Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3230302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          y/sa0Ao/OJkX2t9iKQzKsjOVvWkh7R+K3IvYvhsrvqQ=
Subject key identifier:   69:E4:88:1E:D4:C9:EB:33:89:E1:51:AA:85:FB:B5:4E:10:D1:5A:8D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       60A94996BB23C73DABC4F3E35E44F241600939FC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230302e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:25 +0000
ROA not before:           Thu 03 Mar 2022 07:20:25 +0000
ROA not after:            Fri 03 Mar 2023 07:25:25 +0000
asID:                     17995
IP address blocks:        103.182.200.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a9:49:96:bb:23:c7:3d:ab:c4:f3:e3:5e:44:f2:41:60:09:39:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:25 2022 GMT
            Not After : Mar  3 07:25:25 2023 GMT
        Subject: CN=3082010A0282010100C9A20E5E1EA51E3FA5C34D1E5185163D738682FDC0C7D42833B0B78C748EA77CADB52BD73E66CF9EE052234FE8116998552C22A59052CC4DB955AE4FD51B9A41552C1770DFC72E196E79B5B1E8492E1E138E8C53E3694766FC5ABC35B5203A174A16EA70ED83E0C81A69BA67F005B3A30CFEC42B709FD685EF83BB05413A3D00FFAFABCC0C94263D7B803278FAAD9DCAB36D48AC5F91244819ACBC200CD3FE018B29CD997FD0974C6FDAA077B9B5B220896FE6593DD52ED04A839E2EEEBCBD8CC9BFE8C8DFCF1A30050A7B4C51BCA4471EACD4833144BB132C5388EC9C1644FD474F99440AB3DA60A829DCC16293D27DB990F620FF1DA4DB15FD2F223EC935AF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:0e:5e:1e:a5:1e:3f:a5:c3:4d:1e:51:85:
                    16:3d:73:86:82:fd:c0:c7:d4:28:33:b0:b7:8c:74:
                    8e:a7:7c:ad:b5:2b:d7:3e:66:cf:9e:e0:52:23:4f:
                    e8:11:69:98:55:2c:22:a5:90:52:cc:4d:b9:55:ae:
                    4f:d5:1b:9a:41:55:2c:17:70:df:c7:2e:19:6e:79:
                    b5:b1:e8:49:2e:1e:13:8e:8c:53:e3:69:47:66:fc:
                    5a:bc:35:b5:20:3a:17:4a:16:ea:70:ed:83:e0:c8:
                    1a:69:ba:67:f0:05:b3:a3:0c:fe:c4:2b:70:9f:d6:
                    85:ef:83:bb:05:41:3a:3d:00:ff:af:ab:cc:0c:94:
                    26:3d:7b:80:32:78:fa:ad:9d:ca:b3:6d:48:ac:5f:
                    91:24:48:19:ac:bc:20:0c:d3:fe:01:8b:29:cd:99:
                    7f:d0:97:4c:6f:da:a0:77:b9:b5:b2:20:89:6f:e6:
                    59:3d:d5:2e:d0:4a:83:9e:2e:ee:bc:bd:8c:c9:bf:
                    e8:c8:df:cf:1a:30:05:0a:7b:4c:51:bc:a4:47:1e:
                    ac:d4:83:31:44:bb:13:2c:53:88:ec:9c:16:44:fd:
                    47:4f:99:44:0a:b3:da:60:a8:29:dc:c1:62:93:d2:
                    7d:b9:90:f6:20:ff:1d:a4:db:15:fd:2f:22:3e:c9:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E4:88:1E:D4:C9:EB:33:89:E1:51:AA:85:FB:B5:4E:10:D1:5A:8D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:25:85:4d:05:f1:42:07:d5:eb:34:bc:f3:13:24:32:f2:38:
