Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3134382e302f32322d3234203d3e2030.roa
File:                     3130332e3132332e3134382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          MClfuduRqVrG4cvdrMymP+eIIn/Wp9FAZMp6v6/3PSg=
Subject key identifier:   0E:1C:01:84:E2:D4:8F:6A:C3:80:C6:35:FF:96:B2:59:54:0C:15:78
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3FA1A6D773724F2CE7019B7042A9722FB2C15A66
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3134382e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:25:38 +0000
ROA not before:           Wed 02 Feb 2022 06:20:38 +0000
ROA not after:            Thu 02 Feb 2023 06:25:38 +0000
asID:                     0
IP address blocks:        103.123.148.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a1:a6:d7:73:72:4f:2c:e7:01:9b:70:42:a9:72:2f:b2:c1:5a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:20:38 2022 GMT
            Not After : Feb  2 06:25:38 2023 GMT
        Subject: CN=3082010A0282010100C1F22FA6F5AAB40B3E7E048AB37EB9511CF390E3F2A9442CA66A5D5E34EEBA9F56A4409F3A95180D93657C04822BD68DB4BF6EEC4A2E812D6AFE2F9324BFE41E5100D634B7DCD3E48BB793075743AB297681444233B546337E7FB42FDB38932216EF422A2958F90791F2EF209C7EA917B52479547022BE58F7609ACE7632864040BC57B860B784864B88857DF50734EB8A319968962C621764D625F28C3413821A714CAF9EE24E014C84B0960CC4B5610BE5B47648BF40E8602949A2F8022D946777E0333C3EA194DFE209C10359FC9C07E7528323872C0555B8362D12E4C36E0847B1A04470C5F7000D323D5604D071EB7D34551230940F0F286D71F7750AC30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:2f:a6:f5:aa:b4:0b:3e:7e:04:8a:b3:7e:
                    b9:51:1c:f3:90:e3:f2:a9:44:2c:a6:6a:5d:5e:34:
                    ee:ba:9f:56:a4:40:9f:3a:95:18:0d:93:65:7c:04:
                    82:2b:d6:8d:b4:bf:6e:ec:4a:2e:81:2d:6a:fe:2f:
                    93:24:bf:e4:1e:51:00:d6:34:b7:dc:d3:e4:8b:b7:
                    93:07:57:43:ab:29:76:81:44:42:33:b5:46:33:7e:
                    7f:b4:2f:db:38:93:22:16:ef:42:2a:29:58:f9:07:
                    91:f2:ef:20:9c:7e:a9:17:b5:24:79:54:70:22:be:
                    58:f7:60:9a:ce:76:32:86:40:40:bc:57:b8:60:b7:
                    84:86:4b:88:85:7d:f5:07:34:eb:8a:31:99:68:96:
                    2c:62:17:64:d6:25:f2:8c:34:13:82:1a:71:4c:af:
                    9e:e2:4e:01:4c:84:b0:96:0c:c4:b5:61:0b:e5:b4:
                    76:48:bf:40:e8:60:29:49:a2:f8:02:2d:94:67:77:
                    e0:33:3c:3e:a1:94:df:e2:09:c1:03:59:fc:9c:07:
                    e7:52:83:23:87:2c:05:55:b8:36:2d:12:e4:c3:6e:
                    08:47:b1:a0:44:70:c5:f7:00:0d:32:3d:56:04:d0:
                    71:eb:7d:34:55:12:30:94:0f:0f:28:6d:71:f7:75:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1C:01:84:E2:D4:8F:6A:C3:80:C6:35:FF:96:B2:59:54:0C:15:78
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3134382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:38:d8:77:b3:5c:47:b3:35:cd:fa:9c:17:58:59:b9:b1:a5:
         34:87:50:e7:d2:01:72:93:06:dd:ea:07:cb:ad:58:50:9c:85:
         10:83:3a:2e:c5:40:23:ee:a0:fc:9c:aa:66:bb:f8:37:61:95:
         c9:6e:fa:d6:52:45:83:8f:eb:4b:a8:8e:38:33:f0:37:32:8f:
         bb:cf:4f:a8:fd:c7:aa:79:5b:2f:40:6f:3f:ef:1b:ed:8d:97:
         87:bf:45:0c:fe:17:7e:a4:d7:57:b6:fc:98:f4:31:fc:e2:9f:
         d8:2f:78:3e:1b:5a:16:21:53:60:7d:8f:cb:4e:24:8d:68:1f:
         86:71:78:6b:4d:c5:94:86:34:8f:83:1a:d6:7e:e3:10:14:cf:
         73:c8:f1:df:d5:95:7b:82:e0:fe:39:73:fc:1b:83:09:8c:aa:
         19:ca:fe:ec:c6:4f:88:19:53:e2:df:79:60:5d:9c:58:3a:83:
         24:56:05:0b:3b:12:4e:04:73:20:8b:3d:9d:cf:3e:30:fa:ad:
         79:9a:ea:a9:91:90:5f:3e:db:dd:6a:dc:14:a3:4f:19:79:6d:
         4f:64:44:fb:ba:f6:c6:46:73:50:52:f2:25:f5:95:f9:1b:50:
         a3:96:f0:83:bc:f6:0d:dd:38:45:03:94:12:5b:21:e8:a3:46:
         bc:90:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org