Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3136302e302f32322d3234203d3e20313333383030.roa
File:                     3130332e39332e3136302e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          rvWx7IhL1HYIwJq97S8Reo5bI2/8zIB2GgGCwCge+h0=
Subject key identifier:   B2:B8:1D:E1:45:36:C7:40:6A:CA:6A:16:3A:3C:09:2F:63:5A:D3:EE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       24E6C57396B6788D9BD8B4A22B67AEA35915C3A0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3136302e302f32322d3234203d3e20313333383030.roa
Signing time:             Sat 09 Oct 2021 04:00:02 +0000
ROA not before:           Sat 09 Oct 2021 03:55:02 +0000
ROA not after:            Sun 09 Oct 2022 04:00:02 +0000
asID:                     133800
IP address blocks:        103.93.160.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e6:c5:73:96:b6:78:8d:9b:d8:b4:a2:2b:67:ae:a3:59:15:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  9 03:55:02 2021 GMT
            Not After : Oct  9 04:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:f1:9f:83:86:a2:81:3b:c6:e4:b9:cb:c5:
                    0c:fa:f0:5e:97:9e:9e:e7:f9:79:81:3b:36:d4:ce:
                    9e:a1:4d:2f:c1:26:03:c7:7f:3d:e1:67:38:b9:58:
                    25:95:36:c2:cd:ef:63:3c:77:0b:b9:df:11:c5:d5:
                    a2:0d:8f:94:76:be:84:88:bf:10:d0:88:cd:b1:51:
                    ca:24:f4:63:3b:0e:69:f5:11:e1:77:e9:91:ec:56:
                    6a:7a:3f:7b:30:cc:25:af:b0:7e:83:c9:dc:eb:46:
                    d8:58:45:31:5e:d2:3f:16:a3:fd:d8:0e:00:da:aa:
                    dc:73:3e:2e:e4:bf:a7:87:90:aa:d0:f7:ce:30:04:
                    0f:75:a5:d8:5e:13:f0:34:48:dc:9f:9c:9d:88:2f:
                    0b:49:d8:d5:53:38:78:da:39:ac:dc:90:e2:56:53:
                    62:e2:31:06:2a:c5:16:3b:54:43:11:03:3e:5e:67:
                    73:bf:fb:2f:ef:7b:c1:bf:e8:8b:14:24:a7:0e:5d:
                    56:ce:cc:4d:78:33:86:42:58:98:72:26:7b:7a:df:
                    32:6b:d8:2b:0f:45:30:a9:52:3a:a8:d9:b0:a2:a1:
                    32:6c:e6:cf:15:a8:00:0d:da:e7:fa:d9:91:2a:08:
                    d2:4f:18:81:4a:00:d7:c1:f7:4d:97:a1:04:58:30:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B8:1D:E1:45:36:C7:40:6A:CA:6A:16:3A:3C:09:2F:63:5A:D3:EE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3136302e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:99:fb:3a:34:63:b8:e1:88:45:2e:40:a6:ae:54:11:5d:0e:
         f4:c0:8b:3a:83:73:b3:a8:96:e3:43:5c:5c:0c:31:b5:50:93:
         3b:a5:70:18:f2:80:0d:cb:ef:e8:9b:f9:54:ba:fa:82:05:cc:
         0e:b9:06:bd:7d:53:e8:64:03:8b:71:13:6f:f8:06:e6:a1:bb:
         4e:35:1c:a7:ea:d9:2d:21:d2:4e:f7:9c:b9:21:31:13:13:8b:
         30:d5:25:29:2a:4c:36:f7:bb:20:64:8b:ea:ec:7e:0b:39:70:
         af:27:c5:5a:54:6b:cc:27:44:53:56:77:b8:0b:5a:17:83:f0:
         0a:3c:38:71:71:2c:40:55:62:9a:5a:d2:1a:e5:a2:af:12:88:
         d6:c7:3b:a1:2f:e8:0e:51:91:f8:a4:c3:19:74:88:c2:eb:a9:
         70:0f:2b:0e:6b:64:32:3c:71:27:85:74:73:a5:aa:a4:4b:8e:
         55:d7:a4:18:e7:4f:74:b7:df:e1:49:7d:2b:73:59:77:2d:f5:
         ee:15:68:94:f2:19:69:bf:d8:ed:f1:0b:ef:d2:ac:c5:ec:00:
         af:a2:37:29:c3:e8:fe:fe:6b:c6:e2:86:d5:c0:5f:48:0a:7f:
         6a:d2:f6:f0:9f:5d:e4:a3:64:53:a0:d2:4a:88:b8:59:7d:a8:
         03:0a:50:76
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUJObFc5a2eI2b2LSiK2euo1kVw6AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAwOTAzNTUwMloX
DTIyMTAwOTA0MDAwMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDMjVFRjE5RjgzODZBMjgxM0JDNkU0QjlDQkM1MENGQUYwNUU5NzlFOUVF
N0Y5Nzk4MTNCMzZENENFOUVBMTREMkZDMTI2MDNDNzdGM0RFMTY3MzhCOTU4MjU5
NTM2QzJDREVGNjMzQzc3MEJCOURGMTFDNUQ1QTIwRDhGOTQ3NkJFODQ4OEJGMTBE
MDg4Q0RCMTUxQ0EyNEY0NjMzQjBFNjlGNTExRTE3N0U5OTFFQzU2NkE3QTNGN0Iz
MENDMjVBRkIwN0U4M0M5RENFQjQ2RDg1ODQ1MzE1RUQyM0YxNkEzRkREODBFMDBE
QUFBREM3MzNFMkVFNEJGQTc4NzkwQUFEMEY3Q0UzMDA0MEY3NUE1RDg1RTEzRjAz
NDQ4REM5RjlDOUQ4ODJGMEI0OUQ4RDU1MzM4NzhEQTM5QUNEQzkwRTI1NjUzNjJF
MjMxMDYyQUM1MTYzQjU0NDMxMTAzM0U1RTY3NzNCRkZCMkZFRjdCQzFCRkU4OEIx
NDI0QTcwRTVENTZDRUNDNEQ3ODMzODY0MjU4OTg3MjI2N0I3QURGMzI2QkQ4MkIw
RjQ1MzBBOTUyM0FBOEQ5QjBBMkExMzI2Q0U2Q0YxNUE4MDAwRERBRTdGQUQ5OTEy
QTA4RDI0RjE4ODE0QTAwRDdDMUY3NEQ5N0ExMDQ1ODMwNUNGRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXvGfg4aigTvG5LnLxQz6
8F6Xnp7n+XmBOzbUzp6hTS/BJgPHfz3hZzi5WCWVNsLN72M8dwu53xHF1aINj5R2
voSIvxDQiM2xUcok9GM7Dmn1EeF36ZHsVmp6P3swzCWvsH6DydzrRthYRTFe0j8W
o/3YDgDaqtxzPi7kv6eHkKrQ984wBA91pdheE/A0SNyfnJ2ILwtJ2NVTOHjaOazc
kOJWU2LiMQYqxRY7VEMRAz5eZ3O/+y/ve8G/6IsUJKcOXVbOzE14M4ZCWJhyJnt6
3zJr2CsPRTCpUjqo2bCioTJs5s8VqAAN2uf62ZEqCNJPGIFKANfB902XoQRYMFz9
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUsrgd4UU2x0BqymoWOjwJL2Na0+4wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzkzMzJlMzEzNjMwMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ12gMA0GCSqG
SIb3DQEBCwUAA4IBAQAkmfs6NGO44YhFLkCmrlQRXQ70wIs6g3OzqJbjQ1xcDDG1
UJM7pXAY8oANy+/om/lUuvqCBcwOuQa9fVPoZAOLcRNv+AbmobtONRyn6tktIdJO
95y5ITETE4sw1SUpKkw297sgZIvq7H4LOXCvJ8VaVGvMJ0RTVne4C1oXg/AKPDhx
cSxAVWKaWtIa5aKvEojWxzuhL+gOUZH4pMMZdIjC66lwDysOa2QyPHEnhXRzpaqk
S45V16QY5090t9/hSX0rc1l3LfXuFWiU8hlpv9jt8Qvv0qzF7ACvojcpw+j+/mvG
4obVwF9ICn9q0vbwn13ko2RToNJKiLhZfagDClB2
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org