Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130372e3138362e302f32342d3234203d3e20313337323939.roa
File:                     3130332e3130372e3138362e302f32342d3234203d3e20313337323939.roa (raw, json)
Hash identifier:          ZZO+XcHPDw7U3pdoZXrq080pdRqoOOwkqtzruLG2qng=
Subject key identifier:   51:92:B8:CD:0A:0A:02:C7:60:D7:E1:29:CD:44:06:A8:FC:DA:AD:E8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       41A52DE4EC3FE3D9C8F95C1195123CC1E0D96644
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130372e3138362e302f32342d3234203d3e20313337323939.roa
Signing time:             Fri 09 Apr 2021 08:09:46 +0000
ROA not before:           Fri 09 Apr 2021 08:04:46 +0000
ROA not after:            Sat 09 Apr 2022 08:09:46 +0000
asID:                     137299
IP address blocks:        103.107.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a5:2d:e4:ec:3f:e3:d9:c8:f9:5c:11:95:12:3c:c1:e0:d9:66:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr  9 08:04:46 2021 GMT
            Not After : Apr  9 08:09:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:40:47:80:74:50:54:48:46:6f:75:17:e7:
                    ad:1a:78:d8:3d:c8:18:29:aa:4e:ce:36:83:cc:1c:
                    ed:fd:3d:a1:95:b7:2c:ea:71:50:4a:6a:a4:09:88:
                    38:b8:3d:80:df:6a:f9:2c:47:57:c7:1d:4a:e5:bc:
                    59:b9:d5:a4:a8:a4:05:a8:83:d7:9d:a8:1c:61:d5:
                    6c:9e:50:a0:c4:76:d6:c0:93:e4:a9:2e:3c:71:af:
                    5a:13:c7:42:16:2c:06:0f:f2:9b:b5:7f:76:19:66:
                    76:87:b4:f8:b9:e3:fa:2e:aa:87:a2:2f:93:6f:9f:
                    d0:89:bd:8d:98:65:fa:bf:5e:14:e7:01:58:8b:a4:
                    a9:17:61:2c:5e:ad:de:8b:97:55:6c:9c:5a:6f:58:
                    c4:29:67:bb:4b:96:ed:8e:00:1e:4e:30:96:51:76:
                    89:2d:90:13:38:d5:e4:98:3d:66:46:c8:46:91:aa:
                    c9:36:1b:c9:d3:96:e6:b2:5e:3d:e6:87:ba:80:37:
                    08:9c:1d:55:4a:b5:06:7b:c0:50:0a:25:08:64:ba:
                    81:63:b7:54:6f:8f:da:e3:13:5c:ff:65:50:96:e4:
                    79:a2:b0:9f:7f:d6:c2:64:57:f2:c9:2c:d3:19:2d:
                    03:16:49:31:17:3c:a8:64:01:41:81:61:16:5a:45:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:92:B8:CD:0A:0A:02:C7:60:D7:E1:29:CD:44:06:A8:FC:DA:AD:E8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130372e3138362e302f32342d3234203d3e20313337323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:36:1e:53:89:4f:14:c9:81:58:5d:85:59:f3:83:f5:00:27:
         c8:d0:62:09:af:fc:d4:b1:2f:11:7d:10:c1:9e:91:80:0e:1a:
         a5:1e:dc:89:72:b1:8b:5f:1a:4a:55:96:5a:60:cb:45:18:be:
         22:cf:cc:d5:9c:cb:a6:d7:45:1c:16:ff:10:f6:16:8b:e5:e5:
         97:41:38:26:dc:7f:bb:62:ce:fa:0b:a3:d6:09:d0:2e:a0:f4:
         f8:64:70:b4:04:eb:4d:ae:9d:cf:c7:f1:63:fa:4c:16:98:19:
         6e:4a:50:21:76:89:d8:7c:90:0c:5b:19:41:93:72:3e:35:77:
         32:48:6d:a4:5b:cb:ce:34:47:50:bc:2d:9c:db:e6:37:18:b6:
         6c:28:91:15:48:fb:27:98:11:6e:54:99:62:3d:58:09:a5:33:
         74:0a:2e:08:a7:ab:ae:20:ce:75:4b:77:0d:95:1f:16:ac:6f:
         ab:c1:df:16:14:3d:da:cb:b7:de:19:0e:4e:1c:4a:38:6f:b4:
         9e:46:f4:bd:13:43:aa:67:7a:40:a5:fc:8e:2e:7c:3c:b2:a9:
         53:06:7a:5c:de:62:ad:16:03:69:07:af:48:30:2d:bb:42:5b:
         a8:91:9f:d1:17:55:3a:73:b7:9a:49:d4:20:e7:f2:75:92:4e:
         13:55:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org