Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3233342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          JPVmzMthwtov4KMCfXoZa6URCmwnFUWK4VfCkXV7kKo=
Subject key identifier:   CF:58:A5:44:39:1B:F9:8D:E8:11:16:42:CD:0A:8F:66:86:03:3B:F7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0C3AE83259B81B36AB70797757A10610B71C0AA3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233342e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:25 +0000
ROA not before:           Thu 03 Mar 2022 07:20:25 +0000
ROA not after:            Fri 03 Mar 2023 07:25:25 +0000
asID:                     17995
IP address blocks:        103.182.234.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3a:e8:32:59:b8:1b:36:ab:70:79:77:57:a1:06:10:b7:1c:0a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:25 2022 GMT
            Not After : Mar  3 07:25:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:95:90:eb:fa:1c:06:a2:c2:7a:34:5f:06:
                    21:27:e3:4e:65:a5:72:7a:a0:5b:3c:12:4a:be:dc:
                    4a:b5:a9:3e:55:2c:e2:3e:a8:aa:70:56:30:be:3d:
                    da:35:d2:00:0c:81:71:b3:ca:15:75:68:73:95:84:
                    9e:ba:b1:11:35:1e:0e:42:02:a7:a6:f1:38:57:51:
                    21:51:59:b7:ef:96:94:62:b1:cf:63:96:70:5e:5e:
                    1e:b1:00:83:c0:61:d6:02:e2:63:d7:f3:69:54:27:
                    b4:7c:41:4a:c0:a8:a6:e6:28:b7:e7:a1:55:75:61:
                    f1:47:7a:bb:b7:5a:e4:6e:44:1d:f8:46:a4:12:b7:
                    47:82:70:b5:a2:e0:96:56:1c:46:bc:30:45:17:22:
                    b3:ee:5c:36:b8:26:df:f7:16:09:ef:52:f2:69:97:
                    b8:e1:28:3d:e8:60:84:5c:10:11:ac:9d:2c:30:72:
                    4a:6b:cd:0a:06:92:af:7c:48:7d:de:23:bf:7c:c7:
                    9a:66:0e:a4:d3:3d:c7:71:c8:39:12:32:2d:05:1c:
                    4d:21:17:ba:c7:fa:a4:47:ca:8c:f3:f8:ac:40:4f:
                    8b:ae:86:85:38:d6:7c:76:d7:12:47:54:63:0c:10:
                    72:9e:3d:1c:84:49:0b:3e:39:7b:74:48:55:80:0b:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:58:A5:44:39:1B:F9:8D:E8:11:16:42:CD:0A:8F:66:86:03:3B:F7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:30:8d:3d:92:5c:a8:7c:76:4e:4d:f4:59:73:f4:bc:43:72:
         46:7f:e6:29:3f:e3:71:a1:e6:48:a9:dc:87:d3:fe:e7:cb:1f:
         65:5d:53:dd:01:42:1c:07:2b:40:46:ab:5f:8b:2f:74:55:f5:
         b6:3d:06:d0:5e:49:4b:f7:92:8c:e1:f7:e6:60:0c:6d:1c:60:
         95:c9:3d:a1:21:e1:07:0a:d3:95:40:5b:bd:68:77:69:25:10:
         a8:0e:39:f1:86:81:c7:23:89:25:1b:cf:57:e6:fb:0f:5d:93:
         bb:12:a6:77:82:a4:02:5c:57:16:9b:9f:6f:ef:c2:fa:b7:f8:
         5b:f7:4c:37:d6:dc:d9:81:b4:85:aa:a3:4b:96:60:9b:a3:98:
         91:2b:cd:38:cb:82:98:af:5a:0c:15:ac:2e:16:2f:3b:a8:cc:
         72:1e:ce:c7:b8:2d:95:74:ff:c0:3d:97:e5:b2:8f:a4:e9:eb:
         1a:d6:af:b7:72:0d:07:5f:59:4f:e0:71:44:c6:69:3f:d9:64:
         c1:42:c2:29:91:28:5e:bc:80:94:32:26:dd:1d:a6:d2:39:7c:
         08:dc:78:60:36:ee:dc:d3:61:af:82:59:c7:3d:2f:99:c3:4c:
         11:e6:32:c8:0e:90:95:4f:cf:75:f5:74:31:df:c2:d8:fe:9d:
         91:b2:11:7c
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUDDroMlm4GzarcHl3V6EGELccCqMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwMzA3MjAyNVoX
DTIzMDMwMzA3MjUyNVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEQjk1OTU5MEVCRkExQzA2QTJDMjdBMzQ1RjA2MjEyN0UzNEU2NUE1NzI3
QUEwNUIzQzEyNEFCRURDNEFCNUE5M0U1NTJDRTIzRUE4QUE3MDU2MzBCRTNEREEz
NUQyMDAwQzgxNzFCM0NBMTU3NTY4NzM5NTg0OUVCQUIxMTEzNTFFMEU0MjAyQTdB
NkYxMzg1NzUxMjE1MTU5QjdFRjk2OTQ2MkIxQ0Y2Mzk2NzA1RTVFMUVCMTAwODND
MDYxRDYwMkUyNjNEN0YzNjk1NDI3QjQ3QzQxNEFDMEE4QTZFNjI4QjdFN0ExNTU3
NTYxRjE0NzdBQkJCNzVBRTQ2RTQ0MURGODQ2QTQxMkI3NDc4MjcwQjVBMkUwOTY1
NjFDNDZCQzMwNDUxNzIyQjNFRTVDMzZCODI2REZGNzE2MDlFRjUyRjI2OTk3QjhF
MTI4M0RFODYwODQ1QzEwMTFBQzlEMkMzMDcyNEE2QkNEMEEwNjkyQUY3QzQ4N0RE
RTIzQkY3Q0M3OUE2NjBFQTREMzNEQzc3MUM4MzkxMjMyMkQwNTFDNEQyMTE3QkFD
N0ZBQTQ0N0NBOENGM0Y4QUM0MDRGOEJBRTg2ODUzOEQ2N0M3NkQ3MTI0NzU0NjMw
QzEwNzI5RTNEMUM4NDQ5MEIzRTM5N0I3NDQ4NTU4MDBCQTczRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblZWQ6/ocBqLCejRfBiEn
405lpXJ6oFs8Ekq+3Eq1qT5VLOI+qKpwVjC+Pdo10gAMgXGzyhV1aHOVhJ66sRE1
Hg5CAqem8ThXUSFRWbfvlpRisc9jlnBeXh6xAIPAYdYC4mPX82lUJ7R8QUrAqKbm
KLfnoVV1YfFHeru3WuRuRB34RqQSt0eCcLWi4JZWHEa8MEUXIrPuXDa4Jt/3Fgnv
UvJpl7jhKD3oYIRcEBGsnSwwckprzQoGkq98SH3eI798x5pmDqTTPcdxyDkSMi0F
HE0hF7rH+qRHyozz+KxAT4uuhoU41nx21xJHVGMMEHKePRyESQs+OXt0SFWAC6c9
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUz1ilRDkb+Y3oERZCzQqPZoYDO/cwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzODMyMmUzMjMzMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7bqMA0GCSqG
SIb3DQEBCwUAA4IBAQACMI09klyofHZOTfRZc/S8Q3JGf+YpP+NxoeZIqdyH0/7n
yx9lXVPdAUIcBytARqtfiy90VfW2PQbQXklL95KM4ffmYAxtHGCVyT2hIeEHCtOV
QFu9aHdpJRCoDjnxhoHHI4klG89X5vsPXZO7EqZ3gqQCXFcWm59v78L6t/hb90w3
1tzZgbSFqqNLlmCbo5iRK804y4KYr1oMFawuFi87qMxyHs7HuC2VdP/APZflso+k
6esa1q+3cg0HX1lP4HFExmk/2WTBQsIpkShevICUMibdHabSOXwI3HhgNu7c02Gv
glnHPS+Zw0wR5jLIDpCVT8919XQx38LY/p2RshF8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org