Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130362e37342e302f32332d3234203d3e2030.roa
File:                     3130332e3130362e37342e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          C8TZuDFwUmqQf+Ugjts7vZybtUBaK9f9qCCbvt+mFnw=
Subject key identifier:   10:EC:79:7B:81:D5:D4:CD:5D:34:52:AA:7F:44:BA:7A:19:E1:ED:75
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7BFE01F9EC9051D221F3EF4AAF49D0D95EC42F5A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130362e37342e302f32332d3234203d3e2030.roa
Signing time:             Tue 08 Feb 2022 01:21:51 +0000
ROA not before:           Tue 08 Feb 2022 01:16:51 +0000
ROA not after:            Wed 08 Feb 2023 01:21:51 +0000
asID:                     0
IP address blocks:        103.106.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fe:01:f9:ec:90:51:d2:21:f3:ef:4a:af:49:d0:d9:5e:c4:2f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  8 01:16:51 2022 GMT
            Not After : Feb  8 01:21:51 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:c6:c4:81:d0:33:ea:68:ec:e1:75:4c:0b:
                    23:a0:c6:25:16:82:20:81:d5:d9:87:8f:83:7d:b2:
                    f2:3f:60:76:00:74:d9:b2:4a:4d:1d:c2:d5:17:82:
                    75:54:05:69:10:59:2c:3c:d8:30:6e:10:c2:bd:72:
                    d1:fe:99:fe:6a:bf:ac:8d:b0:9b:c9:e7:4a:50:8a:
                    6d:18:3d:36:69:10:3d:ca:5a:b5:51:1e:b1:d2:4e:
                    70:96:de:c5:a3:20:37:13:47:8c:b4:31:db:e3:3c:
                    a7:22:2e:1a:29:d2:f5:bc:28:18:85:a3:c0:cd:ed:
                    2a:50:52:f3:d2:10:f9:3c:b1:74:2d:2f:8c:85:25:
                    75:65:71:21:1c:ec:81:f9:30:ec:c6:e9:61:f5:84:
                    f9:9e:ac:2c:a8:d8:6e:f0:33:22:81:25:7a:7b:58:
                    52:af:8d:ca:c5:e7:44:b3:2a:bd:94:d8:0f:83:5c:
                    29:b7:bd:30:31:5a:1c:7e:a7:fa:13:12:a0:01:b5:
                    50:8c:ac:57:db:99:64:12:d2:19:14:67:65:a1:2a:
                    07:cf:29:af:8d:ee:37:f5:03:2e:14:0d:8f:49:4a:
                    f5:f1:c5:53:11:a3:d7:13:cf:54:ee:89:26:1e:c2:
                    ec:ad:08:76:d8:57:12:fc:fa:8c:5f:62:b9:da:25:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EC:79:7B:81:D5:D4:CD:5D:34:52:AA:7F:44:BA:7A:19:E1:ED:75
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130362e37342e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:ab:bb:fd:1d:d2:65:a4:d4:f5:cb:56:4d:8c:5b:6e:55:16:
         90:7a:19:67:ab:4d:5f:d6:0f:2f:c2:93:0c:66:3e:89:54:17:
         c7:bd:bd:c1:e5:b0:92:e3:9c:2d:ba:d5:85:db:75:3d:62:0c:
         fc:43:2c:10:2d:eb:f5:e4:50:7c:d4:0b:c8:aa:85:59:05:95:
         b5:c9:20:3a:bb:59:b7:e4:86:e9:49:36:a5:28:a6:cc:e8:d9:
         2c:39:da:c4:57:02:dd:08:48:16:08:0a:0b:07:7c:a5:fe:78:
         75:03:0f:2a:5f:f6:12:fa:6e:23:f8:33:b1:93:84:98:d3:6e:
         9b:37:c3:78:ef:20:84:02:2f:89:ba:61:71:64:e1:69:4c:cd:
         01:9f:df:2f:9a:47:e9:e1:de:ec:7b:1d:46:d7:2e:a8:62:17:
         ab:2b:1a:90:ed:da:f7:41:63:03:39:6c:3d:32:06:6a:b8:48:
         76:30:5f:41:6b:37:17:71:b6:4e:d7:32:3c:d0:70:8d:54:06:
         d9:8a:51:f0:11:64:de:ec:d9:b7:34:4c:a0:2d:e5:88:e1:1b:
         db:12:8d:51:86:bb:42:7d:74:9f:78:3f:9c:5d:0c:bf:51:a9:
         7b:f7:02:a0:a8:1b:fe:ff:07:05:a3:ad:c4:5d:97:5b:6f:c0:
         5c:71:c1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org