Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3232342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3232342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          Y3fbLik+D7BLKxZFTyz5PHBgTS7SCp0rLHNO85qc3p0=
Subject key identifier:   42:A1:FB:57:04:9E:4F:B4:2B:77:1D:88:8F:7B:95:7C:67:C6:32:7A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       43531EE5E0F0D66FECA40888CE6B4CAB401BF7A4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3232342e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:27 +0000
ROA not before:           Thu 03 Mar 2022 07:20:27 +0000
ROA not after:            Fri 03 Mar 2023 07:25:27 +0000
asID:                     17995
IP address blocks:        103.182.224.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:53:1e:e5:e0:f0:d6:6f:ec:a4:08:88:ce:6b:4c:ab:40:1b:f7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:27 2022 GMT
            Not After : Mar  3 07:25:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:91:7b:8e:15:0a:83:72:f4:db:97:94:1f:ce:
                    a7:e7:be:89:89:52:6b:64:48:70:7a:e5:2d:2e:4c:
                    52:95:01:8d:b2:19:5a:0b:99:6a:98:da:83:0c:28:
                    cd:29:07:1c:28:da:4c:0c:78:76:65:4c:55:10:9b:
                    74:e9:72:a4:84:a3:05:90:af:fc:d5:24:ab:5d:bd:
                    60:24:d9:56:bb:f7:6a:29:c4:cf:73:d1:86:c1:f2:
                    cc:60:96:e2:ec:da:4d:70:35:df:4a:f3:b8:bf:97:
                    e9:11:95:a3:c6:36:7c:a8:46:13:b4:18:db:ba:02:
                    00:d5:61:ac:cd:12:ce:9b:cf:de:b4:ae:22:97:be:
                    06:8f:c5:bd:2f:5c:bd:07:36:42:82:e0:df:84:8d:
                    e7:14:b5:6a:4d:c4:20:e2:b1:2b:58:7f:64:ca:40:
                    87:c4:fb:6e:c9:68:9c:1b:ff:8a:ed:51:18:c5:57:
                    19:ba:4a:4d:a1:26:ea:8a:87:e4:80:29:56:e9:0a:
                    cb:48:3c:9f:3e:f6:d1:44:17:c9:4b:4e:a4:f0:8f:
                    1a:84:89:e8:bb:05:cc:8b:97:51:17:01:17:1f:be:
                    43:39:aa:f4:b8:20:81:c8:93:39:bc:be:26:fa:c3:
                    19:fc:19:87:7f:8f:56:d6:40:65:a1:d6:53:3e:32:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A1:FB:57:04:9E:4F:B4:2B:77:1D:88:8F:7B:95:7C:67:C6:32:7A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3232342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:4d:12:b7:e6:d6:14:5c:fc:b4:08:11:f0:ef:64:a1:59:
         e0:07:95:5f:fb:5f:6b:8e:b3:65:3c:e6:56:71:19:18:8c:9b:
         4c:45:23:54:11:2c:0b:e3:09:b6:e9:a0:c6:20:38:3f:ce:6d:
         10:33:63:7b:a4:32:74:ca:8d:f4:af:80:28:0d:a6:0e:b7:6a:
         da:ae:08:2c:88:30:2a:5f:dc:ce:ef:dd:b4:17:d9:58:ca:9f:
         bf:62:a5:97:c4:6c:dd:c7:b0:b3:e0:79:db:2b:6a:20:76:65:
         3a:85:d2:cc:08:bb:62:11:b9:a4:45:83:9f:c9:04:d0:60:eb:
         13:9c:8b:0f:4c:2c:7e:97:fa:67:6b:09:ca:21:4f:7e:0b:96:
         a3:c6:ce:d6:0a:5e:1e:f2:70:a4:f5:34:9e:d9:c4:e3:47:2b:
         cb:0b:8b:5f:0d:23:20:88:2b:44:15:68:32:07:45:f9:11:86:
         eb:2e:74:68:3f:00:02:27:55:fa:da:e4:16:f0:9f:43:33:da:
         38:79:f8:23:3d:05:13:55:ba:87:d0:66:bd:6c:c4:cf:02:82:
         12:64:42:59:a6:17:de:f2:6c:4b:05:78:ce:bb:2e:28:07:b2:
         3c:3e:4a:01:0e:f5:56:45:d0:6e:26:2c:08:86:b6:4b:d0:9b:
         f9:60:b8:cd
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUQ1Me5eDw1m/spAiIzmtMq0Ab96QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwMzA3MjAyN1oX
DTIzMDMwMzA3MjUyN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDNjkxN0I4RTE1MEE4MzcyRjREQjk3OTQxRkNFQTdFN0JFODk4OTUyNkI2
NDQ4NzA3QUU1MkQyRTRDNTI5NTAxOERCMjE5NUEwQjk5NkE5OERBODMwQzI4Q0Qy
OTA3MUMyOERBNEMwQzc4NzY2NTRDNTUxMDlCNzRFOTcyQTQ4NEEzMDU5MEFGRkNE
NTI0QUI1REJENjAyNEQ5NTZCQkY3NkEyOUM0Q0Y3M0QxODZDMUYyQ0M2MDk2RTJF
Q0RBNEQ3MDM1REY0QUYzQjhCRjk3RTkxMTk1QTNDNjM2N0NBODQ2MTNCNDE4REJC
QTAyMDBENTYxQUNDRDEyQ0U5QkNGREVCNEFFMjI5N0JFMDY4RkM1QkQyRjVDQkQw
NzM2NDI4MkUwREY4NDhERTcxNEI1NkE0REM0MjBFMkIxMkI1ODdGNjRDQTQwODdD
NEZCNkVDOTY4OUMxQkZGOEFFRDUxMThDNTU3MTlCQTRBNERBMTI2RUE4QTg3RTQ4
MDI5NTZFOTBBQ0I0ODNDOUYzRUY2RDE0NDE3Qzk0QjRFQTRGMDhGMUE4NDg5RThC
QjA1Q0M4Qjk3NTExNzAxMTcxRkJFNDMzOUFBRjRCODIwODFDODkzMzlCQ0JFMjZG
QUMzMTlGQzE5ODc3RjhGNTZENjQwNjVBMUQ2NTMzRTMyOTAzMTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkXuOFQqDcvTbl5Qfzqfn
vomJUmtkSHB65S0uTFKVAY2yGVoLmWqY2oMMKM0pBxwo2kwMeHZlTFUQm3TpcqSE
owWQr/zVJKtdvWAk2Va792opxM9z0YbB8sxgluLs2k1wNd9K87i/l+kRlaPGNnyo
RhO0GNu6AgDVYazNEs6bz960riKXvgaPxb0vXL0HNkKC4N+EjecUtWpNxCDisStY
f2TKQIfE+27JaJwb/4rtURjFVxm6Sk2hJuqKh+SAKVbpCstIPJ8+9tFEF8lLTqTw
jxqEiei7BcyLl1EXARcfvkM5qvS4IIHIkzm8vib6wxn8GYd/j1bWQGWh1lM+MpAx
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUQqH7VwSeT7Qrdx2Ij3uVfGfGMnowHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzODMyMmUzMjMyMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7bgMA0GCSqG
SIb3DQEBCwUAA4IBAQBe7k0St+bWFFz8tAgR8O9koVngB5Vf+19rjrNlPOZWcRkY
jJtMRSNUESwL4wm26aDGIDg/zm0QM2N7pDJ0yo30r4AoDaYOt2rarggsiDAqX9zO
7920F9lYyp+/YqWXxGzdx7Cz4HnbK2ogdmU6hdLMCLtiEbmkRYOfyQTQYOsTnIsP
TCx+l/pnawnKIU9+C5ajxs7WCl4e8nCk9TSe2cTjRyvLC4tfDSMgiCtEFWgyB0X5
EYbrLnRoPwACJ1X62uQW8J9DM9o4efgjPQUTVbqH0Ga9bMTPAoISZEJZphfe8mxL
BXjOuy4oB7I8PkoBDvVWRdBuJiwIhrZL0Jv5YLjN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org