Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3232322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          hVH23HjeJx0qaRTk86KPDsXcC/OJrZYKwyoxTzGqMJU=
Subject key identifier:   8A:D8:3B:7A:14:72:54:74:2F:E0:48:A6:01:DB:40:4C:79:22:2D:C3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2AD9940A0E789BE8E72B34B70888AD56EC4C8629
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232322e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:16 +0000
ROA not before:           Tue 02 Nov 2021 00:38:16 +0000
ROA not after:            Wed 02 Nov 2022 00:43:16 +0000
asID:                     17995
IP address blocks:        103.165.222.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d9:94:0a:0e:78:9b:e8:e7:2b:34:b7:08:88:ad:56:ec:4c:86:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:16 2021 GMT
            Not After : Nov  2 00:43:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:07:17:f9:db:a0:43:74:9f:8d:2c:38:2f:
                    1d:25:13:6a:e1:da:de:12:5d:32:04:d4:e3:ad:4c:
                    ef:5b:de:ef:7d:4c:83:d4:06:87:b3:4d:7e:9d:04:
                    76:9a:f5:ed:79:a7:d3:fd:03:39:d6:0d:31:69:91:
                    c9:28:bc:ac:8a:70:57:38:2a:62:23:be:a0:6a:a0:
                    40:d5:a7:07:65:8c:0d:f9:db:8d:95:70:0a:15:b0:
                    0c:af:3d:73:de:9b:1e:20:0a:e0:1d:d4:1c:81:b6:
                    02:99:a3:ca:91:38:36:3a:09:bf:74:55:23:b3:5e:
                    f9:bc:3e:31:62:67:fe:fe:bd:9b:ca:a1:ad:02:93:
                    1a:b3:7e:e7:fe:7e:a3:8c:db:2e:4a:1d:a4:1a:bb:
                    01:88:46:8a:e3:5c:4e:df:36:ef:5f:77:1b:5c:e3:
                    e4:42:9c:c9:f3:40:ae:9b:21:8d:7f:ff:25:7e:dd:
                    64:a4:bc:f3:9b:22:ce:ad:f9:af:78:0b:64:c9:77:
                    db:0f:ad:24:bb:5e:7f:82:ee:ae:3e:19:e5:10:f0:
                    03:10:11:2c:23:71:a8:db:bb:32:a7:80:9f:49:c3:
                    be:b6:d2:51:be:14:a1:5b:de:3a:7f:47:62:b1:60:
                    5c:d7:62:98:3a:d1:78:ad:20:8c:65:b5:1b:e3:96:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D8:3B:7A:14:72:54:74:2F:E0:48:A6:01:DB:40:4C:79:22:2D:C3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:31:1d:11:5d:50:7c:c1:f9:0f:96:d1:5d:89:bb:54:aa:1b:
         2b:1a:8f:96:89:1f:fc:c2:0b:5e:ef:4e:3d:c0:89:97:57:72:
         98:f5:8f:94:5e:2e:59:bd:79:c6:23:42:8e:04:2f:72:12:e0:
         c0:a5:a7:70:16:bf:f5:4a:6c:2a:7d:94:71:d7:7a:45:ff:f9:
         8a:38:d6:5f:3d:a0:c6:15:6a:b2:01:2f:55:d5:b6:0c:d2:1f:
