Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3233322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          4WNMUAYH7znZoEYDTjG17h3a0ZwKxi0P5m9K2tU2ajA=
Subject key identifier:   53:2A:23:18:46:90:63:0E:9A:2A:29:FB:6C:B4:87:B8:D8:31:6D:2C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1969D89A9090F2F9A419C3BB69A3A1AA32706B8C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233322e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:24 +0000
ROA not before:           Thu 03 Mar 2022 07:20:24 +0000
ROA not after:            Fri 03 Mar 2023 07:25:24 +0000
asID:                     17995
IP address blocks:        103.182.232.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:d8:9a:90:90:f2:f9:a4:19:c3:bb:69:a3:a1:aa:32:70:6b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:24 2022 GMT
            Not After : Mar  3 07:25:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:c2:b5:94:52:aa:c6:b2:70:36:a6:01:fd:
                    2d:a5:59:52:e2:cd:19:7d:c3:f9:fd:80:2a:cd:76:
                    7b:85:09:f8:84:45:19:b4:03:f1:cc:4b:26:82:4d:
                    9e:e6:f1:5f:d5:d7:ce:12:37:b9:6b:32:07:38:2b:
                    ef:91:83:68:5a:d7:fa:11:5b:31:59:45:34:73:3c:
                    f3:08:28:34:2f:5d:71:3c:dd:c9:be:73:52:c3:c2:
                    3d:27:bc:20:75:24:6e:1e:77:d9:b6:1a:83:68:16:
                    21:22:0d:62:27:17:35:e6:be:6a:0f:b9:ea:33:a0:
                    14:7d:57:10:84:cf:27:db:19:d0:ce:77:bf:54:f3:
                    e8:33:63:90:5d:d0:9c:30:4b:43:65:ac:a5:28:a3:
                    3d:d3:a5:95:a8:34:6d:81:42:ef:a4:8a:17:a0:91:
                    de:f8:d0:87:24:04:ae:ce:ac:8f:ab:c0:f4:30:2c:
                    ff:8a:b6:d5:17:e0:3a:03:ec:4d:14:c7:bb:e3:35:
                    90:18:72:b2:8a:d5:ca:68:6b:16:3d:35:3f:af:05:
                    d9:d8:b4:f7:38:57:98:45:ec:03:44:80:57:3c:4b:
                    d3:c1:a1:65:06:d7:80:8f:f6:28:5c:0e:b2:72:74:
                    a8:ff:5f:43:0e:a0:ee:29:e9:8a:4c:f6:c9:48:5f:
                    c1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2A:23:18:46:90:63:0E:9A:2A:29:FB:6C:B4:87:B8:D8:31:6D:2C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:a7:c8:87:4a:b9:5d:1a:ca:0a:45:8f:9e:2d:12:78:54:d2:
         84:f0:06:59:b1:80:3e:ee:db:bb:73:41:bd:c9:b6:93:fa:89:
         6d:93:53:53:68:40:d0:9e:a0:d0:79:23:71:98:25:fb:c6:4e:
         7b:e3:f7:ec:3b:2c:54:9d:6c:c1:ad:e1:7b:dc:04:ff:3e:36:
         7e:47:32:b4:81:7e:cd:be:51:b0:4c:4d:67:d8:0f:b3:ef:ed:
