Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e35362e302f32332d3234203d3e20313336303532.roa
File:                     3130332e3137392e35362e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          PA11QAREjcxpF7Ci0Gi6F7Sd6Ow4C80CfHUqwErLCu0=
Subject key identifier:   17:D4:DF:D0:47:9B:8E:30:59:3E:FE:46:29:E2:A9:CF:D9:04:51:81
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       329114FE0E008D9A8F541C85F8F13D7569E03EFD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e35362e302f32332d3234203d3e20313336303532.roa
Signing time:             Fri 07 Jan 2022 12:40:24 +0000
ROA not before:           Fri 07 Jan 2022 12:35:24 +0000
ROA not after:            Sat 07 Jan 2023 12:40:24 +0000
asID:                     136052
IP address blocks:        103.179.56.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:91:14:fe:0e:00:8d:9a:8f:54:1c:85:f8:f1:3d:75:69:e0:3e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  7 12:35:24 2022 GMT
            Not After : Jan  7 12:40:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:1f:97:87:0f:20:c6:22:fe:da:fa:bd:b6:
                    f5:3b:79:8b:70:2d:14:d4:07:2a:35:37:ab:95:25:
                    5c:8a:3f:2d:6f:10:c1:8e:4d:8c:60:16:7f:4d:ff:
                    df:f2:51:93:ea:13:ee:c2:4b:5a:1d:36:23:f3:5b:
                    9c:d3:ee:3c:d0:c0:fb:4b:73:d5:18:ef:41:8b:a6:
                    05:80:4e:87:c5:d4:49:a5:99:96:34:bc:a4:f3:1a:
                    30:a3:be:50:cb:6b:c8:ab:dd:35:56:fa:db:3a:1d:
                    5b:04:1b:38:7e:06:5f:49:5c:a7:5a:63:74:9e:e2:
                    f6:b8:5e:71:d1:a6:d7:28:b7:6c:a7:0b:11:63:49:
                    f8:6d:e0:9c:8a:6f:f5:26:a1:33:52:9d:47:d7:4f:
                    a3:b1:15:82:47:83:84:f7:26:22:35:f0:cf:2c:4a:
                    28:78:5b:93:64:09:74:7e:54:0c:61:7d:18:3d:fa:
                    26:47:5b:cb:e3:d5:94:07:be:d1:0b:74:47:f8:ea:
                    f8:83:df:20:44:3b:8a:08:81:15:d5:cb:6b:25:30:
                    af:03:5e:8d:24:c5:97:5f:67:90:ac:93:18:15:71:
                    91:1a:ea:54:68:6d:14:77:6e:29:64:03:13:e6:12:
                    2d:ef:d2:9f:a5:52:f4:a5:93:e4:fb:6a:e6:6e:30:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D4:DF:D0:47:9B:8E:30:59:3E:FE:46:29:E2:A9:CF:D9:04:51:81
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e35362e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:2d:eb:7f:ba:24:63:b8:97:88:a4:42:7d:42:22:f6:14:
         4e:07:5f:b4:79:d7:5c:14:84:da:a8:f8:70:a7:22:6d:01:13:
         9d:8c:00:0b:23:3e:0c:d7:07:92:c6:4e:a5:d9:9c:1e:d6:39:
         86:f3:a6:57:99:25:37:81:26:1a:9c:0a:c1:3e:52:f5:30:b9:
