Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e35382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e35382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          ySBBpDIBMQ7XOKtD4K/gB+qmOAM9xrACAZnwqsSn4cQ=
Subject key identifier:   B2:90:91:F4:81:68:47:9D:60:F8:D7:80:E8:9F:C0:A7:21:86:AF:DC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       083CB648D44E6C14DC72CDB1BF3EA9FB573BDAC3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e35382e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:18 +0000
ROA not before:           Tue 02 Nov 2021 00:38:18 +0000
ROA not after:            Wed 02 Nov 2022 00:43:18 +0000
asID:                     17995
IP address blocks:        103.165.58.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3c:b6:48:d4:4e:6c:14:dc:72:cd:b1:bf:3e:a9:fb:57:3b:da:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:18 2021 GMT
            Not After : Nov  2 00:43:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:9f:69:f3:69:24:7a:69:55:b2:36:78:0a:
                    34:4b:63:da:8f:82:f4:55:67:d1:16:17:ce:c3:96:
                    04:ac:57:c5:5e:f5:39:a8:a9:97:f4:8b:30:90:8d:
                    69:a3:b2:a7:b1:3f:b4:a6:33:b1:ab:dc:9a:98:13:
                    9e:44:d2:83:6f:2d:06:d5:5b:7b:df:3f:14:bb:ed:
                    b6:1a:8e:40:62:4a:ce:e4:b9:c9:5c:c1:d6:c7:84:
                    8d:8b:86:bf:47:ac:90:58:a0:63:76:39:95:ef:6c:
                    af:2d:b8:5d:e4:93:58:d9:25:f3:aa:0c:ed:84:e3:
                    1d:df:8d:81:4b:8d:ff:2d:52:57:91:38:72:17:a2:
                    fa:c3:f7:d1:18:97:1c:fb:9b:a0:9d:c7:fe:fb:dd:
                    a4:5f:65:a8:b2:ba:ea:7a:c8:4b:57:61:00:26:09:
                    fd:ca:b8:4d:e3:3e:89:9d:fa:a8:76:0a:8f:d0:f1:
                    bf:e2:6c:bf:73:98:85:2a:29:0f:a2:b5:31:8d:50:
                    bf:7d:2c:9f:2d:58:41:3e:ce:a9:96:15:30:de:18:
                    74:8d:5c:e4:d2:83:9e:9a:ff:4a:d6:e8:f9:e5:14:
                    c6:d3:23:c7:0b:4f:e5:f6:19:79:9c:50:74:92:1a:
                    58:22:0e:28:48:1b:01:46:b6:62:10:65:28:ed:f9:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:90:91:F4:81:68:47:9D:60:F8:D7:80:E8:9F:C0:A7:21:86:AF:DC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e35382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:66:28:de:ae:eb:31:67:01:ea:d1:60:8c:ba:57:fc:49:
         fa:6b:60:d4:3f:4e:0f:f4:3a:29:3e:20:32:2a:86:5e:9b:25:
         81:85:5e:a6:a8:5a:62:fe:9f:e7:73:da:1d:db:04:ea:cd:28:
         d6:6e:05:be:bf:b1:40:7d:cc:39:d0:6a:4f:5f:b9:2b:da:e9:
         84:c1:bb:e4:59:35:7e:26:59:d6:57:24:79:c8:1b:52:a6:e3:
