Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e3130382e302f32322d3234203d3e2030.roa
File:                     3130332e3132322e3130382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          GIVcCXEP41Qo06YzlscQjKdTZDluR6cYps3UqOfyH+A=
Subject key identifier:   B1:11:EA:3A:AF:59:AF:32:92:30:C2:B3:5E:99:E6:CB:06:09:5B:D3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       385432DF02BB622943024E33E4E5A204C1A74A15
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e3130382e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:25:21 +0000
ROA not before:           Wed 02 Feb 2022 06:20:21 +0000
ROA not after:            Thu 02 Feb 2023 06:25:21 +0000
asID:                     0
IP address blocks:        103.122.108.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:54:32:df:02:bb:62:29:43:02:4e:33:e4:e5:a2:04:c1:a7:4a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:20:21 2022 GMT
            Not After : Feb  2 06:25:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:64:da:ae:4f:93:b9:0a:c4:bd:be:4c:a3:
                    62:ef:f2:e5:d5:d9:e1:07:d5:28:7e:b1:92:42:5f:
                    42:bd:b3:1a:1e:73:4b:20:b8:a5:61:f7:28:03:87:
                    bf:fd:58:8e:b8:ea:57:f0:c7:50:6f:56:96:66:a6:
                    01:59:60:3e:40:cf:29:9f:11:5c:b9:1f:b7:50:83:
                    a1:cd:ab:aa:f1:5e:ba:a3:81:44:be:f9:3c:97:ba:
                    ab:1d:8a:74:49:d7:e9:6d:27:a0:b4:44:82:1e:dc:
                    92:58:60:a5:7a:78:ff:76:54:2f:0f:fd:4c:10:1f:
                    ae:5a:ee:c7:09:26:92:08:4e:42:3b:31:31:94:4c:
                    62:f9:4f:e3:e5:ef:24:2e:94:69:72:ef:2c:75:72:
                    a5:c7:e5:0e:83:09:21:0d:c8:f3:5d:91:e6:c6:fd:
                    1c:96:59:e2:80:bc:59:df:d3:3c:f7:fe:3a:d6:84:
                    7b:c7:a8:78:05:1d:8b:8c:76:59:ac:99:6e:4c:83:
                    bf:71:b2:10:ef:08:3e:c6:16:7b:e2:5e:51:00:be:
                    39:9d:4a:b2:fc:65:45:ae:1e:68:f3:0f:b7:fb:79:
                    14:89:f2:a5:5f:57:66:aa:0b:24:4f:b6:a9:29:62:
                    3c:cf:8e:59:25:53:2b:4b:dd:88:92:fc:7d:74:c8:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:11:EA:3A:AF:59:AF:32:92:30:C2:B3:5E:99:E6:CB:06:09:5B:D3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e3130382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:d5:9e:ed:0c:06:61:6c:6c:7b:17:24:f5:7d:ca:cd:24:77:
         80:b6:8b:85:1b:00:7a:fe:c9:e7:51:5c:b9:3f:cf:07:74:06:
         09:a7:83:9c:be:dc:b4:9e:3d:a5:ce:88:cc:fb:9b:a4:4b:49:
         a0:ae:4d:46:dc:75:c1:55:51:4f:0e:4d:aa:91:cc:54:be:7d:
         fc:af:a9:5a:5d:f2:89:ee:3d:8a:72:22:00:e6:dd:9e:7c:e6:
         21:6b:aa:a7:e3:65:c4:2c:0d:d5:d8:84:3b:d6:e9:85:84:44:
         2c:0c:02:68:03:f6:2e:de:f7:72:4b:03:4e:6d:47:04:91:e6:
         55:fa:99:b6:8f:46:5f:10:2b:af:14:d8:74:e3:af:6d:1b:55:
         82:02:8d:ae:2f:a6:d2:d8:01:54:6c:e0:60:90:d9:d3:6f:99:
         2a:c8:b9:d4:b7:17:64:c7:43:5f:34:07:45:b7:22:32:d6:62:
         85:9f:6b:42:09:43:29:76:77:25:da:dd:bd:a2:6c:c1:6b:1a:
         23:d8:8c:05:c8:07:18:7c:d0:4a:04:8a:73:81:b5:86:a2:87:
         d0:a7:e7:df:41:78:b7:50:dc:2b:a1:ee:68:ef:72:20:19:1c:
         0f:e9:58:62:cc:3c:4a:33:de:97:97:2a:5b:38:e6:b9:ba:c0:
         f1:c7:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org