95:15:88:80:3e:e7:42:2a:29:37:9a:eb:27:b4:91:35:d2:5e:
         70:91:f7:53:09:c5:1f:58:4a:df:36:f0:18:79:41:47:f0:41:
         4a:e6:28:6b:55:9e:c8:96:86:7c:fa:08:b1:d8:08:0f:95:e7:
         d3:ae:f6:89:e4:6b:1f:e6:0e:e9:c2:08:13:15:fb:d8:f8:bb:
         9f:f5:2f:af:3c:92:e4:37:22:71:26:8d:ad:93:a1:85:67:87:
         2d:7d:7b:ce:49:cd:90:68:b4:07:15:a5:1c:46:ab:1b:f3:d3:
         bb:38:18:12:c7:7b:fb:45:d1:ad:6e:66:bc:8a:3c:a5:94:b3:
         56:02:2d:5f:56:db:c6:8c:b4:a3:0c:0e:4d:64:aa:72:99:8c:
         7e:87:dd:91:d9:5f:16:24:58:76:04:c5:3a:1b:4f:37:b6:df:
         00:e9:e7:a8:f3:60:45:da:f9:64:5d:98:14:c6:f2:3a:7d:01:
         39:fa:c6:cd:1c:63:98:ad:84:25:21:f7:de:e4:29:3b:e8:0d:
         4a:85:e1:5a:6a:61:97:a4:25:37:11:c9:47:80:61:72:85:54:
         08:98:38:02:36:b1:5c:66:dc:44:26:7b:ba:cc:58:a7:78:6e:
         a5:16:8f:5c
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUdCMFi232n20zobLLPsu7lXLQGykwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTEwMjAwMzgxOFoX
DTIyMTEwMjAwNDMxOFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCMzU3RjY5M0I0MDg0OTc4QTcwQzI2Qjc2NjBEMjk1NzQzQjRBMUI2N0Y3
QzIxOTZGNjkyMjA4QkU4RjA2QkFFMjAyMEY0QTM1M0NFMDhBNjc3MEVBMjQ3MzI5
N0U3NkUxRjIwRDBCRDY0OTQyRUY0MDdCQkU3QzA1MEYyNTc4NkFCOUFGN0MwMEQw
NzRBMTUyNURBMTIyRjBCMUY5MzlBQ0I4RjNDOTJDMzg4NkVBNzEwRjQwREU1Nzk5
MUJFNTcwQjkwRDA0QjZCRjM0QjA1OUYzREE5REVDNEY5NDc2NUVCMkMwM0U3QkMz
RTFGMTI2NzQxRDE0NUEyMTk3ODEzODYzNzY0QjlGMDcxNkUwMTMxQkJERjI0MjA1
NDlGNDhDNkE3RDlERURGRUIxODBCNTcwQjg0M0NBMTFGNUMyMUYwNjI2OEIwMjg0
MDJFMUVFMzE3RTdBNDk0NUU4QkExMzJGRkFCNTIyN0U2MzE4NjJBRjlBNjNFOEVB
NDFBMTY4MjE5QjM1NzYxREYwQjAwNDZGMDZFREVDQUJCREI1ODI2M0Y1RTk4MzRC
NDVBODEyOTNDQTI1NTAyMzU1QTk3NTQxRjVCNzhERDMzMjQ3RTgyNkI2Rjk2Q0Ex
NzVBQkU3MTg3QkRFOTBFRDQ0MDExNjlFMkE5RThCRUJFMzdGRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzV/aTtAhJeKcMJrdmDSlX
Q7Shtn98IZb2kiCL6PBrriAg9KNTzgimdw6iRzKX524fINC9ZJQu9Ae758BQ8leG
q5r3wA0HShUl2hIvCx+TmsuPPJLDiG6nEPQN5XmRvlcLkNBLa/NLBZ89qd7E+Udl
6ywD57w+HxJnQdFFohl4E4Y3ZLnwcW4BMbvfJCBUn0jGp9ne3+sYC1cLhDyhH1wh
8GJosChALh7jF+eklF6LoTL/q1In5jGGKvmmPo6kGhaCGbNXYd8LAEbwbt7Ku9tY
Jj9emDS0WoEpPKJVAjVal1QfW3jdMyR+gmtvlsoXWr5xh73pDtRAEWniqei+vjf9
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUztBp9s/fDYxcMN0+N8nSw8AsO/0wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM1MmUzMjMyMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6XcMA0GCSqG
SIb3DQEBCwUAA4IBAQCOKcVN6udqGvpcbQpkvNAwD86VFYiAPudCKik3musntJE1
0l5wkfdTCcUfWErfNvAYeUFH8EFK5ihrVZ7IloZ8+gix2AgPlefTrvaJ5Gsf5g7p
wggTFfvY+Luf9S+vPJLkNyJxJo2tk6GFZ4ctfXvOSc2QaLQHFaUcRqsb89O7OBgS
x3v7RdGtbma8ijyllLNWAi1fVtvGjLSjDA5NZKpymYx+h92R2V8WJFh2BMU6G083
tt8A6eeo82BF2vlkXZgUxvI6fQE5+sbNHGOYrYQlIffe5Ck76A1KheFaamGXpCU3
EclHgGFyhVQImDgCNrFcZtxEJnu6zFineG6lFo9c
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org