Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3230322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          xuflQ6p7Ohod6yBxfdecVkgHRU6whcn1xO7FIe13u7Q=
Subject key identifier:   0B:99:38:C4:F8:FC:B4:D6:D2:3A:E7:04:EE:0A:3D:2B:5C:8C:9D:23
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       45FA214DA9B2F9969415A7FF30682F96F900D423
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230322e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:27 +0000
ROA not before:           Thu 03 Mar 2022 07:20:27 +0000
ROA not after:            Fri 03 Mar 2023 07:25:27 +0000
asID:                     17995
IP address blocks:        103.182.202.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fa:21:4d:a9:b2:f9:96:94:15:a7:ff:30:68:2f:96:f9:00:d4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:27 2022 GMT
            Not After : Mar  3 07:25:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:53:de:52:26:d3:fb:00:a6:9f:e7:0c:ff:14:
                    82:59:3a:95:d8:68:4e:65:69:cf:95:c4:3d:77:bd:
                    be:8d:9e:bd:2b:6c:af:b9:76:bd:58:fb:0e:99:ef:
                    d5:84:7c:bc:74:41:47:25:8e:90:09:cb:10:a3:dc:
                    0d:7f:e0:b4:17:8c:43:67:b2:c2:9e:f2:b6:c0:fb:
                    e0:8d:ee:cf:3a:c1:bf:e2:fb:0f:da:72:1a:f6:67:
                    88:c0:95:9a:36:41:55:26:0d:69:f4:86:36:1b:57:
                    9c:d0:94:f6:74:1f:ee:51:b3:2f:37:84:10:82:0c:
                    f6:6a:99:9a:c8:7d:cf:ea:9d:a0:e7:fc:cf:a0:59:
                    02:f2:59:75:52:dc:10:11:56:df:56:a8:6d:5b:47:
                    97:74:fc:56:2b:09:ff:b8:9c:1f:42:17:28:5b:d7:
                    04:e3:56:e0:04:48:2d:a6:86:0c:a6:81:e7:89:fe:
                    3b:48:12:55:31:fc:2d:5c:3f:d0:fe:10:a9:7e:d2:
                    83:e7:bf:57:a2:ab:b9:4d:4d:de:16:a0:6e:7e:4e:
                    8a:9c:fd:c7:4a:f7:af:47:a7:82:cf:05:0e:7c:d0:
                    e5:09:72:73:df:3b:ac:cb:95:c7:b4:3c:92:82:f0:
                    c0:15:e4:68:df:00:ed:7d:15:1f:d5:f5:78:cc:d7:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:99:38:C4:F8:FC:B4:D6:D2:3A:E7:04:EE:0A:3D:2B:5C:8C:9D:23
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:ef:1c:70:f2:ef:51:84:72:62:56:ae:cb:42:90:e7:43:72:
         3e:04:cf:18:2f:d2:82:76:16:a9:75:b0:6d:9f:e7:c1:33:1f:
         ac:61:29:73:31:3d:85:2d:d7:0a:b4:74:99:bb:04:d7:b3:a7:
         4f:aa:c8:9d:a6:f9:e4:84:2e:e5:da:7a:83:29:bd:c9:c0:36:
         85:91:33:8a:18:55:93:b7:1a:14:e0:e5:81:a9:55:55:88:6a:
