Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138332e302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          7NnkzTsYg1l+oF4ZVLiowoqtiFoyEicajZBn9dtOqjU=
Subject key identifier:   7E:BF:99:3A:B9:0B:43:4D:A1:EF:26:5D:B8:92:FE:B1:B5:B4:33:7D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       489B3FAEAC2D1E1E466A23EECAA2D6106940CD8D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e302e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:24 +0000
ROA not before:           Thu 03 Mar 2022 07:20:24 +0000
ROA not after:            Fri 03 Mar 2023 07:25:24 +0000
asID:                     17995
IP address blocks:        103.183.0.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9b:3f:ae:ac:2d:1e:1e:46:6a:23:ee:ca:a2:d6:10:69:40:cd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:24 2022 GMT
            Not After : Mar  3 07:25:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:5b:27:d5:5c:fb:a9:41:63:77:cc:36:ad:
                    32:15:1b:7a:bb:90:e8:5a:a0:36:eb:39:e0:39:6b:
                    af:21:22:48:3e:19:21:0c:3a:cf:21:b8:ad:ac:ec:
                    d0:79:cc:ca:03:ba:cc:71:66:38:b2:71:cb:5d:21:
                    6c:29:3d:1d:28:f3:45:e2:f2:e8:e8:35:dc:93:4a:
                    83:74:32:73:c4:fc:8e:23:89:1a:2e:89:fb:86:87:
                    c3:dd:17:8e:c0:6d:75:d2:90:19:64:63:2f:7e:ff:
                    8a:27:5e:b8:eb:4c:56:cd:39:6a:af:93:3b:33:40:
                    00:85:ef:e1:2b:18:4d:27:c7:c3:76:b2:d6:ec:49:
                    88:ad:2d:1f:a0:34:bc:fa:95:5f:4b:3d:4f:3e:df:
                    70:4d:80:12:ad:0a:8a:27:a9:f9:19:21:29:c3:49:
                    10:53:50:a4:80:b3:1c:52:6c:c9:8d:72:3e:df:2c:
                    78:bc:93:c5:48:0a:46:36:60:6e:97:28:32:82:22:
                    ee:38:80:01:56:4c:25:1b:15:44:92:7e:4e:de:20:
                    6c:fc:8a:f5:e9:9a:90:25:79:75:19:99:0f:64:c3:
                    a5:8a:b0:f4:3b:79:fa:f7:51:8a:82:e3:e1:65:22:
                    24:ae:f3:bf:cf:e0:c4:2b:e4:e0:a4:9a:1a:b8:5c:
                    e8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BF:99:3A:B9:0B:43:4D:A1:EF:26:5D:B8:92:FE:B1:B5:B4:33:7D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:70:59:ac:86:e4:f3:02:49:fa:1b:48:e8:47:94:2d:da:b9:
         f8:ce:0d:0b:95:8a:1d:f0:86:9e:69:70:66:50:db:f6:df:3e:
         47:36:ac:bc:f6:b9:ec:0c:b9:c9:fa:88:62:ff:d4:7c:e8:38:
         cb:bd:66:9e:e3:06:c8:c1:81:6b:01:e9:ae:7a:d2:1f:0b:ca:
         51:f4:fe:ca:54:0b:01:9d:6e:8e:c1:bc:59:3b:9c:6f:95:04:
         34:cd:2a:ad:b8:29:43:e7:a9:00:f9:2d:65:11:75:fb:68:70:
         03:78:9e:2e:ed:1e:c3:16:ec:6a:fb:53:24:c3:c0:04:05:a9:
         b1:6b:99:c1:a8:52:54:e1:9f:6e:62:7e:4b:21:ac:74:1f:19:
         8c:57:d9:63:6a:ee:21:89:7f:da:e0:1b:33:0d:87:79:c6:d1:
         4b:02:fc:5d:6e:d2:aa:5a:11:23:76:a7:9b:a5:73:eb:44:0c:
         57:be:d7:95:ba:76:7f:c2:1b:23:86:7b:c2:08:95:83:25:ab:
         29:fa:3a:47:a0:f6:45:c7:a8:62:ce:20:d5:37:f4:78:97:63:
         24:53:b9:cf:06:25:92:c1:6d:e6:64:c0:da:88:7e:1d:31:a5:
         27:e6:7a:b1:3a:6f:b9:d2:37:c0:f3:f5:d1:ae:f0:af:1a:cd:
         38:29:b9:45
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUSJs/rqwtHh5GaiPuyqLWEGlAzY0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwMzA3MjAyNFoX
DTIzMDMwMzA3MjUyNFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCQTkzNUIyN0Q1NUNGQkE5NDE2Mzc3Q0MzNkFEMzIxNTFCN0FCQjkwRTg1
QUEwMzZFQjM5RTAzOTZCQUYyMTIyNDgzRTE5MjEwQzNBQ0YyMUI4QURBQ0VDRDA3
OUNDQ0EwM0JBQ0M3MTY2MzhCMjcxQ0I1RDIxNkMyOTNEMUQyOEYzNDVFMkYyRThF
ODM1REM5MzRBODM3NDMyNzNDNEZDOEUyMzg5MUEyRTg5RkI4Njg3QzNERDE3OEVD
MDZENzVEMjkwMTk2NDYzMkY3RUZGOEEyNzVFQjhFQjRDNTZDRDM5NkFBRjkzM0Iz
MzQwMDA4NUVGRTEyQjE4NEQyN0M3QzM3NkIyRDZFQzQ5ODhBRDJEMUZBMDM0QkNG
QTk1NUY0QjNENEYzRURGNzA0RDgwMTJBRDBBOEEyN0E5RjkxOTIxMjlDMzQ5MTA1
MzUwQTQ4MEIzMUM1MjZDQzk4RDcyM0VERjJDNzhCQzkzQzU0ODBBNDYzNjYwNkU5
NzI4MzI4MjIyRUUzODgwMDE1NjRDMjUxQjE1NDQ5MjdFNEVERTIwNkNGQzhBRjVF
OTlBOTAyNTc5NzUxOTk5MEY2NEMzQTU4QUIwRjQzQjc5RkFGNzUxOEE4MkUzRTE2
NTIyMjRBRUYzQkZDRkUwQzQyQkU0RTBBNDlBMUFCODVDRTg4NTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6k1sn1Vz7qUFjd8w2rTIV
G3q7kOhaoDbrOeA5a68hIkg+GSEMOs8huK2s7NB5zMoDusxxZjiycctdIWwpPR0o
80Xi8ujoNdyTSoN0MnPE/I4jiRouifuGh8PdF47AbXXSkBlkYy9+/4onXrjrTFbN
OWqvkzszQACF7+ErGE0nx8N2stbsSYitLR+gNLz6lV9LPU8+33BNgBKtCoonqfkZ
ISnDSRBTUKSAsxxSbMmNcj7fLHi8k8VICkY2YG6XKDKCIu44gAFWTCUbFUSSfk7e
IGz8ivXpmpAleXUZmQ9kw6WKsPQ7efr3UYqC4+FlIiSu87/P4MQr5OCkmhq4XOiF
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUfr+ZOrkLQ02h7yZduJL+sbW0M30wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzODMzMmUzMDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzczOTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntwAwDQYJKoZIhvcN
AQELBQADggEBAEVwWayG5PMCSfobSOhHlC3aufjODQuVih3whp5pcGZQ2/bfPkc2
rLz2uewMucn6iGL/1HzoOMu9Zp7jBsjBgWsB6a560h8LylH0/spUCwGdbo7BvFk7
nG+VBDTNKq24KUPnqQD5LWURdftocAN4ni7tHsMW7Gr7UyTDwAQFqbFrmcGoUlTh
n25ifkshrHQfGYxX2WNq7iGJf9rgGzMNh3nG0UsC/F1u0qpaESN2p5ulc+tEDFe+
15W6dn/CGyOGe8IIlYMlqyn6Okeg9kXHqGLOINU39HiXYyRTuc8GJZLBbeZkwNqI
fh0xpSfmerE6b7nSN8Dz9dGu8K8azTgpuUU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org