Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3139342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3139342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          2LNM/0/VSg0jtI9+G3zKGXYNPNRQgA9Pa6oBvwocL3g=
Subject key identifier:   98:B8:D8:DB:63:2F:FB:71:07:DF:A7:B9:89:4B:67:F8:8B:40:46:3A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4F7208234EA16D6CE996014AB604179905EFB7C5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3139342e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:27 +0000
ROA not before:           Thu 03 Mar 2022 07:20:27 +0000
ROA not after:            Fri 03 Mar 2023 07:25:27 +0000
asID:                     17995
IP address blocks:        103.182.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:72:08:23:4e:a1:6d:6c:e9:96:01:4a:b6:04:17:99:05:ef:b7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:27 2022 GMT
            Not After : Mar  3 07:25:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:b6:56:bc:98:ff:31:d8:2d:1e:fb:b4:35:
                    05:0d:77:73:be:89:e7:93:d0:df:47:3e:e9:3a:95:
                    9b:fe:0d:da:00:4e:9b:f9:a8:16:0c:ee:65:57:7e:
                    18:14:ff:57:d4:70:01:03:14:56:2c:7e:67:4d:3f:
                    f7:b7:f0:ab:ad:0e:a2:ee:8f:57:87:7e:f4:d0:dd:
                    6b:34:6c:c0:24:c5:d5:35:28:2b:89:c2:86:34:94:
                    fe:f5:19:73:b7:d7:11:53:39:27:ef:6a:94:b9:b1:
                    40:6a:29:39:24:9d:ee:1f:81:5c:72:b3:eb:87:31:
                    12:07:09:63:06:7f:87:f1:48:47:03:15:bb:ec:df:
                    59:7b:da:7d:7b:76:ab:92:58:88:12:3c:97:f7:04:
                    c7:49:4c:3a:91:e9:b6:36:8c:b9:9e:52:18:bd:88:
                    d7:b6:4c:4b:73:64:b0:25:b6:31:4b:53:42:10:c5:
                    cb:b8:17:cd:ee:54:f8:f5:5a:13:6c:94:7c:1d:3c:
                    fa:47:7d:8f:5c:b1:3a:42:1b:ef:c5:b5:48:94:1a:
                    61:42:8e:93:4d:e4:43:ca:50:0e:26:5f:ab:6a:d8:
                    51:29:c4:62:19:ea:5c:ef:a4:0b:f1:3b:c1:ad:8f:
                    21:7e:76:e9:be:a7:c6:37:bb:c5:6f:21:2c:5c:7a:
                    18:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B8:D8:DB:63:2F:FB:71:07:DF:A7:B9:89:4B:67:F8:8B:40:46:3A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3139342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:65:52:99:fd:89:bb:ad:4a:cd:65:a9:ca:b9:9e:e1:61:ca:
         22:f8:47:bb:77:97:80:f5:94:41:f8:b2:8b:ee:a9:d2:aa:ac:
         e6:1c:64:04:c3:ca:72:e1:89:db:74:c7:87:dc:e9:ff:f5:46:
         be:65:4b:33:81:58:e9:2d:b0:f7:8d:d8:b7:1c:ba:ae:1f:b8:
         bd:94:1f:81:e1:62:28:81:da:e6:b9:b7:5f:de:1c:a6:9f:f4:
         89:4f:a1:c9:ad:81:4c:87:fb:8f:a0:d2:5b:76:a9:13:56:46:
         6e:a8:07:94:79:b3:45:00:e6:5e:53:7c:8b:2a:03:6c:ce:e6:
         1f:83:8e:20:08:7d:5a:c9:47:6f:4a:cf:21:8e:d0:38:b1:38:
         42:4e:03:e2:d4:a7:21:63:8d:4a:61:ab:e6:ef:3d:20:01:a6:
         ac:be:25:ab:f8:a4:1c:a4:d7:02:b9:9c:ed:70:6d:4a:70:cc:
         22:8c:ac:02:80:98:dc:50:bf:32:0b:ae:cb:6c:0e:af:5a:63:
         e9:91:16:9e:9b:28:b5:e2:d2:1b:8a:eb:6a:2a:28:2f:d6:96:
         6e:a6:67:76:5f:ab:e0:1a:08:ed:5c:d7:fc:69:eb:e1:93:6e:
         47:ba:ce:7b:b4:de:05:3c:cd:16:82:53:c5:0e:54:e6:5f:92:
         44:b3:fe:74
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUT3III06hbWzplgFKtgQXmQXvt8UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwMzA3MjAyN1oX
DTIzMDMwMzA3MjUyN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDODlEQjY1NkJDOThGRjMxRDgyRDFFRkJCNDM1MDUwRDc3NzNCRTg5RTc5
M0QwREY0NzNFRTkzQTk1OUJGRTBEREEwMDRFOUJGOUE4MTYwQ0VFNjU1NzdFMTgx
NEZGNTdENDcwMDEwMzE0NTYyQzdFNjc0RDNGRjdCN0YwQUJBRDBFQTJFRThGNTc4
NzdFRjREMERENkIzNDZDQzAyNEM1RDUzNTI4MkI4OUMyODYzNDk0RkVGNTE5NzNC
N0Q3MTE1MzM5MjdFRjZBOTRCOUIxNDA2QTI5MzkyNDlERUUxRjgxNUM3MkIzRUI4
NzMxMTIwNzA5NjMwNjdGODdGMTQ4NDcwMzE1QkJFQ0RGNTk3QkRBN0Q3Qjc2QUI5
MjU4ODgxMjNDOTdGNzA0Qzc0OTRDM0E5MUU5QjYzNjhDQjk5RTUyMThCRDg4RDdC
NjRDNEI3MzY0QjAyNUI2MzE0QjUzNDIxMEM1Q0JCODE3Q0RFRTU0RjhGNTVBMTM2
Qzk0N0MxRDNDRkE0NzdEOEY1Q0IxM0E0MjFCRUZDNUI1NDg5NDFBNjE0MjhFOTM0
REU0NDNDQTUwMEUyNjVGQUI2QUQ4NTEyOUM0NjIxOUVBNUNFRkE0MEJGMTNCQzFB
RDhGMjE3RTc2RTlCRUE3QzYzN0JCQzU2RjIxMkM1QzdBMThBNzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInbZWvJj/MdgtHvu0NQUN
d3O+ieeT0N9HPuk6lZv+DdoATpv5qBYM7mVXfhgU/1fUcAEDFFYsfmdNP/e38Kut
DqLuj1eHfvTQ3Ws0bMAkxdU1KCuJwoY0lP71GXO31xFTOSfvapS5sUBqKTkkne4f
gVxys+uHMRIHCWMGf4fxSEcDFbvs31l72n17dquSWIgSPJf3BMdJTDqR6bY2jLme
Uhi9iNe2TEtzZLAltjFLU0IQxcu4F83uVPj1WhNslHwdPPpHfY9csTpCG+/FtUiU
GmFCjpNN5EPKUA4mX6tq2FEpxGIZ6lzvpAvxO8GtjyF+dum+p8Y3u8VvISxcehin
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUmLjY22Mv+3EH36e5iUtn+ItARjowHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzODMyMmUzMTM5MzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7bCMA0GCSqG
SIb3DQEBCwUAA4IBAQCNZVKZ/Ym7rUrNZanKuZ7hYcoi+Ee7d5eA9ZRB+LKL7qnS
qqzmHGQEw8py4YnbdMeH3On/9Ua+ZUszgVjpLbD3jdi3HLquH7i9lB+B4WIogdrm
ubdf3hymn/SJT6HJrYFMh/uPoNJbdqkTVkZuqAeUebNFAOZeU3yLKgNszuYfg44g
CH1ayUdvSs8hjtA4sThCTgPi1KchY41KYavm7z0gAaasviWr+KQcpNcCuZztcG1K
cMwijKwCgJjcUL8yC67LbA6vWmPpkRaemyi14tIbiutqKigv1pZupmd2X6vgGgjt
XNf8aevhk25Hus57tN4FPM0WglPFDlTmX5JEs/50
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org