         16:67:99:07:b8:53:c2:da:b4:e0:d5:b6:61:24:73:2b:82:d5:
         0f:a5:19:b6:bd:94:b5:54:c2:17:a5:b7:a2:dc:07:bb:ae:83:
         5d:3a:0d:46:11:9b:ee:2d:67:ee:51:09:c1:8c:9c:61:f2:ee:
         15:8f:35:53:bf:5a:2e:08:23:2c:2a:81:05:49:8b:b8:5b:d6:
         c4:0d:24:b2:23:53:75:0a:00:e5:a5:7d:ea:25:88:52:fe:17:
         7f:94:d0:7d:6e:89:b1:8a:05:ab:a9:e2:69:82:b3:ba:65:73:
         24:14:6c:f5:bf:90:e3:a6:63:a8:0f:f3:75:7d:f5:5b:c2:d1:
         ee:8e:62:2f:ac:d2:44:a8:6f:2e:63:08:30:fd:69:7c:a8:4d:
         9d:ce:e9:94:36:04:e9:8b:01:5d:16:84:fb:78:94:24:85:ea:
         94:93:7c:44
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIURfohTamy+ZaUFaf/MGgvlvkA1CMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwMzA3MjAyN1oX
DTIzMDMwMzA3MjUyN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBENDUzREU1MjI2RDNGQjAwQTY5RkU3MENGRjE0ODI1OTNBOTVEODY4NEU2
NTY5Q0Y5NUM0M0Q3N0JEQkU4RDlFQkQyQjZDQUZCOTc2QkQ1OEZCMEU5OUVGRDU4
NDdDQkM3NDQxNDcyNThFOTAwOUNCMTBBM0RDMEQ3RkUwQjQxNzhDNDM2N0IyQzI5
RUYyQjZDMEZCRTA4REVFQ0YzQUMxQkZFMkZCMEZEQTcyMUFGNjY3ODhDMDk1OUEz
NjQxNTUyNjBENjlGNDg2MzYxQjU3OUNEMDk0RjY3NDFGRUU1MUIzMkYzNzg0MTA4
MjBDRjY2QTk5OUFDODdEQ0ZFQTlEQTBFN0ZDQ0ZBMDU5MDJGMjU5NzU1MkRDMTAx
MTU2REY1NkE4NkQ1QjQ3OTc3NEZDNTYyQjA5RkZCODlDMUY0MjE3Mjg1QkQ3MDRF
MzU2RTAwNDQ4MkRBNjg2MENBNjgxRTc4OUZFM0I0ODEyNTUzMUZDMkQ1QzNGRDBG
RTEwQTk3RUQyODNFN0JGNTdBMkFCQjk0RDREREUxNkEwNkU3RTRFOEE5Q0ZEQzc0
QUY3QUY0N0E3ODJDRjA1MEU3Q0QwRTUwOTcyNzNERjNCQUNDQjk1QzdCNDNDOTI4
MkYwQzAxNUU0NjhERjAwRUQ3RDE1MUZENUY1NzhDQ0Q3QUVEMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUU95SJtP7AKaf5wz/FIJZ
OpXYaE5lac+VxD13vb6Nnr0rbK+5dr1Y+w6Z79WEfLx0QUcljpAJyxCj3A1/4LQX
jENnssKe8rbA++CN7s86wb/i+w/achr2Z4jAlZo2QVUmDWn0hjYbV5zQlPZ0H+5R
sy83hBCCDPZqmZrIfc/qnaDn/M+gWQLyWXVS3BARVt9WqG1bR5d0/FYrCf+4nB9C
Fyhb1wTjVuAESC2mhgymgeeJ/jtIElUx/C1cP9D+EKl+0oPnv1eiq7lNTd4WoG5+
Toqc/cdK969Hp4LPBQ580OUJcnPfO6zLlce0PJKC8MAV5GjfAO19FR/V9XjM167T
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUC5k4xPj8tNbSOucE7go9K1yMnSMwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzODMyMmUzMjMwMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7bKMA0GCSqG
SIb3DQEBCwUAA4IBAQBg7xxw8u9RhHJiVq7LQpDnQ3I+BM8YL9KCdhapdbBtn+fB
Mx+sYSlzMT2FLdcKtHSZuwTXs6dPqsidpvnkhC7l2nqDKb3JwDaFkTOKGFWTtxoU
4OWBqVVViGoWZ5kHuFPC2rTg1bZhJHMrgtUPpRm2vZS1VMIXpbei3Ae7roNdOg1G
EZvuLWfuUQnBjJxh8u4VjzVTv1ouCCMsKoEFSYu4W9bEDSSyI1N1CgDlpX3qJYhS
/hd/lNB9bomxigWrqeJpgrO6ZXMkFGz1v5DjpmOoD/N1ffVbwtHujmIvrNJEqG8u
Ywgw/Wl8qE2dzumUNgTpiwFdFoT7eJQkheqUk3xE
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org