Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3233362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          4+IviBZy49bII2JeLV+BMaq/Zz1QWE9wdR6W7wB8eNs=
Subject key identifier:   80:73:48:3F:28:CB:49:0F:97:2E:C0:AD:AC:65:A4:4E:05:08:18:F1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       532B2A6FD5BF2547C180379CB44C1C855C83AF11
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233362e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:26 +0000
ROA not before:           Thu 03 Mar 2022 07:20:26 +0000
ROA not after:            Fri 03 Mar 2023 07:25:26 +0000
asID:                     17995
IP address blocks:        103.182.236.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2b:2a:6f:d5:bf:25:47:c1:80:37:9c:b4:4c:1c:85:5c:83:af:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:26 2022 GMT
            Not After : Mar  3 07:25:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e9:1c:3e:75:4b:2c:79:0c:de:3a:4d:eb:81:
                    b7:82:8e:ee:40:bb:fe:e3:7f:10:bb:d6:8e:71:af:
                    41:de:3b:a6:b2:31:0b:71:87:32:59:88:0c:11:98:
                    6b:24:c6:1e:1e:dd:a3:3e:fd:16:54:0c:72:fb:e0:
                    66:33:5b:61:f5:fe:93:7c:be:e7:2d:9b:95:3c:5c:
                    5f:0a:6b:4d:64:3c:8b:13:08:22:d6:5b:77:49:a9:
                    57:a6:66:6a:34:e2:1c:4a:4d:3e:4a:08:dc:6d:c1:
                    f4:df:a2:f9:50:e5:c7:9c:37:5e:47:94:cd:4d:b5:
                    d5:50:fb:bf:53:14:0a:00:bc:7e:7f:c6:ad:6d:98:
                    53:ea:6f:0e:49:5e:77:a3:45:58:56:45:d7:79:7d:
                    0b:0c:60:39:e1:5a:a2:76:fa:8d:3d:1c:e4:a2:29:
                    ae:0a:85:05:1b:db:1f:bf:8c:21:ee:63:60:0c:15:
                    f2:ae:0d:b1:82:25:65:7c:09:24:9e:fa:de:e3:20:
                    8d:c9:46:bc:8a:06:55:74:a1:98:a0:98:84:ab:5d:
                    f1:22:d1:2f:f3:08:a1:eb:a7:4c:57:b9:35:04:9a:
                    e3:52:5b:82:68:2c:15:73:b8:d8:30:e2:4d:fb:ba:
                    08:d5:19:8c:3a:1d:f8:6b:02:3e:07:0c:d0:15:84:
                    20:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:73:48:3F:28:CB:49:0F:97:2E:C0:AD:AC:65:A4:4E:05:08:18:F1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:8d:d0:f0:62:8e:81:49:6b:9d:fe:af:06:f9:13:94:f6:04:
         8f:2f:40:b4:e3:8e:b9:78:16:d7:40:cf:97:aa:a6:8a:e4:4c:
         82:17:24:18:87:0a:4e:51:5c:76:71:32:f4:56:03:b3:42:71:
         cb:e0:98:24:eb:88:71:02:32:d9:ac:1e:84:f5:bd:50:6a:9c:
         33:61:5c:ec:b7:a4:76:3e:1a:34:a7:58:47:f0:42:f7:f9:a4:
         a7:35:b3:c9:6b:5e:e2:d9:58:ba:8c:a5:41:ae:7b:b4:b3:7e:
         7a:28:e6:17:0e:3f:d8:b9:37:e4:6e:ad:68:7a:90:3b:06:1d:
         c3:d7:30:58:1d:07:94:ad:a1:49:4f:2f:75:3d:cc:97:98:7f:
         89:62:db:bb:2e:7f:5c:dd:58:e0:ad:e4:af:3c:15:de:e3:90:
         ca:22:90:d6:d5:f2:c6:23:9c:4f:e6:98:7c:52:f4:84:8f:bb:
         84:d6:05:7a:64:da:a7:7e:d2:ec:d1:63:ff:21:87:27:33:fe:
         eb:b1:fe:82:b8:52:b6:ea:39:43:34:1f:e2:e0:21:5a:25:72:
         9f:eb:d4:34:98:54:e1:74:e2:ee:dc:3c:f6:c7:d3:79:03:e9:
         26:24:f9:b5:d5:5f:56:9b:cd:7e:36:22:ef:b6:08:33:f1:79:
         6a:1b:79:db
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUUysqb9W/JUfBgDectEwchVyDrxEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwMzA3MjAyNloX
DTIzMDMwMzA3MjUyNlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFOEU5MUMzRTc1NEIyQzc5MENERTNBNERFQjgxQjc4MjhFRUU0MEJCRkVF
MzdGMTBCQkQ2OEU3MUFGNDFERTNCQTZCMjMxMEI3MTg3MzI1OTg4MEMxMTk4NkIy
NEM2MUUxRUREQTMzRUZEMTY1NDBDNzJGQkUwNjYzMzVCNjFGNUZFOTM3Q0JFRTcy
RDlCOTUzQzVDNUYwQTZCNEQ2NDNDOEIxMzA4MjJENjVCNzc0OUE5NTdBNjY2NkEz
NEUyMUM0QTREM0U0QTA4REM2REMxRjRERkEyRjk1MEU1Qzc5QzM3NUU0Nzk0Q0Q0
REI1RDU1MEZCQkY1MzE0MEEwMEJDN0U3RkM2QUQ2RDk4NTNFQTZGMEU0OTVFNzdB
MzQ1NTg1NjQ1RDc3OTdEMEIwQzYwMzlFMTVBQTI3NkZBOEQzRDFDRTRBMjI5QUUw
QTg1MDUxQkRCMUZCRjhDMjFFRTYzNjAwQzE1RjJBRTBEQjE4MjI1NjU3QzA5MjQ5
RUZBREVFMzIwOERDOTQ2QkM4QTA2NTU3NEExOThBMDk4ODRBQjVERjEyMkQxMkZG
MzA4QTFFQkE3NEM1N0I5MzUwNDlBRTM1MjVCODI2ODJDMTU3M0I4RDgzMEUyNERG
QkJBMDhENTE5OEMzQTFERjg2QjAyM0UwNzBDRDAxNTg0MjBERjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo6Rw+dUsseQzeOk3rgbeC
ju5Au/7jfxC71o5xr0HeO6ayMQtxhzJZiAwRmGskxh4e3aM+/RZUDHL74GYzW2H1
/pN8vuctm5U8XF8Ka01kPIsTCCLWW3dJqVemZmo04hxKTT5KCNxtwfTfovlQ5cec
N15HlM1NtdVQ+79TFAoAvH5/xq1tmFPqbw5JXnejRVhWRdd5fQsMYDnhWqJ2+o09
HOSiKa4KhQUb2x+/jCHuY2AMFfKuDbGCJWV8CSSe+t7jII3JRryKBlV0oZigmISr
XfEi0S/zCKHrp0xXuTUEmuNSW4JoLBVzuNgw4k37ugjVGYw6HfhrAj4HDNAVhCDf
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUgHNIPyjLSQ+XLsCtrGWkTgUIGPEwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzODMyMmUzMjMzMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7bsMA0GCSqG
SIb3DQEBCwUAA4IBAQAVjdDwYo6BSWud/q8G+ROU9gSPL0C04465eBbXQM+XqqaK
5EyCFyQYhwpOUVx2cTL0VgOzQnHL4Jgk64hxAjLZrB6E9b1QapwzYVzst6R2Pho0
p1hH8EL3+aSnNbPJa17i2Vi6jKVBrnu0s356KOYXDj/YuTfkbq1oepA7Bh3D1zBY
HQeUraFJTy91PcyXmH+JYtu7Ln9c3VjgreSvPBXe45DKIpDW1fLGI5xP5ph8UvSE
j7uE1gV6ZNqnftLs0WP/IYcnM/7rsf6CuFK26jlDNB/i4CFaJXKf69Q0mFThdOLu
3Dz2x9N5A+kmJPm11V9Wm81+NiLvtggz8XlqG3nb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org