Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e362e302f32332d3234203d3e20313431313037.roa
File:                     3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (raw, json)
Hash identifier:          vseUD+8tWAmct8g5g7EMTzr6PYUfPulbzASOgM8FIeA=
Subject key identifier:   AD:F3:7E:53:F2:15:ED:49:EA:05:61:42:B3:C4:75:BB:CB:D3:64:C0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       45CE07CC74ABEA164353563B3468590EB09BD987
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e362e302f32332d3234203d3e20313431313037.roa
Signing time:             Tue 07 Sep 2021 04:49:56 +0000
ROA not before:           Tue 07 Sep 2021 04:44:56 +0000
ROA not after:            Wed 07 Sep 2022 04:49:56 +0000
asID:                     141107
IP address blocks:        103.169.6.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ce:07:cc:74:ab:ea:16:43:53:56:3b:34:68:59:0e:b0:9b:d9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  7 04:44:56 2021 GMT
            Not After : Sep  7 04:49:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3a:a7:ac:f8:ed:f3:70:12:74:96:17:21:5e:
                    8e:64:bf:22:9f:f7:3c:f8:c4:ee:f4:7f:46:4f:07:
                    7e:1e:51:81:ce:7d:09:65:de:e2:89:44:54:b2:b4:
                    66:e2:b4:8a:3d:5c:01:90:d2:b4:5b:72:74:aa:2e:
                    6d:90:38:e9:5b:4b:61:67:03:33:32:6e:03:a9:1f:
                    d6:d6:1d:61:57:8c:e9:b7:c4:97:58:d7:c4:68:cb:
                    6d:71:b1:de:ab:a2:b7:17:96:36:5c:fc:fb:c2:ac:
                    c1:11:9f:f7:99:a2:ec:44:42:4e:52:52:4e:10:99:
                    de:11:cd:04:ea:1d:3a:47:67:59:d7:a9:5f:fc:6c:
                    52:db:a2:81:71:c6:b5:60:51:8c:c1:10:c8:e1:a8:
                    2f:cd:41:bf:03:5b:53:a0:99:70:03:4f:33:45:3b:
                    43:6b:9e:78:3e:1c:21:93:b1:6d:66:0b:a9:44:3b:
                    d3:34:b2:05:65:6b:cd:a9:e9:5a:bf:3c:fd:38:af:
                    80:a4:d4:84:03:1b:83:5d:2d:34:57:0d:22:0d:0e:
                    94:26:0d:f1:11:45:57:f9:e9:de:17:d4:ca:96:6e:
                    5f:4e:26:e3:41:a9:d4:1d:8c:9e:ae:4a:7a:11:d6:
                    80:db:82:c9:e3:b8:5c:e4:40:1f:dd:68:19:c7:a1:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F3:7E:53:F2:15:ED:49:EA:05:61:42:B3:C4:75:BB:CB:D3:64:C0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e362e302f32332d3234203d3e20313431313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:fb:6e:b8:46:d1:91:97:88:23:65:8e:cc:76:bf:40:da:83:
         c7:89:7b:09:b9:e4:b5:c0:da:ac:96:e2:09:4e:a6:fd:38:df:
         ca:e8:b5:5c:53:dc:a4:17:eb:87:10:5c:69:2f:56:cd:09:b0:
         80:fb:31:af:04:ef:8b:78:f0:d9:6f:8f:47:8c:28:fd:a0:a6:
         6b:ac:da:22:23:fa:e1:79:54:37:f6:c6:22:45:14:e8:bd:18:
         3d:80:31:9d:96:dd:29:ba:95:26:0f:38:51:11:0e:31:a5:14:
         cd:a0:39:9b:dc:67:c5:03:dc:bb:62:9d:4b:56:cf:79:f1:f5:
         35:93:db:2e:fe:bd:d1:ad:20:a4:07:56:8a:ad:eb:53:46:fb:
         41:ae:71:23:ad:15:4f:3a:e8:c0:d7:ad:12:be:a6:3e:9a:4b:
         67:b1:5f:d2:8e:df:4d:a5:3a:4e:f9:49:3a:61:4a:55:78:3b:
         91:ad:0e:20:37:d4:fe:db:63:5e:fc:dd:c5:06:33:59:06:2c:
         74:7e:cd:83:48:c1:da:41:a3:ce:c1:22:2c:db:af:c5:59:03:
         d8:25:1a:97:35:5f:71:36:fd:ea:7c:f0:b6:4d:a9:20:87:b5:
         4c:7d:19:7d:77:f1:0d:c1:c8:7d:43:19:15:76:d5:8c:a6:bd:
         ba:5f:06:ae
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIURc4HzHSr6hZDU1Y7NGhZDrCb2YcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkwNzA0NDQ1NloX
DTIyMDkwNzA0NDk1NlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFNDNBQTdBQ0Y4RURGMzcwMTI3NDk2MTcyMTVFOEU2NEJGMjI5RkY3M0NG
OEM0RUVGNDdGNDY0RjA3N0UxRTUxODFDRTdEMDk2NURFRTI4OTQ0NTRCMkI0NjZF
MkI0OEEzRDVDMDE5MEQyQjQ1QjcyNzRBQTJFNkQ5MDM4RTk1QjRCNjE2NzAzMzMz
MjZFMDNBOTFGRDZENjFENjE1NzhDRTlCN0M0OTc1OEQ3QzQ2OENCNkQ3MUIxREVB
QkEyQjcxNzk2MzY1Q0ZDRkJDMkFDQzExMTlGRjc5OUEyRUM0NDQyNEU1MjUyNEUx
MDk5REUxMUNEMDRFQTFEM0E0NzY3NTlEN0E5NUZGQzZDNTJEQkEyODE3MUM2QjU2
MDUxOENDMTEwQzhFMUE4MkZDRDQxQkYwMzVCNTNBMDk5NzAwMzRGMzM0NTNCNDM2
QjlFNzgzRTFDMjE5M0IxNkQ2NjBCQTk0NDNCRDMzNEIyMDU2NTZCQ0RBOUU5NUFC
RjNDRkQzOEFGODBBNEQ0ODQwMzFCODM1RDJEMzQ1NzBEMjIwRDBFOTQyNjBERjEx
MTQ1NTdGOUU5REUxN0Q0Q0E5NjZFNUY0RTI2RTM0MUE5RDQxRDhDOUVBRTRBN0Ex
MUQ2ODBEQjgyQzlFM0I4NUNFNDQwMUZERDY4MTlDN0ExNkM3OTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkOqes+O3zcBJ0lhchXo5k
vyKf9zz4xO70f0ZPB34eUYHOfQll3uKJRFSytGbitIo9XAGQ0rRbcnSqLm2QOOlb
S2FnAzMybgOpH9bWHWFXjOm3xJdY18Roy21xsd6rorcXljZc/PvCrMERn/eZouxE
Qk5SUk4Qmd4RzQTqHTpHZ1nXqV/8bFLbooFxxrVgUYzBEMjhqC/NQb8DW1OgmXAD
TzNFO0Nrnng+HCGTsW1mC6lEO9M0sgVla82p6Vq/PP04r4Ck1IQDG4NdLTRXDSIN
DpQmDfERRVf56d4X1MqWbl9OJuNBqdQdjJ6uSnoR1oDbgsnjuFzkQB/daBnHoWx5
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUrfN+U/IV7UnqBWFCs8R1u8vTZMAwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM5MmUzNjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzQzMTMxMzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWepBjANBgkqhkiG
9w0BAQsFAAOCAQEACvtuuEbRkZeII2WOzHa/QNqDx4l7CbnktcDarJbiCU6m/Tjf
yui1XFPcpBfrhxBcaS9WzQmwgPsxrwTvi3jw2W+PR4wo/aCma6zaIiP64XlUN/bG
IkUU6L0YPYAxnZbdKbqVJg84UREOMaUUzaA5m9xnxQPcu2KdS1bPefH1NZPbLv69
0a0gpAdWiq3rU0b7Qa5xI60VTzrowNetEr6mPppLZ7Ff0o7fTaU6TvlJOmFKVXg7
ka0OIDfU/ttjXvzdxQYzWQYsdH7Ng0jB2kGjzsEiLNuvxVkD2CUalzVfcTb96nzw
tk2pIIe1TH0ZfXfxDcHIfUMZFXbVjKa9ul8Grg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-ams.rpki-client.org