         d0:c1:b5:43:2f:69:48:b1:c7:24:e3:97:8d:73:8f:b0:58:b1:
         7f:0e:93:9e:91:20:69:bd:9f:99:32:44:5a:58:4c:45:e8:8c:
         10:be:53:1b:44:06:f3:bf:31:d8:d3:17:0e:ef:13:ae:2e:8c:
         94:fb:03:78:28:6e:54:ef:20:0e:dd:f9:a3:b4:8f:47:ba:9e:
         b7:72:b0:f7:c9:ef:ec:f8:97:53:83:03:60:c2:26:44:96:51:
         83:c3:46:3e:3b:d7:94:8b:c7:a7:8a:46:b3:f4:13:67:1b:ad:
         9e:c3:54:ef:39:f6:d2:76:bf:8f:24:2b:c8:95:62:a2:46:ad:
         6d:d4:e0:5f:3b:76:4a:a4:0a:a3:c1:af:49:de:ac:0c:0b:e3:
         63:06:2b:4d:c0:11:e2:7f:f2:18:b9:17:c7:b0:00:94:69:1c:
         e6:41:4e:bb
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUGWnYmpCQ8vmkGcO7aaOhqjJwa4wwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwMzA3MjAyNFoX
DTIzMDMwMzA3MjUyNFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDMkRFQzJCNTk0NTJBQUM2QjI3MDM2QTYwMUZEMkRBNTU5NTJFMkNEMTk3
REMzRjlGRDgwMkFDRDc2N0I4NTA5Rjg4NDQ1MTlCNDAzRjFDQzRCMjY4MjREOUVF
NkYxNUZENUQ3Q0UxMjM3Qjk2QjMyMDczODJCRUY5MTgzNjg1QUQ3RkExMTVCMzE1
OTQ1MzQ3MzNDRjMwODI4MzQyRjVENzEzQ0REQzlCRTczNTJDM0MyM0QyN0JDMjA3
NTI0NkUxRTc3RDlCNjFBODM2ODE2MjEyMjBENjIyNzE3MzVFNkJFNkEwRkI5RUEz
M0EwMTQ3RDU3MTA4NENGMjdEQjE5RDBDRTc3QkY1NEYzRTgzMzYzOTA1REQwOUMz
MDRCNDM2NUFDQTUyOEEzM0REM0E1OTVBODM0NkQ4MTQyRUZBNDhBMTdBMDkxREVG
OEQwODcyNDA0QUVDRUFDOEZBQkMwRjQzMDJDRkY4QUI2RDUxN0UwM0EwM0VDNEQx
NEM3QkJFMzM1OTAxODcyQjI4QUQ1Q0E2ODZCMTYzRDM1M0ZBRjA1RDlEOEI0Rjcz
ODU3OTg0NUVDMDM0NDgwNTczQzRCRDNDMUExNjUwNkQ3ODA4RkY2Mjg1QzBFQjI3
Mjc0QThGRjVGNDMwRUEwRUUyOUU5OEE0Q0Y2Qzk0ODVGQzE2MTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3sK1lFKqxrJwNqYB/S2l
WVLizRl9w/n9gCrNdnuFCfiERRm0A/HMSyaCTZ7m8V/V184SN7lrMgc4K++Rg2ha
1/oRWzFZRTRzPPMIKDQvXXE83cm+c1LDwj0nvCB1JG4ed9m2GoNoFiEiDWInFzXm
vmoPueozoBR9VxCEzyfbGdDOd79U8+gzY5Bd0JwwS0NlrKUooz3TpZWoNG2BQu+k
ihegkd740IckBK7OrI+rwPQwLP+KttUX4DoD7E0Ux7vjNZAYcrKK1cpoaxY9NT+v
BdnYtPc4V5hF7ANEgFc8S9PBoWUG14CP9ihcDrJydKj/X0MOoO4p6YpM9slIX8Fh
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUUyojGEaQYw6aKin7bLSHuNgxbSwwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzODMyMmUzMjMzMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7boMA0GCSqG
SIb3DQEBCwUAA4IBAQBMp8iHSrldGsoKRY+eLRJ4VNKE8AZZsYA+7tu7c0G9ybaT
+oltk1NTaEDQnqDQeSNxmCX7xk574/fsOyxUnWzBreF73AT/PjZ+RzK0gX7NvlGw
TE1n2A+z7+3QwbVDL2lIscck45eNc4+wWLF/DpOekSBpvZ+ZMkRaWExF6IwQvlMb
RAbzvzHY0xcO7xOuLoyU+wN4KG5U7yAO3fmjtI9Hup63crD3ye/s+JdTgwNgwiZE
llGDw0Y+O9eUi8enikaz9BNnG62ew1TvOfbSdr+PJCvIlWKiRq1t1OBfO3ZKpAqj
wa9J3qwMC+NjBitNwBHif/IYuRfHsACUaRzmQU67
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org