Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3135302e302f32332d3234203d3e20313432333131.roa
File:                     3130332e3136382e3135302e302f32332d3234203d3e20313432333131.roa (raw, json)
Hash identifier:          diAhaRr/8lryJwAQiw20T5t4Dr8FAoa8YZHThJjS3js=
Subject key identifier:   68:32:3A:02:7E:CC:F5:55:3F:E4:AC:DA:F4:35:66:9A:43:C5:B9:92
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       04C9AD4886CCF03831967D23526E8C18FC6ECE95
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3135302e302f32332d3234203d3e20313432333131.roa
Signing time:             Tue 10 Aug 2021 06:27:25 +0000
ROA not before:           Tue 10 Aug 2021 06:22:25 +0000
ROA not after:            Wed 10 Aug 2022 06:27:25 +0000
asID:                     142311
IP address blocks:        103.168.150.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c9:ad:48:86:cc:f0:38:31:96:7d:23:52:6e:8c:18:fc:6e:ce:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 10 06:22:25 2021 GMT
            Not After : Aug 10 06:27:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:a8:6f:cc:4b:21:df:17:da:28:52:d2:05:
                    4f:0c:88:3d:d6:84:e6:fe:22:01:37:10:f0:93:cb:
                    d1:1c:f5:98:9c:c3:e8:77:72:30:05:62:fb:bd:8d:
                    8e:e3:9d:d6:b2:9b:7d:c5:82:87:88:c5:ed:24:4a:
                    fb:00:6f:f5:4e:79:98:5d:a7:fd:a9:a8:61:e3:03:
                    8a:c1:f1:42:35:6b:98:72:f0:b4:00:eb:d1:98:04:
                    50:17:d8:53:f3:5b:77:c4:91:63:00:c6:8a:c8:b7:
                    b7:66:b0:c5:d7:cd:1a:27:1c:52:d2:75:9f:8a:db:
                    06:77:12:c2:5b:3b:0b:5e:a3:3b:7a:47:00:47:bb:
                    a7:27:0b:52:f1:22:a9:60:53:c0:81:0e:6a:aa:7c:
                    4a:08:df:de:38:0f:16:ac:d2:ec:36:9f:63:04:ba:
                    03:50:c4:4a:b7:b3:ee:23:6a:10:af:71:8e:5f:08:
                    d6:c1:cf:dd:a7:51:a9:7c:0f:d3:b5:53:c0:72:80:
                    b1:de:c5:5d:a7:9f:44:6d:56:f6:ed:4d:be:34:74:
                    76:f0:40:2a:67:ca:bb:17:1f:72:11:25:ce:4c:de:
                    4c:43:10:f7:c4:8e:0f:48:4a:c2:53:a1:c5:66:04:
                    ff:3b:d3:40:d5:18:fb:46:7d:8e:e6:93:34:f4:52:
                    29:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:32:3A:02:7E:CC:F5:55:3F:E4:AC:DA:F4:35:66:9A:43:C5:B9:92
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3135302e302f32332d3234203d3e20313432333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:7f:a2:56:8e:99:00:8b:0b:33:8f:09:e2:1d:5d:f6:dd:fd:
         5a:61:95:c7:71:47:98:fb:36:2d:a4:a9:db:4b:97:ab:35:28:
         2d:e6:02:71:7f:07:b8:45:6e:1f:32:54:e8:ed:f8:f2:01:57:
         b9:85:72:9f:84:13:34:d0:2e:43:d3:8a:a3:38:a2:05:a9:db:
         c0:57:87:fa:10:64:fc:94:cf:42:56:d4:d6:4f:74:99:1f:ba:
         a5:05:19:9e:1a:2d:5a:51:2b:d6:9f:ed:fa:cb:32:8a:c5:c7:
         cd:26:28:b6:7c:9c:b1:73:c5:28:b1:b1:41:51:b9:51:6e:51:
         00:6f:89:f8:dc:b3:24:4e:66:76:ce:97:2c:0d:dc:a9:17:54:
         1d:74:06:55:9e:7f:22:61:30:fa:6d:9e:74:8b:4c:5d:1d:d3:
         47:9f:1b:0e:38:be:0c:da:44:f2:a1:38:ce:e3:9c:42:23:d9:
         2f:50:91:47:b3:81:0f:c3:2c:78:1d:b4:32:a4:d9:8e:78:5c:
         18:52:78:bb:f7:92:97:28:a3:9d:78:16:93:91:dd:2d:fe:a2:
         e7:e1:75:1d:01:27:57:45:42:26:d5:0d:7e:60:d5:73:10:1f:
         06:6c:26:51:0d:7b:3f:2f:80:09:b6:bd:d0:3d:14:7a:4b:d2:
         a8:1c:86:fa
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUBMmtSIbM8Dgxln0jUm6MGPxuzpUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDgxMDA2MjIyNVoX
DTIyMDgxMDA2MjcyNVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBNjQ3QTg2RkNDNEIyMURGMTdEQTI4NTJEMjA1NEYwQzg4M0RENjg0RTZG
RTIyMDEzNzEwRjA5M0NCRDExQ0Y1OTg5Q0MzRTg3NzcyMzAwNTYyRkJCRDhEOEVF
MzlERDZCMjlCN0RDNTgyODc4OEM1RUQyNDRBRkIwMDZGRjU0RTc5OTg1REE3RkRB
OUE4NjFFMzAzOEFDMUYxNDIzNTZCOTg3MkYwQjQwMEVCRDE5ODA0NTAxN0Q4NTNG
MzVCNzdDNDkxNjMwMEM2OEFDOEI3Qjc2NkIwQzVEN0NEMUEyNzFDNTJEMjc1OUY4
QURCMDY3NzEyQzI1QjNCMEI1RUEzM0I3QTQ3MDA0N0JCQTcyNzBCNTJGMTIyQTk2
MDUzQzA4MTBFNkFBQTdDNEEwOERGREUzODBGMTZBQ0QyRUMzNjlGNjMwNEJBMDM1
MEM0NEFCN0IzRUUyMzZBMTBBRjcxOEU1RjA4RDZDMUNGRERBNzUxQTk3QzBGRDNC
NTUzQzA3MjgwQjFERUM1NURBNzlGNDQ2RDU2RjZFRDREQkUzNDc0NzZGMDQwMkE2
N0NBQkIxNzFGNzIxMTI1Q0U0Q0RFNEM0MzEwRjdDNDhFMEY0ODRBQzI1M0ExQzU2
NjA0RkYzQkQzNDBENTE4RkI0NjdEOEVFNjkzMzRGNDUyMjkzQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmR6hvzEsh3xfaKFLSBU8M
iD3WhOb+IgE3EPCTy9Ec9Zicw+h3cjAFYvu9jY7jndaym33FgoeIxe0kSvsAb/VO
eZhdp/2pqGHjA4rB8UI1a5hy8LQA69GYBFAX2FPzW3fEkWMAxorIt7dmsMXXzRon
HFLSdZ+K2wZ3EsJbOwteozt6RwBHu6cnC1LxIqlgU8CBDmqqfEoI3944Dxas0uw2
n2MEugNQxEq3s+4jahCvcY5fCNbBz92nUal8D9O1U8BygLHexV2nn0RtVvbtTb40
dHbwQCpnyrsXH3IRJc5M3kxDEPfEjg9ISsJTocVmBP8700DVGPtGfY7mkzT0Uik7
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUaDI6An7M9VU/5Kza9DVmmkPFuZIwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM4MmUzMTM1MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqJYwDQYJ
KoZIhvcNAQELBQADggEBAI1/olaOmQCLCzOPCeIdXfbd/VphlcdxR5j7Ni2kqdtL
l6s1KC3mAnF/B7hFbh8yVOjt+PIBV7mFcp+EEzTQLkPTiqM4ogWp28BXh/oQZPyU
z0JW1NZPdJkfuqUFGZ4aLVpRK9af7frLMorFx80mKLZ8nLFzxSixsUFRuVFuUQBv
ifjcsyROZnbOlywN3KkXVB10BlWefyJhMPptnnSLTF0d00efGw44vgzaRPKhOM7j
nEIj2S9QkUezgQ/DLHgdtDKk2Y54XBhSeLv3kpcoo514FpOR3S3+oufhdR0BJ1dF
QibVDX5g1XMQHwZsJlENez8vgAm2vdA9FHpL0qgchvo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-ams.rpki-client.org