Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139372e38392e302f32342d3234203d3e20313334363231.roa
File:                     3130332e3139372e38392e302f32342d3234203d3e20313334363231.roa (raw, json)
Hash identifier:          7lBYS8Ae3jGNs8Rj/v5V9IlSbOc4TtoF4c2x37Doe90=
Subject key identifier:   60:52:5E:A9:59:47:69:EC:D6:26:A3:4F:45:2B:87:CD:B3:1F:04:C3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3C8CFDDEE8D61D10DE495533229A80E9791DDE29
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139372e38392e302f32342d3234203d3e20313334363231.roa
Signing time:             Fri 03 Dec 2021 09:09:41 +0000
ROA not before:           Fri 03 Dec 2021 09:04:41 +0000
ROA not after:            Sat 03 Dec 2022 09:09:41 +0000
asID:                     134621
IP address blocks:        103.197.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8c:fd:de:e8:d6:1d:10:de:49:55:33:22:9a:80:e9:79:1d:de:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  3 09:04:41 2021 GMT
            Not After : Dec  3 09:09:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:ac:ca:3c:c8:18:2b:9a:c2:92:61:ef:a1:
                    6f:8f:93:63:ce:fd:57:75:ea:4a:8c:08:8e:51:61:
                    25:ce:78:85:c9:6b:a3:d1:d6:ba:26:15:c6:94:1b:
                    e0:1f:ef:f2:93:a3:2c:0d:a5:5e:2a:76:7a:df:ae:
                    d9:21:f7:40:57:68:9d:10:3f:39:2b:74:94:2c:e6:
                    ca:94:8a:ea:8a:7c:22:c8:31:60:64:a3:29:a1:1a:
                    f7:07:0e:42:a5:28:9b:53:54:e1:ff:8a:74:34:f7:
                    9c:d7:bd:2b:4d:3d:a6:15:b9:a0:c9:49:eb:59:9c:
                    d4:38:be:ad:f3:e0:9c:b1:87:12:79:de:10:14:bd:
                    f6:ea:57:f4:ff:13:67:19:65:4f:6e:e8:25:e8:d0:
                    40:a8:f2:57:b8:12:98:b6:c0:f3:f5:9b:33:1c:9a:
                    ca:e2:99:f3:aa:12:e0:7d:36:0e:4b:f5:ab:a0:79:
                    5e:05:00:8c:59:ab:c7:6b:0e:f5:8c:12:90:65:ac:
                    ed:13:2e:d8:4c:90:e3:72:0e:fe:70:8b:78:37:26:
                    4b:4f:69:83:9b:8d:1f:a6:81:fd:23:1b:b3:72:be:
                    b6:38:1b:16:b0:eb:7d:65:1a:dd:df:56:41:f3:38:
                    a8:cb:83:d5:be:44:d2:b5:74:7b:bf:ab:1e:80:91:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:52:5E:A9:59:47:69:EC:D6:26:A3:4F:45:2B:87:CD:B3:1F:04:C3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139372e38392e302f32342d3234203d3e20313334363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:65:0d:77:2b:4a:c7:50:f8:e7:ea:99:39:12:c6:a7:78:
         aa:07:f4:71:cf:aa:58:2c:b6:7c:63:d6:d7:a0:a5:f2:ac:cb:
         65:f5:7a:49:71:19:8d:b8:9a:f2:c7:7a:f9:21:e4:b9:cc:75:
         58:a6:c2:7b:66:e3:7f:59:3f:c6:f0:65:ff:e0:29:42:41:0f:
         9b:90:bb:37:73:44:1d:f0:12:f4:92:60:4f:b2:e9:a7:54:01:
         4b:42:24:fa:fd:ea:14:a8:4d:dd:f0:47:91:5b:9d:80:65:25:
         80:57:cb:82:91:ae:87:91:0d:03:e6:60:46:c7:4f:61:3f:2d:
         a0:ff:22:8e:58:09:1a:5b:62:5c:8c:6d:f0:b1:6f:74:79:00:
         19:b0:5e:1b:cb:00:cb:95:ee:6a:3d:e2:bb:d1:a0:2d:91:00:
         f9:ef:19:24:ab:54:d4:93:3d:19:5a:da:47:46:ea:98:36:97:
         f0:57:82:19:5d:7b:d5:f0:13:7b:6f:d4:6b:ed:62:4d:a0:33:
         7c:f1:ea:51:3f:fc:d1:e4:3e:87:b7:96:76:59:f2:7f:8a:52:
         f8:33:dc:33:52:a3:0d:01:83:05:a4:37:32:fd:08:d4:b0:9c:
         9b:7e:bc:e3:cc:69:88:11:b3:24:57:12:a5:89:c6:9f:7e:43:
         69:1d:d4:41
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUPIz93ujWHRDeSVUzIpqA6Xkd3ikwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTIwMzA5MDQ0MVoX
DTIyMTIwMzA5MDk0MVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMTkxQUNDQTNDQzgxODJCOUFDMjkyNjFFRkExNkY4RjkzNjNDRUZENTc3
NUVBNEE4QzA4OEU1MTYxMjVDRTc4ODVDOTZCQTNEMUQ2QkEyNjE1QzY5NDFCRTAx
RkVGRjI5M0EzMkMwREE1NUUyQTc2N0FERkFFRDkyMUY3NDA1NzY4OUQxMDNGMzky
Qjc0OTQyQ0U2Q0E5NDhBRUE4QTdDMjJDODMxNjA2NEEzMjlBMTFBRjcwNzBFNDJB
NTI4OUI1MzU0RTFGRjhBNzQzNEY3OUNEN0JEMkI0RDNEQTYxNUI5QTBDOTQ5RUI1
OTlDRDQzOEJFQURGM0UwOUNCMTg3MTI3OURFMTAxNEJERjZFQTU3RjRGRjEzNjcx
OTY1NEY2RUU4MjVFOEQwNDBBOEYyNTdCODEyOThCNkMwRjNGNTlCMzMxQzlBQ0FF
Mjk5RjNBQTEyRTA3RDM2MEU0QkY1QUJBMDc5NUUwNTAwOEM1OUFCQzc2QjBFRjU4
QzEyOTA2NUFDRUQxMzJFRDg0QzkwRTM3MjBFRkU3MDhCNzgzNzI2NEI0RjY5ODM5
QjhEMUZBNjgxRkQyMzFCQjM3MkJFQjYzODFCMTZCMEVCN0Q2NTFBRERERjU2NDFG
MzM4QThDQjgzRDVCRTQ0RDJCNTc0N0JCRkFCMUU4MDkxMEQ3QjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkazKPMgYK5rCkmHvoW+P
k2PO/Vd16kqMCI5RYSXOeIXJa6PR1romFcaUG+Af7/KToywNpV4qdnrfrtkh90BX
aJ0QPzkrdJQs5sqUiuqKfCLIMWBkoymhGvcHDkKlKJtTVOH/inQ095zXvStNPaYV
uaDJSetZnNQ4vq3z4JyxhxJ53hAUvfbqV/T/E2cZZU9u6CXo0ECo8le4Epi2wPP1
mzMcmsrimfOqEuB9Ng5L9augeV4FAIxZq8drDvWMEpBlrO0TLthMkONyDv5wi3g3
JktPaYObjR+mgf0jG7NyvrY4Gxaw631lGt3fVkHzOKjLg9W+RNK1dHu/qx6AkQ17
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUYFJeqVlHaezWJqNPRSuHzbMfBMMwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzOTM3MmUzODM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM0MzYzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8VZMA0GCSqG
SIb3DQEBCwUAA4IBAQCNAWUNdytKx1D45+qZORLGp3iqB/Rxz6pYLLZ8Y9bXoKXy
rMtl9XpJcRmNuJryx3r5IeS5zHVYpsJ7ZuN/WT/G8GX/4ClCQQ+bkLs3c0Qd8BL0
kmBPsumnVAFLQiT6/eoUqE3d8EeRW52AZSWAV8uCka6HkQ0D5mBGx09hPy2g/yKO
WAkaW2JcjG3wsW90eQAZsF4bywDLle5qPeK70aAtkQD57xkkq1TUkz0ZWtpHRuqY
NpfwV4IZXXvV8BN7b9Rr7WJNoDN88epRP/zR5D6Ht5Z2WfJ/ilL4M9wzUqMNAYMF
pDcy/QjUsJybfrzjzGmIEbMkVxKlicaffkNpHdRB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org