Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38372e3230312e302f32342d3234203d3e2030.roa
File:                     3130332e38372e3230312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          FWas3A/gWoBcDuOvPLq/7OEXP5neKXpJQ8NItSr+xV0=
Subject key identifier:   5B:B0:87:36:4C:85:F2:84:C1:43:DC:B0:01:A7:C0:25:AB:B5:C3:BB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       18EDC4CCA550D34681A668EAD83F8FC1FD87C9F4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38372e3230312e302f32342d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:17:17 +0000
ROA not before:           Wed 02 Feb 2022 06:12:17 +0000
ROA not after:            Thu 02 Feb 2023 06:17:17 +0000
asID:                     0
IP address blocks:        103.87.201.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ed:c4:cc:a5:50:d3:46:81:a6:68:ea:d8:3f:8f:c1:fd:87:c9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:12:17 2022 GMT
            Not After : Feb  2 06:17:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:42:a3:54:ec:d2:52:0b:c6:5b:6b:d0:5b:
                    f9:d6:7b:41:d2:b1:d1:82:df:88:d5:be:a6:65:9e:
                    e1:7e:b3:a2:a5:07:b3:11:24:8a:4f:62:d6:b8:4d:
                    05:bb:0d:c9:50:17:9e:2a:70:54:16:93:de:e4:42:
                    23:e8:f3:34:12:86:31:d0:44:12:44:43:e7:f0:15:
                    c9:41:f5:79:c9:75:95:ba:69:11:38:99:3c:70:9e:
                    d1:68:64:26:d0:1d:b1:bf:23:4f:19:3e:76:f5:35:
                    da:bf:42:db:c0:d4:49:5c:6f:cf:2d:e1:04:f4:82:
                    14:d3:64:bf:01:76:af:ef:84:8a:f5:45:0f:a9:7b:
                    6e:c8:af:ca:a3:70:0d:94:25:2b:35:08:86:95:a2:
                    53:3a:2a:58:f5:d7:ac:fb:2d:4b:14:f8:b1:f8:a1:
                    96:01:d2:19:78:84:d4:9b:3a:fb:07:c4:03:10:2f:
                    cc:d4:21:2b:fe:4d:7e:c0:8c:a2:53:4e:65:13:eb:
                    c3:10:d5:74:bd:49:71:cd:14:40:49:a8:f2:9e:45:
                    b1:ad:45:b5:20:90:da:96:db:79:0a:5e:fb:fa:f2:
                    3f:b2:cf:e2:5a:ec:2d:bf:56:aa:ba:fe:b2:e7:04:
                    49:26:40:3f:43:fd:87:cf:38:f5:f1:94:87:2e:d5:
                    b4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B0:87:36:4C:85:F2:84:C1:43:DC:B0:01:A7:C0:25:AB:B5:C3:BB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38372e3230312e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:da:f7:c2:1a:fb:7a:d1:d8:b4:9f:86:b4:8a:b0:b8:b3:
         c7:9f:25:32:1e:29:5f:e8:a5:a0:5f:75:c4:1c:55:97:da:ea:
         33:9b:13:7d:c7:55:63:cb:6f:2f:10:47:5b:5b:67:ab:3b:e7:
         2d:c9:b0:c0:7e:c9:ab:f7:c9:c0:0a:9c:d3:3f:06:09:b1:4c:
