Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139392e3233362e302f32322d3234203d3e2030.roa
File:                     3130332e3139392e3233362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          VMk7Jldfrj/wvmOnhTC/CNNd1CeCT6AfmLeDEKswzKY=
Subject key identifier:   5C:FF:21:BC:C3:87:B4:AB:D5:F0:47:80:CE:73:5B:CB:FB:F5:05:10
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       12B638DCA06CF674A45DD66AB2FE88F88861FF9C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139392e3233362e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:33:50 +0000
ROA not before:           Wed 02 Feb 2022 06:28:50 +0000
ROA not after:            Thu 02 Feb 2023 06:33:50 +0000
asID:                     0
IP address blocks:        103.199.236.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b6:38:dc:a0:6c:f6:74:a4:5d:d6:6a:b2:fe:88:f8:88:61:ff:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:28:50 2022 GMT
            Not After : Feb  2 06:33:50 2023 GMT
        Subject: CN=3082010A0282010100B95A90E7B3F971A9617F9026BAE81A6D9A0ECAD714A52BBAB65918838383371F2DEDF13B4F1861BAF0CF92AE5E70E929B1F855FCC73632BF7D379740AC51572E5D42CDF0F85D804B032C1DE782C26476344A8A7D8596E9EF5A7B7AA69C736E46A466EE6EC1DF5B28CC79C8B3FBF11B0395FBAC8F255C505BA6EBEB74D23DB1763E7B8DB8E163ADC97FB7F5213BAA98C1157C3274459BA18FF4F713B998DA3CD06A3022F8A45450E25ADB9C980721918F112E1AF55D9BBEE81DEF38FC7042DF441DBE9A2B8AB5AEDEA04CF9F3B22B7258FE8FD469425E6213ACBAC98567B39F283B0730A8A8DC2C5EBBB1E0470E72558AF4975889BE5F746182A97D141B8FC0D50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:90:e7:b3:f9:71:a9:61:7f:90:26:ba:e8:
                    1a:6d:9a:0e:ca:d7:14:a5:2b:ba:b6:59:18:83:83:
                    83:37:1f:2d:ed:f1:3b:4f:18:61:ba:f0:cf:92:ae:
                    5e:70:e9:29:b1:f8:55:fc:c7:36:32:bf:7d:37:97:
                    40:ac:51:57:2e:5d:42:cd:f0:f8:5d:80:4b:03:2c:
                    1d:e7:82:c2:64:76:34:4a:8a:7d:85:96:e9:ef:5a:
                    7b:7a:a6:9c:73:6e:46:a4:66:ee:6e:c1:df:5b:28:
                    cc:79:c8:b3:fb:f1:1b:03:95:fb:ac:8f:25:5c:50:
                    5b:a6:eb:eb:74:d2:3d:b1:76:3e:7b:8d:b8:e1:63:
                    ad:c9:7f:b7:f5:21:3b:aa:98:c1:15:7c:32:74:45:
                    9b:a1:8f:f4:f7:13:b9:98:da:3c:d0:6a:30:22:f8:
                    a4:54:50:e2:5a:db:9c:98:07:21:91:8f:11:2e:1a:
                    f5:5d:9b:be:e8:1d:ef:38:fc:70:42:df:44:1d:be:
                    9a:2b:8a:b5:ae:de:a0:4c:f9:f3:b2:2b:72:58:fe:
                    8f:d4:69:42:5e:62:13:ac:ba:c9:85:67:b3:9f:28:
                    3b:07:30:a8:a8:dc:2c:5e:bb:b1:e0:47:0e:72:55:
                    8a:f4:97:58:89:be:5f:74:61:82:a9:7d:14:1b:8f:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FF:21:BC:C3:87:B4:AB:D5:F0:47:80:CE:73:5B:CB:FB:F5:05:10
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139392e3233362e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:37:8b:42:11:9a:2b:cc:89:00:9b:fa:3c:31:d8:a0:06:ba:
         58:83:b3:1b:d3:88:3e:08:71:03:62:23:c1:33:9e:12:aa:66:
         78:04:d4:56:32:1b:e4:7a:db:59:63:b8:61:6f:41:62:09:63:
         3e:a6:bc:7f:06:60:c2:1b:4d:a9:72:bf:ed:85:df:79:06:e3:
         62:9b:59:a9:55:f9:1a:36:15:b1:66:61:ce:43:ff:56:de:79:
         87:30:59:8a:6c:13:ba:61:cd:cc:4e:12:b8:a3:b0:cf:6f:e2:
         a7:1c:66:83:30:2b:76:e7:50:6a:f2:55:fb:01:26:95:d3:65:
         33:33:33:90:2a:4b:a8:5c:42:f1:ca:c4:7f:a1:2f:b9:be:69:
         21:a3:4d:3e:69:f0:ee:31:6f:fb:01:60:09:2d:39:c7:95:59:
         5f:1e:0f:ab:36:58:9c:e3:c9:a1:e8:e6:87:8a:40:d8:ab:c2:
         17:cf:01:45:19:e0:07:89:a0:d4:65:7d:b4:26:13:7a:0e:cc:
         f3:2d:a6:99:5a:b7:46:4a:f2:d7:77:6c:d8:6f:f5:62:d8:27:
         4e:c0:d9:7e:17:64:ce:01:cd:a0:bb:40:68:ae:1d:e8:9c:57:
         9a:74:cb:69:4c:56:94:89:95:53:02:3f:6b:fb:93:d5:1b:00:
         a9:a5:78:13
-----BEGIN CERTIFICATE-----
MIIHATCCBemgAwIBAgIUErY43KBs9nSkXdZqsv6I+Ihh/5wwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIwMjA2Mjg1MFoX
DTIzMDIwMjA2MzM1MFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCOTVBOTBFN0IzRjk3MUE5NjE3RjkwMjZCQUU4MUE2RDlBMEVDQUQ3MTRB
NTJCQkFCNjU5MTg4MzgzODMzNzFGMkRFREYxM0I0RjE4NjFCQUYwQ0Y5MkFFNUU3
MEU5MjlCMUY4NTVGQ0M3MzYzMkJGN0QzNzk3NDBBQzUxNTcyRTVENDJDREYwRjg1
RDgwNEIwMzJDMURFNzgyQzI2NDc2MzQ0QThBN0Q4NTk2RTlFRjVBN0I3QUE2OUM3
MzZFNDZBNDY2RUU2RUMxREY1QjI4Q0M3OUM4QjNGQkYxMUIwMzk1RkJBQzhGMjU1
QzUwNUJBNkVCRUI3NEQyM0RCMTc2M0U3QjhEQjhFMTYzQURDOTdGQjdGNTIxM0JB
QTk4QzExNTdDMzI3NDQ1OUJBMThGRjRGNzEzQjk5OERBM0NEMDZBMzAyMkY4QTQ1
NDUwRTI1QURCOUM5ODA3MjE5MThGMTEyRTFBRjU1RDlCQkVFODFERUYzOEZDNzA0
MkRGNDQxREJFOUEyQjhBQjVBRURFQTA0Q0Y5RjNCMjJCNzI1OEZFOEZENDY5NDI1
RTYyMTNBQ0JBQzk4NTY3QjM5RjI4M0IwNzMwQThBOERDMkM1RUJCQjFFMDQ3MEU3
MjU1OEFGNDk3NTg4OUJFNUY3NDYxODJBOTdEMTQxQjhGQzBENTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WpDns/lxqWF/kCa66Bpt
mg7K1xSlK7q2WRiDg4M3Hy3t8TtPGGG68M+Srl5w6Smx+FX8xzYyv303l0CsUVcu
XULN8PhdgEsDLB3ngsJkdjRKin2FlunvWnt6ppxzbkakZu5uwd9bKMx5yLP78RsD
lfusjyVcUFum6+t00j2xdj57jbjhY63Jf7f1ITuqmMEVfDJ0RZuhj/T3E7mY2jzQ
ajAi+KRUUOJa25yYByGRjxEuGvVdm77oHe84/HBC30QdvporirWu3qBM+fOyK3JY
/o/UaUJeYhOsusmFZ7OfKDsHMKio3Cxeu7HgRw5yVYr0l1iJvl90YYKpfRQbj8DV
AgMBAAGjggH4MIIB9DAdBgNVHQ4EFgQUXP8hvMOHtKvV8EeAznNby/v1BRAwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB8BggrBgEF
BQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTM5MzkyZTMyMzMzNjJlMzAyZjMy
MzIyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8fsMA0GCSqGSIb3DQEBCwUA
A4IBAQB9N4tCEZorzIkAm/o8MdigBrpYg7Mb04g+CHEDYiPBM54SqmZ4BNRWMhvk
ettZY7hhb0FiCWM+prx/BmDCG02pcr/thd95BuNim1mpVfkaNhWxZmHOQ/9W3nmH
MFmKbBO6Yc3MThK4o7DPb+KnHGaDMCt251Bq8lX7ASaV02UzMzOQKkuoXELxysR/
oS+5vmkho00+afDuMW/7AWAJLTnHlVlfHg+rNlic48mh6OaHikDYq8IXzwFFGeAH
iaDUZX20JhN6DszzLaaZWrdGSvLXd2zYb/Vi2CdOwNl+F2TOAc2gu0Borh3onFea
dMtpTFaUiZVTAj9r+5PVGwCppXgT
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org