Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133342e36362e302f32332d3234203d3e20313331373237.roa
File:                     3130332e3133342e36362e302f32332d3234203d3e20313331373237.roa (raw, json)
Hash identifier:          2BJ5p/ih95JfaFlZA/1+qqJFAbXlzSfaq1y9WLfUH34=
Subject key identifier:   84:10:D4:52:0D:BC:84:6E:F2:EB:17:6C:45:DA:AA:10:C3:BA:84:8B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       362C6546409471E98335C63B4EAE7961FD7CAAC3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133342e36362e302f32332d3234203d3e20313331373237.roa
Signing time:             Wed 03 Nov 2021 07:00:00 +0000
ROA not before:           Wed 03 Nov 2021 06:55:00 +0000
ROA not after:            Thu 03 Nov 2022 07:00:00 +0000
asID:                     131727
IP address blocks:        103.134.66.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2c:65:46:40:94:71:e9:83:35:c6:3b:4e:ae:79:61:fd:7c:aa:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  3 06:55:00 2021 GMT
            Not After : Nov  3 07:00:00 2022 GMT
        Subject: CN=3082010A0282010100BF980BF66D1CC96DE4A58E4815A12C8580F8855009D02719BF6CA72ECA29C0848341353271B0D3EF25CDA00F435ABD9AC7C99DD033574CF4DB956E761C7D49657702ED3A457DC28A0D9A8A078AFC60B031A77399E443E20A80E6C67AB48B3321C96C911C3832D820EC0EE80693D335905961BE8BF16CE68DF1380348FE214FBC5DEEEF75B16E166CDC0CBB83626E03F018997B761E9867FD8286F0DC21A8AAD19EE2F1F840A6FEC29F714E32196E1288E1AF3EBF8C7E1286B9675FC3088B01CB79519A4FFF34FB691ECEE6600E99B6F0E74B21824DF2D7099DDA17AF785DBC7226319D3CB59A8119EC88720114F9331E390D6C70CC0F6C499988188CF76EE96B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:0b:f6:6d:1c:c9:6d:e4:a5:8e:48:15:a1:
                    2c:85:80:f8:85:50:09:d0:27:19:bf:6c:a7:2e:ca:
                    29:c0:84:83:41:35:32:71:b0:d3:ef:25:cd:a0:0f:
                    43:5a:bd:9a:c7:c9:9d:d0:33:57:4c:f4:db:95:6e:
                    76:1c:7d:49:65:77:02:ed:3a:45:7d:c2:8a:0d:9a:
                    8a:07:8a:fc:60:b0:31:a7:73:99:e4:43:e2:0a:80:
                    e6:c6:7a:b4:8b:33:21:c9:6c:91:1c:38:32:d8:20:
                    ec:0e:e8:06:93:d3:35:90:59:61:be:8b:f1:6c:e6:
                    8d:f1:38:03:48:fe:21:4f:bc:5d:ee:ef:75:b1:6e:
                    16:6c:dc:0c:bb:83:62:6e:03:f0:18:99:7b:76:1e:
                    98:67:fd:82:86:f0:dc:21:a8:aa:d1:9e:e2:f1:f8:
                    40:a6:fe:c2:9f:71:4e:32:19:6e:12:88:e1:af:3e:
                    bf:8c:7e:12:86:b9:67:5f:c3:08:8b:01:cb:79:51:
                    9a:4f:ff:34:fb:69:1e:ce:e6:60:0e:99:b6:f0:e7:
                    4b:21:82:4d:f2:d7:09:9d:da:17:af:78:5d:bc:72:
                    26:31:9d:3c:b5:9a:81:19:ec:88:72:01:14:f9:33:
                    1e:39:0d:6c:70:cc:0f:6c:49:99:88:18:8c:f7:6e:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:10:D4:52:0D:BC:84:6E:F2:EB:17:6C:45:DA:AA:10:C3:BA:84:8B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133342e36362e302f32332d3234203d3e20313331373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:a1:86:66:56:78:5e:0a:ab:e1:8f:79:7f:f1:9d:e0:88:ff:
         54:6a:59:36:a8:27:a3:ee:54:c9:ce:00:94:90:e4:97:f6:1b:
         c8:29:d1:3f:5b:f3:d8:b5:bc:fd:7d:c9:94:37:3f:71:66:20:
         33:b2:11:7c:0b:ab:db:b1:0e:7d:90:58:b9:03:f8:02:db:92:
         96:17:43:bd:89:94:cc:14:04:9f:5d:57:ed:2f:9c:58:50:91:
         75:b3:e7:73:2a:af:42:ac:7f:bf:75:9b:73:09:31:ec:d6:e8:
         84:7d:14:ed:58:29:bd:0c:fe:47:8e:89:60:b2:55:12:75:0c:
         73:f4:b3:af:c4:02:a3:63:a2:83:20:ff:d8:6e:8c:13:ad:fb:
         3c:d7:51:60:a8:e1:7d:e2:59:a4:ec:c0:94:45:c5:0f:4c:29:
         2c:0f:35:a9:9b:f2:60:14:c3:e1:7a:c5:15:75:58:b9:e6:79:
         3c:98:44:fc:44:dd:2c:3a:9e:0f:d8:9c:56:6e:73:10:08:11:
         00:e8:bc:00:0e:79:55:d1:21:5d:b1:d0:ea:31:c7:2b:e5:71:
         b9:bf:63:6e:2d:06:39:7f:f4:c1:b8:ca:0e:7c:33:d5:2a:ec:
         ce:4a:b8:9d:f4:28:32:5b:8a:d9:70:95:52:d8:f2:aa:5c:d6:
         fe:ae:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:04 2023 by rpki-client on console-ams.rpki-client.org