         d5:d4:e4:4c:a5:2b:9b:ff:fe:a2:3c:40:0a:54:d7:b4:00:87:
         20:cd:6d:43:4e:0c:d4:fe:d1:a2:89:5f:46:f7:97:d3:da:f1:
         64:d3:43:ed:2e:41:39:6d:c8:b3:70:50:3e:54:28:1a:79:62:
         bd:01:50:c0:72:5f:0d:c1:7e:73:bb:2b:9a:fd:e9:eb:7b:f4:
         be:7e:2b:71:58:f5:ba:76:43:87:03:df:7d:d2:b2:8b:01:86:
         96:dc:46:b2:8c:61:97:f9:a3:60:2e:fb:b1:09:4a:7a:ed:c5:
         f9:81:67:0e:47:d0:82:41:b0:19:be:b2:8b:4d:4e:9f:60:a9:
         db:14:05:87:a3:2e:d8:46:58:2b:40:53:8d:59:fa:29:19:4b:
         9c:da:b5:dc:4f:49:41:30:21:8d:1e:44:ae:3c:69:cf:88:ec:
         03:d7:c8:8f:cf:fb:b0:87:23:3e:9f:16:fe:06:a4:fd:27:36:
         a1:1a:19:70:65:fe:e8:50:b8:84:1f:cb:ad:c1:e5:92:a6:45:
         9f:86:65:85:ce:77:83:24:3b:32:4c:7d:da:70:5b:9c:62:92:
         a1:61:b6:11:54:1c:50:96:10:5f:46:21:b5:71:10:d3:18:0f:
         17:49:a5:86
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUYKlJlrsjxz2rxPPjXkTyQWAJOfwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwMzA3MjAyNVoX
DTIzMDMwMzA3MjUyNVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDOUEyMEU1RTFFQTUxRTNGQTVDMzREMUU1MTg1MTYzRDczODY4MkZEQzBD
N0Q0MjgzM0IwQjc4Qzc0OEVBNzdDQURCNTJCRDczRTY2Q0Y5RUUwNTIyMzRGRTgx
MTY5OTg1NTJDMjJBNTkwNTJDQzREQjk1NUFFNEZENTFCOUE0MTU1MkMxNzcwREZD
NzJFMTk2RTc5QjVCMUU4NDkyRTFFMTM4RThDNTNFMzY5NDc2NkZDNUFCQzM1QjUy
MDNBMTc0QTE2RUE3MEVEODNFMEM4MUE2OUJBNjdGMDA1QjNBMzBDRkVDNDJCNzA5
RkQ2ODVFRjgzQkIwNTQxM0EzRDAwRkZBRkFCQ0MwQzk0MjYzRDdCODAzMjc4RkFB
RDlEQ0FCMzZENDhBQzVGOTEyNDQ4MTlBQ0JDMjAwQ0QzRkUwMThCMjlDRDk5N0ZE
MDk3NEM2RkRBQTA3N0I5QjVCMjIwODk2RkU2NTkzREQ1MkVEMDRBODM5RTJFRUVC
Q0JEOENDOUJGRThDOERGQ0YxQTMwMDUwQTdCNEM1MUJDQTQ0NzFFQUNENDgzMzE0
NEJCMTMyQzUzODhFQzlDMTY0NEZENDc0Rjk5NDQwQUIzREE2MEE4MjlEQ0MxNjI5
M0QyN0RCOTkwRjYyMEZGMURBNERCMTVGRDJGMjIzRUM5MzVBRjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJog5eHqUeP6XDTR5RhRY9
c4aC/cDH1CgzsLeMdI6nfK21K9c+Zs+e4FIjT+gRaZhVLCKlkFLMTblVrk/VG5pB
VSwXcN/HLhluebWx6EkuHhOOjFPjaUdm/Fq8NbUgOhdKFupw7YPgyBppumfwBbOj
DP7EK3Cf1oXvg7sFQTo9AP+vq8wMlCY9e4AyePqtncqzbUisX5EkSBmsvCAM0/4B
iynNmX/Ql0xv2qB3ubWyIIlv5lk91S7QSoOeLu68vYzJv+jI388aMAUKe0xRvKRH
HqzUgzFEuxMsU4jsnBZE/UdPmUQKs9pgqCncwWKT0n25kPYg/x2k2xX9LyI+yTWv
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUaeSIHtTJ6zOJ4VGqhfu1ThDRWo0wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzODMyMmUzMjMwMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7bIMA0GCSqG
SIb3DQEBCwUAA4IBAQA6JYVNBfFCB9XrNLzzEyQy8jjV1ORMpSub//6iPEAKVNe0
AIcgzW1DTgzU/tGiiV9G95fT2vFk00PtLkE5bcizcFA+VCgaeWK9AVDAcl8NwX5z
uyua/enre/S+fitxWPW6dkOHA9990rKLAYaW3EayjGGX+aNgLvuxCUp67cX5gWcO
R9CCQbAZvrKLTU6fYKnbFAWHoy7YRlgrQFONWfopGUuc2rXcT0lBMCGNHkSuPGnP
iOwD18iPz/uwhyM+nxb+BqT9JzahGhlwZf7oULiEH8utweWSpkWfhmWFzneDJDsy
TH3acFucYpKhYbYRVBxQlhBfRiG1cRDTGA8XSaWG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org