Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131312e3134382e302f32322d3234203d3e2030.roa
File:                     3130332e3131312e3134382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          BNImd5l5S6KSTb9zxdEJEZb8GVcvr5laoAVg7MoTGac=
Subject key identifier:   F3:DC:A6:A1:DE:22:D2:1C:7B:6C:D2:04:C5:EB:29:13:45:D2:F8:90
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7703280FC97968134AF6DAF78BB46C069B25BBA7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131312e3134382e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:34:41 +0000
ROA not before:           Wed 02 Feb 2022 06:29:41 +0000
ROA not after:            Thu 02 Feb 2023 06:34:41 +0000
asID:                     0
IP address blocks:        103.111.148.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:03:28:0f:c9:79:68:13:4a:f6:da:f7:8b:b4:6c:06:9b:25:bb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:29:41 2022 GMT
            Not After : Feb  2 06:34:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:aa:2e:61:0a:58:4e:b2:ba:03:bf:8f:7d:
                    0e:71:df:eb:e3:93:c6:07:a7:9f:98:47:2a:9a:02:
                    8c:8e:0c:d6:20:aa:3c:72:b6:41:94:0a:33:94:e5:
                    b6:cb:ce:ef:42:ce:52:98:c5:82:97:d6:5c:6d:dc:
                    66:89:40:a3:3a:c7:61:be:cb:e3:23:53:81:03:13:
                    0d:70:59:56:65:76:bc:89:55:08:c0:10:4a:1b:7b:
                    0d:a6:23:be:46:03:83:3b:e2:77:b6:26:e7:92:af:
                    3a:5b:be:90:4a:3f:c8:c1:0f:69:93:56:6c:61:da:
                    f8:de:e4:7e:aa:db:55:85:54:30:10:33:7c:df:e0:
                    d5:80:da:a9:b6:7e:b7:0d:a7:e7:1c:01:d1:50:ea:
                    47:ac:6b:f0:06:ab:1c:97:eb:b0:96:5a:b0:34:34:
                    75:fc:38:85:c1:84:e1:07:45:d3:19:9a:83:3a:38:
                    76:73:cc:5d:ef:7d:ff:31:01:34:c5:37:51:dd:28:
                    b3:57:aa:19:69:53:73:9e:ac:92:c1:35:41:c8:36:
                    c8:6a:d9:10:5c:19:7e:da:52:41:fb:03:4a:07:96:
                    0d:99:bd:f5:ba:19:9b:0b:ee:67:77:31:1a:3d:f0:
                    8c:dd:17:ea:8a:45:34:ac:32:c9:45:6b:81:0f:65:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DC:A6:A1:DE:22:D2:1C:7B:6C:D2:04:C5:EB:29:13:45:D2:F8:90
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131312e3134382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:5b:8e:c5:90:b9:ac:54:68:15:e5:39:ff:8e:93:9e:e8:c1:
         8c:db:c8:bf:2d:5b:83:b9:03:45:27:f3:ed:bd:a9:7a:53:cd:
         f0:50:15:0e:ba:f6:ec:be:41:b4:9f:d9:ec:77:04:78:ca:d1:
         df:42:48:bd:b6:92:76:0f:22:45:fc:e1:5e:31:24:6e:fe:33:
         e7:1c:bf:bf:9a:e3:0c:c1:be:40:9c:df:5d:05:86:8c:6b:94:
         36:d1:d2:03:98:47:43:e9:82:c6:ca:29:60:17:a0:ef:7f:71:
         19:b9:b0:b4:46:f4:ee:77:7d:5f:1e:46:a2:00:49:08:7f:20:
         df:d4:ae:70:4a:3c:3f:a9:60:6b:36:de:3c:07:bb:2b:9d:6c:
         ea:72:9f:bb:fc:7c:b0:6d:48:2a:51:4e:d2:c2:a2:36:8c:74:
         cb:46:be:27:e0:24:a4:a3:7d:42:ac:34:e9:43:2a:7e:76:a5:
         93:3b:13:81:d7:e8:00:66:4a:47:8b:d7:f6:45:ad:13:7b:b4:
         7a:80:e9:90:87:3a:a0:48:53:3b:d1:01:68:ff:a1:61:09:a7:
         e6:8d:ad:90:4c:51:07:82:d6:f9:e5:c7:ce:22:bb:e0:a4:d0:
         e4:b5:8a:94:5a:57:0a:de:86:b4:e2:75:4e:c9:b5:60:41:e3:
         66:d0:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org