Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
File:                     3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (raw, json)
Hash identifier:          yRZcU2Z1vU5lK/eHUhKTv0BmFUXuA4JbsCl/QYQ/7es=
Subject key identifier:   2B:59:37:6F:FA:DA:07:9A:16:9F:90:32:37:15:7D:E5:D0:DF:E2:D5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       585CC737F5BFC6AE935D80405BFCB07179147FE5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
Signing time:             Thu 01 Jul 2021 04:19:42 +0000
ROA not before:           Thu 01 Jul 2021 04:14:42 +0000
ROA not after:            Fri 01 Jul 2022 04:19:42 +0000
asID:                     58485
IP address blocks:        103.247.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5c:c7:37:f5:bf:c6:ae:93:5d:80:40:5b:fc:b0:71:79:14:7f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 04:14:42 2021 GMT
            Not After : Jul  1 04:19:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:b0:13:49:51:e6:ae:6c:87:a3:b3:17:6f:
                    d2:25:d6:82:f1:13:8e:17:a6:f6:dd:84:cd:07:a5:
                    34:98:f7:ad:da:a1:bf:07:13:66:5d:cd:e7:14:64:
                    40:60:1e:89:14:f3:99:e2:39:5d:db:41:8d:46:05:
                    09:e1:25:87:84:df:61:6f:f4:f2:11:63:11:41:d2:
                    78:e3:15:a3:35:78:2e:02:fb:52:48:0a:88:f7:eb:
                    e0:8f:31:6e:d3:a7:6b:c1:fe:6c:bb:87:16:ff:95:
                    c2:9c:c8:a3:a3:12:ed:ed:ea:e6:2c:bf:77:6c:79:
                    4d:6b:39:6e:34:74:0a:d7:ac:2a:77:5e:37:7d:c0:
                    fa:42:52:17:77:ad:90:ff:59:17:cb:3a:1e:62:76:
                    b9:ac:55:72:05:63:7c:76:13:0b:97:d2:b5:cf:2c:
                    ab:57:ce:1d:14:61:99:13:61:03:a9:ff:2a:76:60:
                    d7:c1:f4:61:00:b2:ea:b0:9c:b7:01:5a:9c:15:bd:
                    86:1d:58:75:50:b7:e7:d9:b7:50:ac:2f:5c:e2:11:
                    2f:8a:f5:08:3a:1d:c2:5e:4b:99:04:26:08:da:61:
                    84:ab:75:58:c2:69:5d:b4:16:d0:61:92:64:29:d0:
                    cf:ef:8c:9f:6e:b2:c1:43:11:39:65:d0:58:a0:0d:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:59:37:6F:FA:DA:07:9A:16:9F:90:32:37:15:7D:E5:D0:DF:E2:D5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:4c:c5:d5:12:b8:59:9f:9a:5c:a6:76:e7:a6:0e:d0:e7:
         0b:c5:d5:b3:31:e8:7f:93:20:e0:08:4e:15:b2:16:f8:56:a0:
         b9:20:46:4a:f0:72:9e:e5:f9:f3:51:96:6f:8e:11:db:80:27:
         ab:bb:14:dc:ba:76:65:e7:b2:2f:d3:51:d8:6a:28:a5:04:fe:
         4b:46:8c:c2:6a:21:69:e3:de:a7:b6:28:e6:c3:90:29:ce:e6:
