Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e37362e302f32332d3234203d3e2030.roa
File:                     3130332e3132322e37362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          IOohPxccRbSPt1fOP2Jrub21jBO7cQBwb60EKRzJvkI=
Subject key identifier:   B6:13:0C:CD:31:93:A3:AD:AA:F7:D1:87:A7:A0:38:06:1A:CA:5D:6E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2834D6F15ACD15211D0AE9EA1EE90A1660F84C0F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e37362e302f32332d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:30:22 +0000
ROA not before:           Wed 02 Feb 2022 06:25:22 +0000
ROA not after:            Thu 02 Feb 2023 06:30:22 +0000
asID:                     0
IP address blocks:        103.122.76.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:34:d6:f1:5a:cd:15:21:1d:0a:e9:ea:1e:e9:0a:16:60:f8:4c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:25:22 2022 GMT
            Not After : Feb  2 06:30:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:a5:17:b7:4d:5d:25:92:56:98:63:3d:b3:
                    09:99:10:6a:54:2c:b0:97:d9:22:c4:b5:72:ed:2a:
                    ea:8a:2a:6a:3b:af:bb:ef:24:65:6d:20:9c:80:47:
                    0c:64:75:28:9a:e6:15:b1:a4:53:88:b5:1e:ee:f6:
                    dd:ca:0d:0e:fb:8f:b1:e6:d3:f3:56:bb:68:b0:50:
                    cb:66:b4:40:48:88:d8:40:5b:08:50:cd:8c:6b:b7:
                    80:d5:ab:14:99:eb:85:55:7c:af:ca:e2:c2:ca:07:
                    4f:d9:ec:f4:aa:e2:96:a4:41:2f:c6:a9:1c:75:df:
                    5b:2e:2d:c2:11:82:c0:3c:45:17:78:33:42:9a:88:
                    b2:df:52:79:33:92:b3:90:cf:9d:a2:cb:10:75:46:
                    f8:ff:38:8a:47:fd:dd:a1:82:43:58:30:ee:dc:70:
                    f0:a8:9d:61:82:55:3a:9d:33:78:bf:de:a9:eb:05:
                    56:a4:27:70:e9:ee:f0:bf:8f:6a:d3:8a:c0:b9:0f:
                    a1:25:52:b0:ad:14:fc:ac:c1:87:43:e7:fa:c3:45:
                    80:48:91:b9:f8:15:95:b4:7c:c8:e5:d9:05:59:2f:
                    5d:6b:03:fa:0f:d6:d9:c8:3b:b0:84:21:85:81:7b:
                    1c:5e:1f:20:26:07:48:c2:08:12:ef:e8:25:a5:05:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:13:0C:CD:31:93:A3:AD:AA:F7:D1:87:A7:A0:38:06:1A:CA:5D:6E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e37362e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:94:84:2b:b8:58:ae:34:d6:32:3d:41:83:cf:bd:23:9c:c5:
         cf:02:d9:98:ed:03:b4:f4:46:10:83:89:3f:07:7f:91:67:1d:
         30:e5:e9:dc:8a:9f:20:ad:cb:d9:92:7b:41:d0:1f:19:a2:88:
         29:ba:e4:ab:74:f3:43:aa:75:6b:32:4a:4f:38:13:9a:e3:cf:
         25:2e:a6:01:42:6a:aa:0c:4a:81:c7:8b:81:97:42:cd:a9:2c:
         eb:65:7c:6c:7f:90:06:f5:79:12:53:9d:1b:71:8f:c7:e3:94:
         86:21:5c:bd:78:59:f0:d2:06:0d:67:82:62:f0:bb:80:9b:70:
         b3:ed:75:f6:15:ae:99:55:7b:6f:44:c2:d3:1d:c0:da:fc:9c:
         07:c2:1b:8c:d0:11:f4:36:28:9e:29:42:09:0e:42:f4:1b:50:
         24:25:77:ac:7e:02:26:11:d7:a1:94:28:06:1a:7e:f3:71:cd:
         e1:01:56:83:73:a6:74:1f:e5:7e:91:dc:57:f4:83:40:5f:cc:
         48:d1:7d:30:9e:2a:f7:e0:f5:e6:70:2f:d4:47:7d:90:e9:dd:
         2f:63:8c:b1:48:03:bf:3e:ea:83:4d:ed:d7:30:65:f3:14:b6:
         ce:1e:dc:f9:3c:a0:02:9d:cb:96:45:6b:f6:62:1a:92:2d:84:
         f8:eb:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org