Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230372e3233362e302f32322d3234203d3e2030.roa
File:                     3130332e3230372e3233362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          tY9dPnap3lBWBRUZcs7kIxcLeDzNP8EI2O+jjdfNgQ8=
Subject key identifier:   5C:71:7C:61:E7:2A:B1:C8:65:11:C3:BE:A8:72:D6:5B:00:8A:C2:75
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5626E7E2D1F82FBF975E3B23875F6D0CA2737D93
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230372e3233362e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:34:23 +0000
ROA not before:           Wed 02 Feb 2022 06:29:23 +0000
ROA not after:            Thu 02 Feb 2023 06:34:23 +0000
asID:                     0
IP address blocks:        103.207.236.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:26:e7:e2:d1:f8:2f:bf:97:5e:3b:23:87:5f:6d:0c:a2:73:7d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:29:23 2022 GMT
            Not After : Feb  2 06:34:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:a9:48:34:2f:fa:ff:ba:6e:63:4d:5e:dc:
                    31:0c:32:b9:d6:54:f1:fc:3b:a2:7a:d7:36:2a:ab:
                    21:96:22:7e:16:74:0e:66:8a:7d:34:fa:bc:c2:ff:
                    3d:05:73:a3:7c:49:d0:a0:10:12:6d:ec:4b:b3:6b:
                    79:40:0d:81:94:0b:11:7f:31:fe:da:f9:3f:06:76:
                    4c:db:01:14:0d:3a:1f:70:05:06:db:b6:cb:86:15:
                    74:3a:62:7c:d2:86:37:28:f6:74:50:21:6d:98:e0:
                    c3:7b:37:07:82:5a:a0:56:ff:82:97:5e:ff:70:d3:
                    fc:8e:18:48:1f:cc:5d:6a:a1:5a:9c:93:8f:e8:4a:
                    f3:f9:b8:fd:b5:02:f4:98:be:c3:9a:40:65:aa:73:
                    e1:44:5e:55:36:62:20:42:df:0b:cb:6d:3a:76:9d:
                    ff:89:99:63:3e:cc:a4:3b:f6:fe:d7:53:da:f8:db:
                    07:1e:25:fd:6d:eb:8b:f2:99:03:e5:f8:26:4e:6e:
                    30:1f:9e:6d:9c:82:6d:a9:bb:c4:99:28:dd:5e:aa:
                    2e:d1:44:a8:22:f5:9b:41:29:f8:29:43:ad:87:96:
                    7b:b3:66:16:52:46:16:57:68:53:8a:0f:0e:c7:b5:
                    ad:3c:72:6a:5a:53:f5:af:68:0a:76:19:66:17:81:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:71:7C:61:E7:2A:B1:C8:65:11:C3:BE:A8:72:D6:5B:00:8A:C2:75
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230372e3233362e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:4a:bc:78:38:ea:27:6f:18:81:63:0a:a2:9a:ba:56:f5:
         1f:e0:46:1c:d6:2c:d5:67:a1:05:be:dc:d0:8f:8b:f6:80:a1:
         84:6f:0b:01:42:f7:11:78:8c:a9:22:c3:95:b9:5a:03:a7:6c:
         50:60:17:42:b7:fb:5c:87:0c:f5:bf:17:7a:c4:f6:93:5f:0d:
         83:34:44:a3:2c:2a:8f:ca:f2:20:73:a3:f8:eb:8d:c5:38:7e:
         38:45:28:9f:bc:05:e8:9d:f9:ff:d7:a4:74:00:12:0c:e6:fe:
         15:43:b0:da:70:c1:13:a2:97:6d:21:d8:ac:4f:0f:41:8f:6f:
         3a:3d:9a:ac:85:ce:67:be:ad:54:29:46:04:49:af:bc:15:9a:
         74:ea:e1:1a:f4:de:7b:f3:b6:55:0c:24:c2:fe:78:e9:d9:fc:
         6f:8c:de:0f:63:0f:12:5f:cf:ba:5c:9f:4f:54:f1:10:6a:ca:
         41:05:c5:19:a2:c1:ab:39:fa:82:ed:ef:66:e7:16:97:c4:b3:
         05:71:3d:9c:a9:49:1b:1c:a6:a5:f8:dc:28:cb:a3:de:d9:58:
         5a:a9:b3:bc:8c:20:27:2f:2f:b8:e6:7e:5e:35:bd:cc:c5:24:
         e8:60:51:49:15:67:8e:0d:5e:09:80:e2:3d:9d:05:2e:a8:68:
         bd:3a:ab:7d
-----BEGIN CERTIFICATE-----
MIIHATCCBemgAwIBAgIUVibn4tH4L7+XXjsjh19tDKJzfZMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIwMjA2MjkyM1oX
DTIzMDIwMjA2MzQyM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBQUVBQTk0ODM0MkZGQUZGQkE2RTYzNEQ1RURDMzEwQzMyQjlENjU0RjFG
QzNCQTI3QUQ3MzYyQUFCMjE5NjIyN0UxNjc0MEU2NjhBN0QzNEZBQkNDMkZGM0Qw
NTczQTM3QzQ5RDBBMDEwMTI2REVDNEJCMzZCNzk0MDBEODE5NDBCMTE3RjMxRkVE
QUY5M0YwNjc2NENEQjAxMTQwRDNBMUY3MDA1MDZEQkI2Q0I4NjE1NzQzQTYyN0NE
Mjg2MzcyOEY2NzQ1MDIxNkQ5OEUwQzM3QjM3MDc4MjVBQTA1NkZGODI5NzVFRkY3
MEQzRkM4RTE4NDgxRkNDNUQ2QUExNUE5QzkzOEZFODRBRjNGOUI4RkRCNTAyRjQ5
OEJFQzM5QTQwNjVBQTczRTE0NDVFNTUzNjYyMjA0MkRGMEJDQjZEM0E3NjlERkY4
OTk5NjMzRUNDQTQzQkY2RkVENzUzREFGOERCMDcxRTI1RkQ2REVCOEJGMjk5MDNF
NUY4MjY0RTZFMzAxRjlFNkQ5QzgyNkRBOUJCQzQ5OTI4REQ1RUFBMkVEMTQ0QTgy
MkY1OUI0MTI5RjgyOTQzQUQ4Nzk2N0JCMzY2MTY1MjQ2MTY1NzY4NTM4QTBGMEVD
N0I1QUQzQzcyNkE1QTUzRjVBRjY4MEE3NjE5NjYxNzgxMTQyNTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6qlINC/6/7puY01e3DEM
MrnWVPH8O6J61zYqqyGWIn4WdA5min00+rzC/z0Fc6N8SdCgEBJt7Euza3lADYGU
CxF/Mf7a+T8GdkzbARQNOh9wBQbbtsuGFXQ6YnzShjco9nRQIW2Y4MN7NweCWqBW
/4KXXv9w0/yOGEgfzF1qoVqck4/oSvP5uP21AvSYvsOaQGWqc+FEXlU2YiBC3wvL
bTp2nf+JmWM+zKQ79v7XU9r42wceJf1t64vymQPl+CZObjAfnm2cgm2pu8SZKN1e
qi7RRKgi9ZtBKfgpQ62HlnuzZhZSRhZXaFOKDw7Hta08cmpaU/WvaAp2GWYXgRQl
AgMBAAGjggH4MIIB9DAdBgNVHQ4EFgQUXHF8YecqschlEcO+qHLWWwCKwnUwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB8BggrBgEF
BQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMjMwMzcyZTMyMzMzNjJlMzAyZjMy
MzIyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8/sMA0GCSqGSIb3DQEBCwUA
A4IBAQBtlEq8eDjqJ28YgWMKopq6VvUf4EYc1izVZ6EFvtzQj4v2gKGEbwsBQvcR
eIypIsOVuVoDp2xQYBdCt/tchwz1vxd6xPaTXw2DNESjLCqPyvIgc6P4643FOH44
RSifvAXonfn/16R0ABIM5v4VQ7DacMETopdtIdisTw9Bj286PZqshc5nvq1UKUYE
Sa+8FZp06uEa9N5787ZVDCTC/njp2fxvjN4PYw8SX8+6XJ9PVPEQaspBBcUZosGr
OfqC7e9m5xaXxLMFcT2cqUkbHKal+Nwoy6Pe2VhaqbO8jCAnLy+45n5eNb3MxSTo
YFFJFWeODV4JgOI9nQUuqGi9Oqt9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org