         40:b9:fe:ce:58:23:4e:8d:cf:a4:69:e3:68:ca:ea:36:34:a6:
         23:ef:9f:2d:a4:b5:9b:6a:64:84:71:8a:08:df:f1:cb:a0:5d:
         b3:5c:a6:e5:3b:78:08:e6:18:50:50:d9:bb:14:2e:2c:b5:e9:
         96:61:61:d7:32:c4:73:82:dc:7a:b7:d9:8d:de:ea:cf:97:b0:
         96:ce:87:ed:3f:94:ae:90:73:fe:22:5a:08:94:f1:d4:25:26:
         ed:11:3f:80:7e:d3:0f:53:02:ee:4d:35:ea:1c:cd:5c:d4:e1:
         72:a7:68:a6:83:28:bc:1b:b6:26:ac:fd:1a:c5:d1:f6:b8:d5:
         cd:41:9c:97:94:c5:25:47:3f:da:55:76:cf:01:6f:11:df:28:
         b4:39:36:a3:2d:da:7a:1f:e4:58:9e:b6:a7:25:9c:1f:fc:a3:
         7c:92:0b:43
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUCDy2SNRObBTccs2xvz6p+1c72sMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTEwMjAwMzgxOFoX
DTIyMTEwMjAwNDMxOFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEQUNBOUY2OUYzNjkyNDdBNjk1NUIyMzY3ODBBMzQ0QjYzREE4RjgyRjQ1
NTY3RDExNjE3Q0VDMzk2MDRBQzU3QzU1RUY1MzlBOEE5OTdGNDhCMzA5MDhENjlB
M0IyQTdCMTNGQjRBNjMzQjFBQkRDOUE5ODEzOUU0NEQyODM2RjJEMDZENTVCN0JE
RjNGMTRCQkVEQjYxQThFNDA2MjRBQ0VFNEI5Qzk1Q0MxRDZDNzg0OEQ4Qjg2QkY0
N0FDOTA1OEEwNjM3NjM5OTVFRjZDQUYyREI4NURFNDkzNThEOTI1RjNBQTBDRUQ4
NEUzMURERjhEODE0QjhERkYyRDUyNTc5MTM4NzIxN0EyRkFDM0Y3RDExODk3MUNG
QjlCQTA5REM3RkVGQkREQTQ1RjY1QThCMkJBRUE3QUM4NEI1NzYxMDAyNjA5RkRD
QUI4NERFMzNFODk5REZBQTg3NjBBOEZEMEYxQkZFMjZDQkY3Mzk4ODUyQTI5MEZB
MkI1MzE4RDUwQkY3RDJDOUYyRDU4NDEzRUNFQTk5NjE1MzBERTE4NzQ4RDVDRTRE
MjgzOUU5QUZGNEFENkU4RjlFNTE0QzZEMzIzQzcwQjRGRTVGNjE5Nzk5QzUwNzQ5
MjFBNTgyMjBFMjg0ODFCMDE0NkI2NjIxMDY1MjhFREY5QTA3RDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDayp9p82kkemlVsjZ4CjRL
Y9qPgvRVZ9EWF87DlgSsV8Ve9TmoqZf0izCQjWmjsqexP7SmM7Gr3JqYE55E0oNv
LQbVW3vfPxS77bYajkBiSs7kuclcwdbHhI2Lhr9HrJBYoGN2OZXvbK8tuF3kk1jZ
JfOqDO2E4x3fjYFLjf8tUleROHIXovrD99EYlxz7m6Cdx/773aRfZaiyuup6yEtX
YQAmCf3KuE3jPomd+qh2Co/Q8b/ibL9zmIUqKQ+itTGNUL99LJ8tWEE+zqmWFTDe
GHSNXOTSg56a/0rW6PnlFMbTI8cLT+X2GXmcUHSSGlgiDihIGwFGtmIQZSjt+aB9
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUspCR9IFoR51g+NeA6J/ApyGGr9wwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM1MmUzNTM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWelOjANBgkqhkiG
9w0BAQsFAAOCAQEAkjpmKN6u6zFnAerRYIy6V/xJ+mtg1D9OD/Q6KT4gMiqGXpsl
gYVepqhaYv6f53PaHdsE6s0o1m4Fvr+xQH3MOdBqT1+5K9rphMG75Fk1fiZZ1lck
ecgbUqbjQLn+zlgjTo3PpGnjaMrqNjSmI++fLaS1m2pkhHGKCN/xy6Bds1ym5Tt4
COYYUFDZuxQuLLXplmFh1zLEc4LcerfZjd7qz5ewls6H7T+UrpBz/iJaCJTx1CUm
7RE/gH7TD1MC7k016hzNXNThcqdopoMovBu2Jqz9GsXR9rjVzUGcl5TFJUc/2lV2
zwFvEd8otDk2oy3aeh/kWJ62pyWcH/yjfJILQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org