Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234372e3130302e302f32322d3234203d3e2030.roa
File:                     3130332e3234372e3130302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          25qWXsBCNB1Mkc1d16OJJGVmb1awtJaWbexPuqBFFfQ=
Subject key identifier:   A9:65:BC:F2:B3:B5:56:4C:35:38:8C:29:A0:66:E2:64:F5:77:ED:14
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       200C50ACD5E556E97050C6FDE38450FBB5898138
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234372e3130302e302f32322d3234203d3e2030.roa
Signing time:             Wed 19 May 2021 08:21:02 +0000
ROA not before:           Wed 19 May 2021 08:16:02 +0000
ROA not after:            Thu 19 May 2022 08:21:02 +0000
asID:                     0
IP address blocks:        103.247.100.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0c:50:ac:d5:e5:56:e9:70:50:c6:fd:e3:84:50:fb:b5:89:81:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 19 08:16:02 2021 GMT
            Not After : May 19 08:21:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:2f:4d:93:7d:bb:c9:a5:76:a0:41:d4:d1:
                    2d:a9:85:a3:62:a3:52:83:81:71:fa:48:18:e3:b6:
                    44:d9:d6:ac:20:8d:90:a1:71:fc:57:d2:49:d5:b0:
                    c3:cf:6e:cf:a6:05:4f:60:ce:34:69:2e:d9:ff:ad:
                    3e:45:03:3c:cf:a0:d9:67:e3:bd:fa:5d:ac:12:01:
                    55:d3:69:b0:73:36:b9:49:0d:74:d1:74:a9:1d:bd:
                    28:a7:db:ff:fc:9d:1d:45:b5:d5:bb:4a:c0:3b:09:
                    ef:8e:54:57:5e:53:53:02:59:8d:93:a5:8e:f2:98:
                    81:c7:dc:7c:bb:63:66:c7:87:92:0a:98:10:22:5f:
                    57:d4:e6:a2:88:75:d4:46:86:95:98:05:48:a3:89:
                    07:69:46:18:f9:3f:e2:cf:c9:10:69:d6:1a:77:0c:
                    0d:5e:44:cd:ea:15:1a:30:2a:2d:44:98:02:b0:54:
                    34:0f:9c:64:a1:76:ce:4d:6d:2f:a9:78:0b:b8:b7:
                    4f:7d:cd:e1:e2:88:b5:8e:0f:b3:6b:19:ab:50:00:
                    3f:1a:f1:31:35:3e:3a:e8:99:d2:06:7e:5d:5f:33:
                    77:35:4c:c8:27:78:04:d1:2b:5e:bf:81:c3:94:a5:
                    28:e7:49:8b:53:66:b5:46:c2:f3:88:fd:2d:ba:a3:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:65:BC:F2:B3:B5:56:4C:35:38:8C:29:A0:66:E2:64:F5:77:ED:14
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234372e3130302e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:92:1b:3a:e8:4d:eb:53:18:be:f6:98:f6:20:3f:8e:ea:0f:
         2a:08:d0:da:02:2e:63:b1:5d:e7:51:59:c3:3f:06:33:0f:fa:
         e9:c4:47:06:ee:2c:19:eb:6d:4b:1b:78:72:63:4f:53:a3:29:
         26:68:5d:75:ac:c6:fd:ec:fa:18:1e:d1:ed:95:1d:ce:7b:91:
         37:18:84:ac:33:3f:fd:f5:96:6e:17:f0:24:2c:af:cd:09:6c:
         88:cb:66:1f:13:d3:0a:77:55:67:7d:78:f0:92:56:f2:a7:c4:
         0a:98:41:81:11:5b:ef:fb:49:af:94:39:23:5d:10:2d:72:4f:
         06:81:5d:2f:0f:d1:4b:84:2e:e3:57:ba:c8:d2:10:63:79:2e:
         5b:22:1d:ec:93:a8:65:2c:9e:df:d8:f5:68:11:9b:fd:b3:16:
         c1:11:f3:c6:31:3f:e0:12:b7:19:28:91:79:b2:37:99:73:d5:
         ed:6a:ce:58:e8:f9:ad:64:7a:3f:1f:a9:18:13:75:1d:2d:ec:
         23:f7:45:8c:ae:9f:39:7c:6d:68:16:39:14:96:9b:c8:98:c9:
         2c:25:95:e7:c8:3c:8a:0c:e8:f5:3e:53:8d:0d:ab:28:57:8c:
         42:ea:c6:c6:92:63:95:22:21:f9:c5:80:5e:bf:ee:99:4f:92:
         3e:e0:a8:46
-----BEGIN CERTIFICATE-----
MIIHATCCBemgAwIBAgIUIAxQrNXlVulwUMb944RQ+7WJgTgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDUxOTA4MTYwMloX
DTIyMDUxOTA4MjEwMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDNjE2MkY0RDkzN0RCQkM5QTU3NkEwNDFENEQxMkRBOTg1QTM2MkEzNTI4
MzgxNzFGQTQ4MThFM0I2NDREOUQ2QUMyMDhEOTBBMTcxRkM1N0QyNDlENUIwQzND
RjZFQ0ZBNjA1NEY2MENFMzQ2OTJFRDlGRkFEM0U0NTAzM0NDRkEwRDk2N0UzQkRG
QTVEQUMxMjAxNTVEMzY5QjA3MzM2Qjk0OTBENzREMTc0QTkxREJEMjhBN0RCRkZG
QzlEMUQ0NUI1RDVCQjRBQzAzQjA5RUY4RTU0NTc1RTUzNTMwMjU5OEQ5M0E1OEVG
Mjk4ODFDN0RDN0NCQjYzNjZDNzg3OTIwQTk4MTAyMjVGNTdENEU2QTI4ODc1RDQ0
Njg2OTU5ODA1NDhBMzg5MDc2OTQ2MThGOTNGRTJDRkM5MTA2OUQ2MUE3NzBDMEQ1
RTQ0Q0RFQTE1MUEzMDJBMkQ0NDk4MDJCMDU0MzQwRjlDNjRBMTc2Q0U0RDZEMkZB
OTc4MEJCOEI3NEY3RENERTFFMjg4QjU4RTBGQjM2QjE5QUI1MDAwM0YxQUYxMzEz
NTNFM0FFODk5RDIwNjdFNUQ1RjMzNzczNTRDQzgyNzc4MDREMTJCNUVCRjgxQzM5
NEE1MjhFNzQ5OEI1MzY2QjU0NkMyRjM4OEZEMkRCQUEzRjZFQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFi9Nk327yaV2oEHU0S2p
haNio1KDgXH6SBjjtkTZ1qwgjZChcfxX0knVsMPPbs+mBU9gzjRpLtn/rT5FAzzP
oNln4736XawSAVXTabBzNrlJDXTRdKkdvSin2//8nR1FtdW7SsA7Ce+OVFdeU1MC
WY2TpY7ymIHH3Hy7Y2bHh5IKmBAiX1fU5qKIddRGhpWYBUijiQdpRhj5P+LPyRBp
1hp3DA1eRM3qFRowKi1EmAKwVDQPnGShds5NbS+peAu4t099zeHiiLWOD7NrGatQ
AD8a8TE1PjromdIGfl1fM3c1TMgneATRK16/gcOUpSjnSYtTZrVGwvOI/S26o/br
AgMBAAGjggH4MIIB9DAdBgNVHQ4EFgQUqWW88rO1Vkw1OIwpoGbiZPV37RQwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB8BggrBgEF
BQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMjM0MzcyZTMxMzAzMDJlMzAyZjMy
MzIyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/dkMA0GCSqGSIb3DQEBCwUA
A4IBAQAJkhs66E3rUxi+9pj2ID+O6g8qCNDaAi5jsV3nUVnDPwYzD/rpxEcG7iwZ
621LG3hyY09ToykmaF11rMb97PoYHtHtlR3Oe5E3GISsMz/99ZZuF/AkLK/NCWyI
y2YfE9MKd1VnfXjwklbyp8QKmEGBEVvv+0mvlDkjXRAtck8GgV0vD9FLhC7jV7rI
0hBjeS5bIh3sk6hlLJ7f2PVoEZv9sxbBEfPGMT/gErcZKJF5sjeZc9Xtas5Y6Pmt
ZHo/H6kYE3UdLewj90WMrp85fG1oFjkUlpvImMksJZXnyDyKDOj1PlONDasoV4xC
6sbGkmOVIiH5xYBev+6ZT5I+4KhG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org