         e0:2b:ab:50:4a:7b:5b:52:30:2e:07:09:7a:23:08:44:98:59:
         3f:87:8c:cb:bf:75:e7:36:0b:d6:2c:4f:50:d1:d8:cb:8f:76:
         cb:bb:06:92:17:27:2a:8d:62:43:bc:ee:7b:50:8b:11:ef:4a:
         00:46:4b:1a:c7:c8:81:4b:8b:75:75:5c:27:62:ff:14:f9:5d:
         3f:1f:7c:8d:8d:9c:be:1a:f5:b9:b8:3a:e1:95:7e:fe:ac:74:
         23:f1:bc:28:6f:39:03:8a:b6:52:ec:ab:f9:97:82:41:8f:89:
         48:3d:a7:09:f5:fc:71:bb:73:b6:35:fe:5a:91:90:b4:a3:a4:
         f5:27:53:be:41:e2:a4:23:7a:cb:85:49:93:42:11:62:4e:a7:
         e1:a3:52:dc:3e:5c:41:a3:3c:84:b6:93:db:0c:83:84:da:d9:
         ab:bd:73:25
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUKtmUCg54m+jnKzS3CIitVuxMhikwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTEwMjAwMzgxNloX
DTIyMTEwMjAwNDMxNlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCQzIzMDcxN0Y5REJBMDQzNzQ5RjhEMkMzODJGMUQyNTEzNkFFMURBREUx
MjVEMzIwNEQ0RTNBRDRDRUY1QkRFRUY3RDRDODNENDA2ODdCMzREN0U5RDA0NzY5
QUY1RUQ3OUE3RDNGRDAzMzlENjBEMzE2OTkxQzkyOEJDQUM4QTcwNTczODJBNjIy
M0JFQTA2QUEwNDBENUE3MDc2NThDMERGOURCOEQ5NTcwMEExNUIwMENBRjNENzNE
RTlCMUUyMDBBRTAxREQ0MUM4MUI2MDI5OUEzQ0E5MTM4MzYzQTA5QkY3NDU1MjNC
MzVFRjlCQzNFMzE2MjY3RkVGRUJEOUJDQUExQUQwMjkzMUFCMzdFRTdGRTdFQTM4
Q0RCMkU0QTFEQTQxQUJCMDE4ODQ2OEFFMzVDNEVERjM2RUY1Rjc3MUI1Q0UzRTQ0
MjlDQzlGMzQwQUU5QjIxOEQ3RkZGMjU3RURENjRBNEJDRjM5QjIyQ0VBREY5QUY3
ODBCNjRDOTc3REIwRkFEMjRCQjVFN0Y4MkVFQUUzRTE5RTUxMEYwMDMxMDExMkMy
MzcxQThEQkJCMzJBNzgwOUY0OUMzQkVCNkQyNTFCRTE0QTE1QkRFM0E3RjQ3NjJC
MTYwNUNENzYyOTgzQUQxNzhBRDIwOEM2NUI1MUJFMzk2NEY5RjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IwcX+dugQ3SfjSw4Lx0l
E2rh2t4SXTIE1OOtTO9b3u99TIPUBoezTX6dBHaa9e15p9P9AznWDTFpkckovKyK
cFc4KmIjvqBqoEDVpwdljA35242VcAoVsAyvPXPemx4gCuAd1ByBtgKZo8qRODY6
Cb90VSOzXvm8PjFiZ/7+vZvKoa0Ckxqzfuf+fqOM2y5KHaQauwGIRorjXE7fNu9f
dxtc4+RCnMnzQK6bIY1//yV+3WSkvPObIs6t+a94C2TJd9sPrSS7Xn+C7q4+GeUQ
8AMQESwjcajbuzKngJ9Jw7620lG+FKFb3jp/R2KxYFzXYpg60XitIIxltRvjlk+f
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUitg7ehRyVHQv4EimAdtATHkiLcMwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM1MmUzMjMyMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6XeMA0GCSqG
SIb3DQEBCwUAA4IBAQCHMR0RXVB8wfkPltFdibtUqhsrGo+WiR/8wgte7049wImX
V3KY9Y+UXi5ZvXnGI0KOBC9yEuDApadwFr/1SmwqfZRx13pF//mKONZfPaDGFWqy
AS9V1bYM0h/gK6tQSntbUjAuBwl6IwhEmFk/h4zLv3XnNgvWLE9Q0djLj3bLuwaS
FycqjWJDvO57UIsR70oARksax8iBS4t1dVwnYv8U+V0/H3yNjZy+GvW5uDrhlX7+
rHQj8bwobzkDirZS7Kv5l4JBj4lIPacJ9fxxu3O2Nf5akZC0o6T1J1O+QeKkI3rL
hUmTQhFiTqfho1LcPlxBozyEtpPbDIOE2tmrvXMl
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org