         ed:b6:c5:11:75:0e:9d:57:ca:08:40:ba:71:4d:7e:66:29:30:
         5d:e6:62:2a:3c:3f:ed:f2:c6:aa:9d:60:d4:e6:89:0e:03:95:
         79:83:5a:b7:26:f4:82:d8:ac:e5:93:4e:93:5b:49:e3:cc:34:
         86:b6:70:f4:83:59:17:70:c0:2d:18:8c:8e:77:27:a5:5c:14:
         7a:cf:5a:97:89:19:bd:67:3d:df:d8:06:2d:62:01:6e:a3:e0:
         bd:56:4d:88:d6:86:16:30:39:2e:f1:71:07:11:13:08:a5:bc:
         15:7b:1e:4a:2f:6f:51:6f:3e:a7:8a:93:bf:d0:eb:e9:92:12:
         d5:0f:d2:a9:b4:5b:d4:d3:f8:87:8b:46:db:68:4a:79:0b:f9:
         01:be:76:51:11:fe:ce:6f:c4:6b:31:e5:fb:2b:f6:1b:76:ba:
         7b:e9:0e:9e
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUWFzHN/W/xq6TXYBAW/ywcXkUf+UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA0MTQ0MloX
DTIyMDcwMTA0MTk0MlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCRUY0QjAxMzQ5NTFFNkFFNkM4N0EzQjMxNzZGRDIyNUQ2ODJGMTEzOEUx
N0E2RjZERDg0Q0QwN0E1MzQ5OEY3QUREQUExQkYwNzEzNjY1RENERTcxNDY0NDA2
MDFFODkxNEYzOTlFMjM5NUREQjQxOEQ0NjA1MDlFMTI1ODc4NERGNjE2RkY0RjIx
MTYzMTE0MUQyNzhFMzE1QTMzNTc4MkUwMkZCNTI0ODBBODhGN0VCRTA4RjMxNkVE
M0E3NkJDMUZFNkNCQjg3MTZGRjk1QzI5Q0M4QTNBMzEyRURFREVBRTYyQ0JGNzc2
Qzc5NEQ2QjM5NkUzNDc0MEFEN0FDMkE3NzVFMzc3REMwRkE0MjUyMTc3N0FEOTBG
RjU5MTdDQjNBMUU2Mjc2QjlBQzU1NzIwNTYzN0M3NjEzMEI5N0QyQjVDRjJDQUI1
N0NFMUQxNDYxOTkxMzYxMDNBOUZGMkE3NjYwRDdDMUY0NjEwMEIyRUFCMDlDQjcw
MTVBOUMxNUJEODYxRDU4NzU1MEI3RTdEOUI3NTBBQzJGNUNFMjExMkY4QUY1MDgz
QTFEQzI1RTRCOTkwNDI2MDhEQTYxODRBQjc1NThDMjY5NURCNDE2RDA2MTkyNjQy
OUQwQ0ZFRjhDOUY2RUIyQzE0MzExMzk2NUQwNThBMDBEMUY2MzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9LATSVHmrmyHo7MXb9Il
1oLxE44XpvbdhM0HpTSY963aob8HE2ZdzecUZEBgHokU85niOV3bQY1GBQnhJYeE
32Fv9PIRYxFB0njjFaM1eC4C+1JICoj36+CPMW7Tp2vB/my7hxb/lcKcyKOjEu3t
6uYsv3dseU1rOW40dArXrCp3Xjd9wPpCUhd3rZD/WRfLOh5idrmsVXIFY3x2EwuX
0rXPLKtXzh0UYZkTYQOp/yp2YNfB9GEAsuqwnLcBWpwVvYYdWHVQt+fZt1CsL1zi
ES+K9Qg6HcJeS5kEJgjaYYSrdVjCaV20FtBhkmQp0M/vjJ9ussFDETll0FigDR9j
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUK1k3b/raB5oWn5AyNxV95dDf4tUwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzIzNDM3MmUzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3FTANBgkqhkiG
9w0BAQsFAAOCAQEAFrFMxdUSuFmfmlymduemDtDnC8XVszHof5Mg4AhOFbIW+Fag
uSBGSvBynuX581GWb44R24Anq7sU3Lp2ZeeyL9NR2GoopQT+S0aMwmohaePep7Yo
5sOQKc7m7bbFEXUOnVfKCEC6cU1+ZikwXeZiKjw/7fLGqp1g1OaJDgOVeYNatyb0
gtis5ZNOk1tJ48w0hrZw9INZF3DALRiMjncnpVwUes9al4kZvWc939gGLWIBbqPg
vVZNiNaGFjA5LvFxBxETCKW8FXseSi9vUW8+p4qTv9Dr6ZIS1Q/SqbRb1NP4h4tG
22hKeQv5Ab52URH+zm/EazHl+yv2G3a6e+kOng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org