         7f:99:5f:4c:3e:51:db:2f:1d:ea:62:8a:81:a3:b4:13:3f:40:
         4c:85:4a:fa:af:46:70:31:5c:2c:d2:aa:66:82:52:ac:f5:79:
         f6:cc:41:d6:1a:71:86:44:f9:30:67:4f:bf:98:02:c8:2b:96:
         04:48:18:20:94:5c:86:c8:40:0e:06:d6:2d:d6:b9:cd:3b:d2:
         4e:34:7c:74:ae:99:29:6f:2c:6a:0e:86:6c:21:9e:90:2d:c1:
         d8:08:98:0c:35:17:59:ca:b0:ef:76:83:7c:7b:93:e4:71:f6:
         24:f0:7a:32:e2:09:01:0d:3c:ab:52:a8:90:43:f9:f0:0d:44:
         65:ff:83:3b:15:05:16:4d:fd:1d:55:bb:ff:5b:a8:bf:0f:f1:
         c5:9e:6a:f8:79:7e:22:fd:44:bc:f1:e7:77:5b:e7:63:c8:52:
         77:dc:33:56:73:d2:19:b4:c3:14:33:88:6c:e2:00:53:d2:94:
         08:b0:3c:ef
-----BEGIN CERTIFICATE-----
MIIG/zCCBeegAwIBAgIUGO3EzKVQ00aBpmjq2D+Pwf2HyfQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIwMjA2MTIxN1oX
DTIzMDIwMjA2MTcxN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBENDZGNDJBMzU0RUNEMjUyMEJDNjVCNkJEMDVCRjlENjdCNDFEMkIxRDE4
MkRGODhENUJFQTY2NTlFRTE3RUIzQTJBNTA3QjMxMTI0OEE0RjYyRDZCODREMDVC
QjBEQzk1MDE3OUUyQTcwNTQxNjkzREVFNDQyMjNFOEYzMzQxMjg2MzFEMDQ0MTI0
NDQzRTdGMDE1Qzk0MUY1NzlDOTc1OTVCQTY5MTEzODk5M0M3MDlFRDE2ODY0MjZE
MDFEQjFCRjIzNEYxOTNFNzZGNTM1REFCRjQyREJDMEQ0NDk1QzZGQ0YyREUxMDRG
NDgyMTREMzY0QkYwMTc2QUZFRjg0OEFGNTQ1MEZBOTdCNkVDOEFGQ0FBMzcwMEQ5
NDI1MkIzNTA4ODY5NUEyNTMzQTJBNThGNUQ3QUNGQjJENEIxNEY4QjFGOEExOTYw
MUQyMTk3ODg0RDQ5QjNBRkIwN0M0MDMxMDJGQ0NENDIxMkJGRTREN0VDMDhDQTI1
MzRFNjUxM0VCQzMxMEQ1NzRCRDQ5NzFDRDE0NDA0OUE4RjI5RTQ1QjFBRDQ1QjUy
MDkwREE5NkRCNzkwQTVFRkJGQUYyM0ZCMkNGRTI1QUVDMkRCRjU2QUFCQUZFQjJF
NzA0NDkyNjQwM0Y0M0ZEODdDRjM4RjVGMTk0ODcyRUQ1QjRBNzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUb0KjVOzSUgvGW2vQW/nW
e0HSsdGC34jVvqZlnuF+s6KlB7MRJIpPYta4TQW7DclQF54qcFQWk97kQiPo8zQS
hjHQRBJEQ+fwFclB9XnJdZW6aRE4mTxwntFoZCbQHbG/I08ZPnb1Ndq/QtvA1Elc
b88t4QT0ghTTZL8Bdq/vhIr1RQ+pe27Ir8qjcA2UJSs1CIaVolM6Klj116z7LUsU
+LH4oZYB0hl4hNSbOvsHxAMQL8zUISv+TX7AjKJTTmUT68MQ1XS9SXHNFEBJqPKe
RbGtRbUgkNqW23kKXvv68j+yz+Ja7C2/Vqq6/rLnBEkmQD9D/YfPOPXxlIcu1bSn
AgMBAAGjggH2MIIB8jAdBgNVHQ4EFgQUW7CHNkyF8oTBQ9ywAafAJau1w7swHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB6BggrBgEF
BQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzODM3MmUzMjMwMzEyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdXyTANBgkqhkiG9w0BAQsFAAOC
AQEALRLa98Ia+3rR2LSfhrSKsLizx58lMh4pX+iloF91xBxVl9rqM5sTfcdVY8tv
LxBHW1tnqzvnLcmwwH7Jq/fJwAqc0z8GCbFMf5lfTD5R2y8d6mKKgaO0Ez9ATIVK
+q9GcDFcLNKqZoJSrPV59sxB1hpxhkT5MGdPv5gCyCuWBEgYIJRchshADgbWLda5
zTvSTjR8dK6ZKW8sag6GbCGekC3B2AiYDDUXWcqw73aDfHuT5HH2JPB6MuIJAQ08
q1KokEP58A1EZf+DOxUFFk39HVW7/1uovw/xxZ5q+Hl+Iv1EvPHnd1vnY8hSd9wz
VnPSGbTDFDOIbOIAU9KUCLA87w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org