Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150512.roa
File:                     AS150512.roa (raw, json)
Hash identifier:          CW8yDFV+bKUBevuhJi0avaXnD+V5lp3wasepwLoW3hA=
Subject key identifier:   3A:17:51:FC:EE:82:57:BB:70:80:EE:9B:FA:40:53:05:9B:15:DD:B3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4F4AC0DEEC791AF8D18F0BD45662D6D276A0E964
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150512.roa
Signing time:             Mon 20 Feb 2023 04:04:08 +0000
ROA not before:           Mon 20 Feb 2023 03:59:08 +0000
ROA not after:            Mon 19 Feb 2024 04:04:08 +0000
asID:                     150512
IP address blocks:        103.54.82.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4a:c0:de:ec:79:1a:f8:d1:8f:0b:d4:56:62:d6:d2:76:a0:e9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 20 03:59:08 2023 GMT
            Not After : Feb 19 04:04:08 2024 GMT
        Subject: CN=3A1751FCEE8257BB7080EE9BFA4053059B15DDB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:be:ef:67:03:c8:3a:23:80:af:90:ba:4c:
                    8f:91:56:73:3a:2b:0d:5b:56:79:7a:d7:f4:27:93:
                    f9:0e:86:d2:8b:ec:13:1d:0b:4b:c9:87:79:c8:cd:
                    8a:9b:0e:61:61:9b:79:13:c6:12:d3:59:88:52:d2:
                    ec:35:11:4a:56:6e:88:55:2f:e6:24:c2:f0:64:af:
                    f6:41:f7:66:a7:2b:55:6a:5d:89:4c:71:d4:e3:66:
                    de:c3:0b:b4:21:e0:68:07:bb:1c:0e:94:0d:6d:64:
                    b6:cc:c4:19:bc:99:2e:f1:f6:75:78:f5:e7:11:a5:
                    09:8b:e9:41:3f:e3:eb:24:53:84:0e:75:54:46:6b:
                    d6:06:68:26:06:b6:6b:8d:7a:6f:5a:dd:f2:20:79:
                    65:c6:d7:d7:83:45:96:5c:00:eb:98:b9:96:c6:c1:
                    e4:0f:43:09:4b:1c:c9:09:94:d2:f5:0c:9b:6b:bc:
                    d6:a6:b0:b8:c1:72:7f:01:ed:b9:74:6a:32:72:81:
                    37:63:3c:34:11:c1:9f:05:da:02:a7:09:1a:1c:85:
                    b5:13:2f:d8:de:5a:1a:21:54:c5:80:9d:04:e9:a2:
                    39:6c:f4:7c:b2:86:23:ff:a7:f9:d5:3e:08:fc:9b:
                    18:4b:25:fd:47:2d:78:7c:f2:bc:89:0e:83:c7:68:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:17:51:FC:EE:82:57:BB:70:80:EE:9B:FA:40:53:05:9B:15:DD:B3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150512.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:39:92:67:83:98:1a:3b:03:5a:16:50:dd:f1:6e:82:38:a3:
         93:a4:24:78:d4:a2:29:d2:09:73:49:a7:ba:f6:06:a3:0e:ee:
         0c:ac:5b:12:37:e1:aa:2c:2a:36:44:a0:78:fe:2a:ec:36:a4:
         76:49:a3:54:09:a4:25:c9:04:4f:cd:40:e3:24:77:0b:6d:16:
         d7:b4:8c:e6:42:c4:a9:48:ff:ca:ae:e7:c4:61:91:31:04:48:
         e4:51:cb:67:0d:de:ad:0c:30:c3:ca:07:9d:96:f8:f8:af:74:
         8d:b7:9e:df:a8:26:27:7f:57:09:eb:48:d2:99:21:19:18:c6:
         cf:f5:ea:12:4f:e0:fa:68:44:1f:c4:9e:b6:db:b2:52:d4:2b:
         5c:fc:0b:2e:72:eb:1f:ec:70:19:dd:e4:3b:c0:87:85:b1:ba:
         06:d8:56:01:80:77:33:fe:5a:c6:6a:c4:ff:d0:08:92:6e:27:
         7f:93:07:17:59:26:8c:bf:51:53:ba:bb:5e:da:3c:79:60:6d:
         2c:d0:ff:d0:f3:b2:0c:45:80:da:b4:02:47:9f:f7:30:d6:c1:
         5b:b7:6b:1e:36:c6:62:fe:d4:c1:ff:85:d8:94:44:15:84:a7:
         39:e2:9a:08:69:12:55:1f:46:c4:48:3d:a6:5d:13:20:0b:e3:
         b1:c3:d3:f3
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUT0rA3ux5GvjRjwvUVmLW0nag6WQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDIyMDAzNTkwOFoX
DTI0MDIxOTA0MDQwOFowMzExMC8GA1UEAxMoM0ExNzUxRkNFRTgyNTdCQjcwODBF
RTlCRkE0MDUzMDU5QjE1RERCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANR9vu9nA8g6I4CvkLpMj5FWczorDVtWeXrX9CeT+Q6G0ovsEx0LS8mHecjN
ipsOYWGbeRPGEtNZiFLS7DURSlZuiFUv5iTC8GSv9kH3ZqcrVWpdiUxx1ONm3sML
tCHgaAe7HA6UDW1ktszEGbyZLvH2dXj15xGlCYvpQT/j6yRThA51VEZr1gZoJga2
a416b1rd8iB5ZcbX14NFllwA65i5lsbB5A9DCUscyQmU0vUMm2u81qawuMFyfwHt
uXRqMnKBN2M8NBHBnwXaAqcJGhyFtRMv2N5aGiFUxYCdBOmiOWz0fLKGI/+n+dU+
CPybGEsl/UcteHzyvIkOg8doZf0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ6F1H8
7oJXu3CA7pv6QFMFmxXdszAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDUxMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWc2UjANBgkqhkiG9w0BAQsFAAOCAQEAZjmSZ4OYGjsDWhZQ3fFu
gjijk6QkeNSiKdIJc0mnuvYGow7uDKxbEjfhqiwqNkSgeP4q7DakdkmjVAmkJckE
T81A4yR3C20W17SM5kLEqUj/yq7nxGGRMQRI5FHLZw3erQwww8oHnZb4+K90jbee
36gmJ39XCetI0pkhGRjGz/XqEk/g+mhEH8SettuyUtQrXPwLLnLrH+xwGd3kO8CH
hbG6BthWAYB3M/5axmrE/9AIkm4nf5MHF1kmjL9RU7q7Xto8eWBtLND/0POyDEWA
2rQCR5/3MNbBW7drHjbGYv7Uwf+F2JREFYSnOeKaCGkSVR9GxEg9pl0TIAvjscPT
8w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org