         bc:54:d3:96:db:2c:9f:fd:0e:7c:f6:cd:3c:1d:2f:17:17:82:
         9c:73:96:2e:d9:a2:65:4d:de:53:30:37:26:ee:da:f1:d1:5f:
         1b:b7:50:0f:99:12:c3:75:cd:b1:71:27:73:6a:9b:45:ce:33:
         8f:32:b1:50:b8:55:27:a6:ac:91:ec:7c:fc:ed:9c:5c:5b:34:
         9d:da:a6:49:82:94:21:a6:a2:d6:b4:27:2d:d4:d0:2b:3c:97:
         05:2b:f4:7b:10:44:47:fe:09:ed:4e:ea:c7:40:ab:fb:3d:c7:
         78:2b:84:05:2c:6c:6e:37:cb:38:6a:54:01:dd:9d:70:1d:fe:
         50:1b:f7:69:07:e7:0f:f4:9c:22:fb:cb:f1:af:9d:64:9e:64:
         31:63:c5:63:06:57:d6:d2:56:50:f5:85:10:ef:d1:db:ee:c7:
         bc:2e:d5:c7:4d:44:03:ec:7c:88:b5:fe:44:f5:8f:a4:e8:83:
         fb:3f:82:8c
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUMpEU/g4AjZqPVByF+PE9dWngPv0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDEwNzEyMzUyNFoX
DTIzMDEwNzEyNDAyNFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDNEQyMUY5Nzg3MEYyMEM2MjJGRURBRkFCREI2RjUzQjc5OEI3MDJEMTRE
NDA3MkEzNTM3QUI5NTI1NUM4QTNGMkQ2RjEwQzE4RTREOEM2MDE2N0Y0REZGREZG
MjUxOTNFQTEzRUVDMjRCNUExRDM2MjNGMzVCOUNEM0VFM0NEMEMwRkI0QjczRDUx
OEVGNDE4QkE2MDU4MDRFODdDNUQ0NDlBNTk5OTYzNEJDQTRGMzFBMzBBM0JFNTBD
QjZCQzhBQkREMzU1NkZBREIzQTFENUIwNDFCMzg3RTA2NUY0OTVDQTc1QTYzNzQ5
RUUyRjZCODVFNzFEMUE2RDcyOEI3NkNBNzBCMTE2MzQ5Rjg2REUwOUM4QTZGRjUy
NkExMzM1MjlENDdENzRGQTNCMTE1ODI0NzgzODRGNzI2MjIzNUYwQ0YyQzRBMjg3
ODVCOTM2NDA5NzQ3RTU0MEM2MTdEMTgzREZBMjY0NzVCQ0JFM0Q1OTQwN0JFRDEw
Qjc0NDdGOEVBRjg4M0RGMjA0NDNCOEEwODgxMTVENUNCNkIyNTMwQUYwMzVFOEQy
NEM1OTc1RjY3OTBBQzkzMTgxNTcxOTExQUVBNTQ2ODZEMTQ3NzZFMjk2NDAzMTNF
NjEyMkRFRkQyOUZBNTUyRjRBNTkzRTRGQjZBRTY2RTMwRDBBQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0h+Xhw8gxiL+2vq9tvU7
eYtwLRTUByo1N6uVJVyKPy1vEMGOTYxgFn9N/9/yUZPqE+7CS1odNiPzW5zT7jzQ
wPtLc9UY70GLpgWATofF1EmlmZY0vKTzGjCjvlDLa8ir3TVW+ts6HVsEGzh+Bl9J
XKdaY3Se4va4XnHRptcot2ynCxFjSfht4JyKb/UmoTNSnUfXT6OxFYJHg4T3JiI1
8M8sSih4W5NkCXR+VAxhfRg9+iZHW8vj1ZQHvtELdEf46viD3yBEO4oIgRXVy2sl
MK8DXo0kxZdfZ5CskxgVcZEa6lRobRR3bilkAxPmEi3v0p+lUvSlk+T7auZuMNCr
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUF9Tf0EebjjBZPv5GKeKpz9kEUYEwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNzM5MmUzNTM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7M4MA0GCSqG
SIb3DQEBCwUAA4IBAQBaQi3rf7okY7iXiKRCfUIi9hROB1+0eddcFITaqPhwpyJt
AROdjAALIz4M1weSxk6l2Zwe1jmG86ZXmSU3gSYanArBPlL1MLm8VNOW2yyf/Q58
9s08HS8XF4Kcc5Yu2aJlTd5TMDcm7trx0V8bt1APmRLDdc2xcSdzaptFzjOPMrFQ
uFUnpqyR7Hz87ZxcWzSd2qZJgpQhpqLWtCct1NArPJcFK/R7EERH/gntTurHQKv7
Pcd4K4QFLGxuN8s4alQB3Z1wHf5QG/dpB+cP9Jwi+8vxr51knmQxY8VjBlfW0lZQ
9YUQ79Hb7se8LtXHTUQD7HyItf5E9Y+k6IP7P4KM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org