Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130352e3139322e302f32322d3234203d3e2030.roa
File:                     3130332e3130352e3139322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          vSVqhZBi+Xw3iUibvWGj1oUGEkM07gfHEcuNI7/D4+0=
Subject key identifier:   93:60:C9:89:B6:9A:B6:A2:56:4E:EF:36:D4:9A:86:F0:07:51:90:6F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       65A0279825594D10DFB04D5C4A47B70859837175
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130352e3139322e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:30:14 +0000
ROA not before:           Wed 02 Feb 2022 06:25:14 +0000
ROA not after:            Thu 02 Feb 2023 06:30:14 +0000
asID:                     0
IP address blocks:        103.105.192.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a0:27:98:25:59:4d:10:df:b0:4d:5c:4a:47:b7:08:59:83:71:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:25:14 2022 GMT
            Not After : Feb  2 06:30:14 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:ee:1f:0c:2b:89:eb:61:bb:df:ad:09:0e:
                    58:9a:a1:98:5d:1b:50:bc:eb:cf:d2:84:27:22:71:
                    a2:16:8f:30:2a:ff:03:7a:01:6a:35:88:a6:7b:97:
                    d1:ed:ed:c4:f2:90:7e:a9:05:64:94:07:95:e1:d2:
                    ae:65:72:b7:3e:c0:45:e7:53:ca:4f:40:e3:3b:3c:
                    56:bf:88:52:c1:66:fd:60:6f:24:30:62:31:93:b2:
                    a0:69:27:6a:e6:a4:70:f8:6f:46:2c:0c:e9:9e:0c:
                    17:dc:c0:df:d2:50:8c:73:2e:8b:cf:b7:37:74:58:
                    e1:00:b4:7d:80:cd:5a:10:ce:87:13:ee:a3:8b:59:
                    f0:f6:a6:92:94:4c:cd:c2:a4:55:59:9e:5e:55:ca:
                    71:06:bb:60:d5:33:4b:75:91:02:12:b0:fb:d9:1c:
                    ff:36:32:3b:2e:48:79:a5:dc:d2:7d:6f:d1:84:98:
                    2c:fd:12:44:03:6d:23:b4:60:2b:a6:6b:13:b3:2f:
                    5e:b3:34:d6:86:11:7c:8a:8c:92:f6:be:ea:de:85:
                    32:12:c1:af:91:e5:4d:5a:78:0c:55:ba:a0:e9:31:
                    d2:a1:ab:65:00:71:08:7b:8f:99:29:b5:aa:20:f7:
                    1e:eb:d3:fb:7e:16:ca:74:9a:03:20:63:d4:e6:06:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:C9:89:B6:9A:B6:A2:56:4E:EF:36:D4:9A:86:F0:07:51:90:6F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130352e3139322e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:db:c2:71:df:3a:09:1c:98:a6:36:14:a3:b8:db:b8:b7:15:
         ba:d2:a6:98:11:79:9a:94:0d:30:11:b3:c3:b0:09:fb:44:a5:
         95:8a:f6:a1:b7:ec:2e:3b:25:7c:6b:e5:6b:61:57:65:ab:b4:
         00:22:eb:e3:f6:09:3e:55:56:45:3f:d5:cc:a9:8e:cb:db:f8:
         bf:23:ee:51:a0:f2:e5:03:c1:6b:43:83:ed:1d:9f:e5:49:4f:
         0f:94:c8:af:18:0e:1c:66:92:c4:96:58:d7:e2:7b:4f:3b:b6:
         cb:0d:f8:53:0f:3b:4c:a3:ac:a9:6d:48:ae:84:9e:c4:43:a7:
         c0:1a:3d:e8:60:c9:f3:54:f9:74:60:c3:1e:49:3b:93:95:57:
         03:d9:7e:b0:d1:28:d4:7e:33:7a:1c:47:3f:ad:04:fc:6a:95:
         8e:52:ae:ee:75:4c:73:f4:e0:08:08:ad:94:77:f7:b4:7e:17:
         06:43:a6:7a:cf:f1:2e:d2:2e:17:dd:e7:25:3d:56:80:4b:4d:
         3b:c2:91:e0:63:55:1e:0a:aa:b5:77:af:86:51:06:82:0d:d8:
         14:6c:41:04:3d:52:ec:62:66:f8:63:7d:be:4c:ca:d2:77:83:
         ba:d6:d5:cd:6b:f6:e7:f7:dd:a8:17:b7:1b:bf:bc:6d:dc:2b:
         59:0b:e0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org