Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e3135332e302f32342d3234203d3e20313430343433.roa
File:                     3130332e3137382e3135332e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          8PoZBQDnP1/OdcUiDkLfcCI/qqjrRXAIeO0sBwGtWBA=
Subject key identifier:   C0:11:7E:F1:29:13:39:9E:F2:0F:99:AB:39:9C:07:FD:17:AC:1F:E7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2C4D8E2475A0541918E025DB1BBCAE785B190C94
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e3135332e302f32342d3234203d3e20313430343433.roa
Signing time:             Tue 04 Jan 2022 07:31:57 +0000
ROA not before:           Tue 04 Jan 2022 07:26:57 +0000
ROA not after:            Wed 04 Jan 2023 07:31:57 +0000
asID:                     140443
IP address blocks:        103.178.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4d:8e:24:75:a0:54:19:18:e0:25:db:1b:bc:ae:78:5b:19:0c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  4 07:26:57 2022 GMT
            Not After : Jan  4 07:31:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:47:c9:7b:84:58:47:0f:94:ff:65:a6:2b:11:
                    a3:2b:4a:e2:cf:82:46:03:af:a0:3e:c6:36:b3:6e:
                    9f:8c:a2:fa:1d:42:06:ce:d1:13:55:c5:c6:13:ac:
                    10:92:df:22:45:31:4c:a4:fa:e9:f3:1a:ea:78:77:
                    ec:23:55:da:23:a3:20:1c:af:b2:bc:bc:95:cf:19:
                    8c:8d:e8:14:d3:38:0e:20:98:a4:27:62:30:5f:c1:
                    63:bd:3b:58:ee:b7:e6:d4:51:fc:83:9b:67:d6:93:
                    2e:20:8a:a6:5b:51:e1:69:86:84:8f:ef:76:18:5b:
                    17:d7:24:49:fd:a8:f9:78:6e:b5:a7:ec:cd:37:45:
                    c0:14:4a:a9:cb:73:6c:e8:ff:82:88:c3:81:1c:5f:
                    73:be:8e:77:f0:8d:cd:5c:da:ee:e9:ad:68:6f:58:
                    65:a0:c0:8d:2f:44:99:da:2d:4e:ee:1c:50:4b:79:
                    92:7f:f8:a4:ab:1e:f6:8f:a7:43:d3:08:4d:55:d1:
                    1d:b4:38:a5:94:5a:5a:cc:67:0d:1a:e6:97:61:4b:
                    52:0c:12:b0:48:f6:28:44:f9:b6:05:42:f0:e8:ad:
                    59:5e:d3:3d:23:00:3b:21:e6:4f:c5:46:ba:30:7a:
                    40:60:45:20:12:68:aa:06:d2:66:ff:06:d9:39:b2:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:11:7E:F1:29:13:39:9E:F2:0F:99:AB:39:9C:07:FD:17:AC:1F:E7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e3135332e302f32342d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:ee:72:1a:0a:74:a0:a8:f9:1c:63:4c:bc:85:37:f5:81:ec:
         ac:73:96:05:ba:e9:cc:c3:02:47:38:cf:43:d8:5b:72:8f:d8:
         5c:eb:98:2f:03:32:b7:a7:66:a1:54:d5:89:bf:75:f9:33:69:
         82:66:4f:26:ea:2c:63:5f:c9:ae:94:d2:94:7f:78:18:e1:45:
         91:17:0f:98:c7:09:3e:7d:51:31:e6:95:b4:6f:c8:13:81:a1:
         9f:d2:7e:13:87:65:ae:78:0a:51:8b:1b:58:e5:1a:b3:dc:6b:
         a2:be:cc:dd:8c:75:7b:04:87:ce:d2:f2:1c:c5:bf:1c:15:c6:
         6a:fd:fe:29:73:70:5e:91:e0:30:13:86:e4:84:99:c9:3f:e4:
         9a:e9:3b:a7:69:96:cc:29:7c:9d:0d:c3:fc:ac:b6:15:28:20:
         e0:4f:0c:37:1a:89:e3:97:c2:1f:c6:4b:5f:7c:e3:fb:aa:01:
         b7:19:f7:5b:f0:e6:17:0d:4d:29:d8:73:aa:e9:af:a0:88:55:
         d1:03:d9:68:bb:74:f6:7c:4c:68:a4:5e:66:ef:49:ea:90:f8:
         6a:f4:7c:50:21:3a:be:3c:e1:47:ec:aa:aa:ea:43:6e:bf:c6:
         72:8f:a3:70:8c:e8:1a:5f:98:bc:0f:41:c1:c2:e7:58:b8:23:
         ec:fb:27:dc
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIULE2OJHWgVBkY4CXbG7yueFsZDJQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDEwNDA3MjY1N1oX
DTIzMDEwNDA3MzE1N1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBGMzQ3Qzk3Qjg0NTg0NzBGOTRGRjY1QTYyQjExQTMyQjRBRTJDRjgyNDYw
M0FGQTAzRUM2MzZCMzZFOUY4Q0EyRkExRDQyMDZDRUQxMTM1NUM1QzYxM0FDMTA5
MkRGMjI0NTMxNENBNEZBRTlGMzFBRUE3ODc3RUMyMzU1REEyM0EzMjAxQ0FGQjJC
Q0JDOTVDRjE5OEM4REU4MTREMzM4MEUyMDk4QTQyNzYyMzA1RkMxNjNCRDNCNThF
RUI3RTZENDUxRkM4MzlCNjdENjkzMkUyMDhBQTY1QjUxRTE2OTg2ODQ4RkVGNzYx
ODVCMTdENzI0NDlGREE4Rjk3ODZFQjVBN0VDQ0QzNzQ1QzAxNDRBQTlDQjczNkNF
OEZGODI4OEMzODExQzVGNzNCRThFNzdGMDhEQ0Q1Q0RBRUVFOUFENjg2RjU4NjVB
MEMwOEQyRjQ0OTlEQTJENEVFRTFDNTA0Qjc5OTI3RkY4QTRBQjFFRjY4RkE3NDNE
MzA4NEQ1NUQxMURCNDM4QTU5NDVBNUFDQzY3MEQxQUU2OTc2MTRCNTIwQzEyQjA0
OEY2Mjg0NEY5QjYwNTQyRjBFOEFENTk1RUQzM0QyMzAwM0IyMUU2NEZDNTQ2QkEz
MDdBNDA2MDQ1MjAxMjY4QUEwNkQyNjZGRjA2RDkzOUIyQ0E2RjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzR8l7hFhHD5T/ZaYrEaMr
SuLPgkYDr6A+xjazbp+MovodQgbO0RNVxcYTrBCS3yJFMUyk+unzGup4d+wjVdoj
oyAcr7K8vJXPGYyN6BTTOA4gmKQnYjBfwWO9O1jut+bUUfyDm2fWky4giqZbUeFp
hoSP73YYWxfXJEn9qPl4brWn7M03RcAUSqnLc2zo/4KIw4EcX3O+jnfwjc1c2u7p
rWhvWGWgwI0vRJnaLU7uHFBLeZJ/+KSrHvaPp0PTCE1V0R20OKWUWlrMZw0a5pdh
S1IMErBI9ihE+bYFQvDorVle0z0jADsh5k/FRrowekBgRSASaKoG0mb/Btk5sspv
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUwBF+8SkTOZ7yD5mrOZwH/ResH+cwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNzM4MmUzMTM1MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnspkwDQYJ
KoZIhvcNAQELBQADggEBAIDuchoKdKCo+RxjTLyFN/WB7KxzlgW66czDAkc4z0PY
W3KP2FzrmC8DMrenZqFU1Ym/dfkzaYJmTybqLGNfya6U0pR/eBjhRZEXD5jHCT59
UTHmlbRvyBOBoZ/SfhOHZa54ClGLG1jlGrPca6K+zN2MdXsEh87S8hzFvxwVxmr9
/ilzcF6R4DAThuSEmck/5JrpO6dplswpfJ0Nw/ysthUoIOBPDDcaieOXwh/GS198
4/uqAbcZ91vw5hcNTSnYc6rpr6CIVdED2Wi7dPZ8TGikXmbvSeqQ+Gr0fFAhOr48
4UfsqqrqQ26/xnKPo3CM6BpfmLwPQcHC51i4I+z7J9w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org