Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33322e302f32322d3234203d3e2030.roa
File:                     3130332e3132322e33322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          TfVQzTBK9Ekbbzyj5xUBLNUdUXVuzfRH5BdPkQO3Uow=
Subject key identifier:   06:43:03:91:D3:D4:88:91:9F:CE:EE:64:A6:B3:5D:C1:79:4E:37:17
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       58201285CE94D7E47ABC5AC489E2E66CCE08D477
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33322e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:26:35 +0000
ROA not before:           Wed 02 Feb 2022 06:21:35 +0000
ROA not after:            Thu 02 Feb 2023 06:26:35 +0000
asID:                     0
IP address blocks:        103.122.32.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:20:12:85:ce:94:d7:e4:7a:bc:5a:c4:89:e2:e6:6c:ce:08:d4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:21:35 2022 GMT
            Not After : Feb  2 06:26:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:58:d9:21:5b:02:b0:05:20:00:e7:7e:13:
                    58:df:34:b3:23:d9:68:f5:d4:0b:7b:25:32:eb:2c:
                    b0:68:fe:72:b1:36:d5:75:f3:64:06:8a:66:f7:ae:
                    90:2e:ec:1d:7a:9b:2f:ee:a6:ca:b1:1b:23:aa:f9:
                    e1:e0:c3:0f:70:70:65:9e:2f:92:ae:53:10:d3:c9:
                    53:46:b9:24:3f:4b:88:6c:06:12:7a:2a:a3:ed:39:
                    6f:ca:91:a1:36:dd:8d:9f:e0:3b:cc:7f:de:aa:04:
                    c4:62:a0:e9:4b:ef:af:3b:02:16:6a:49:5c:72:76:
                    ed:d0:dd:0c:5d:fd:09:a9:a5:50:d9:be:e5:63:39:
                    b8:2b:2a:54:6b:41:64:6a:1f:56:a8:eb:fc:fc:9b:
                    d9:15:07:ee:84:4a:7d:23:47:37:7d:a9:ea:ae:bf:
                    99:01:b7:c2:e3:ab:89:b5:59:2a:31:8f:0b:d4:8f:
                    8b:db:dc:c2:53:83:db:68:cd:e7:d8:ef:72:f5:0c:
                    95:8a:cd:86:d4:cc:0a:ba:b7:ac:9a:01:02:b4:f4:
                    dc:87:6d:5b:31:ee:55:c4:01:e9:16:c8:08:36:c3:
                    39:af:70:1f:83:b1:47:56:7e:92:eb:53:a9:a3:a4:
                    38:37:ee:21:eb:54:f3:3a:e1:44:65:33:cf:ae:ab:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:43:03:91:D3:D4:88:91:9F:CE:EE:64:A6:B3:5D:C1:79:4E:37:17
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33322e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:26:c2:2a:4e:c9:4f:6f:6c:c6:90:f7:65:c1:cd:d1:6b:67:
         1c:5c:61:26:42:de:1b:6f:6b:d2:b7:4e:79:31:c1:af:74:24:
         4a:d0:03:3d:56:bc:2d:c7:8b:a3:24:ce:71:70:86:d4:b6:0b:
         a4:fd:16:72:5e:bf:1f:20:fa:e6:05:c6:d8:98:4a:0d:e0:9b:
         8a:84:01:8e:a2:d3:0f:52:7a:a6:d5:5b:3b:10:0e:48:ff:29:
         5b:01:1f:b0:f4:7e:47:04:12:54:f4:4e:8a:cd:19:a0:cb:dc:
         96:44:b4:a6:1d:87:8a:41:5c:3e:4c:d8:5b:0a:9c:2a:7f:d1:
         0d:1c:17:75:6e:fa:b2:da:2b:66:d6:6e:f1:c2:dd:5d:03:20:
         bb:de:9c:ee:2a:c3:0b:7e:de:8f:9e:2c:43:22:d7:fd:68:f2:
         cb:37:07:47:d9:d2:15:ad:2c:e3:70:10:b4:8b:ff:9e:d7:a1:
         4e:f3:81:e6:dc:e3:85:b0:3a:c4:73:a8:d9:13:e5:a8:b9:16:
         8d:82:8c:76:98:ab:a5:93:60:ce:28:06:29:d3:28:34:1d:30:
         26:b4:9b:e4:32:0a:9d:7d:8b:e3:87:21:4a:71:f1:6c:65:6b:
         d3:67:27:0b:5a:7e:b3:86:bc:90:18:b2:13:f6:35:47:13:b5:
         dd:b7:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org