Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234342e302f32322d3234203d3e2030.roa
File:                     3130332e3132332e3234342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          yBtntVFF5yC8mfZh/Sxf84jTRoP8BKQKK19y8oncT+E=
Subject key identifier:   D2:D6:A0:87:C1:75:67:91:5F:B0:75:F9:D0:86:F7:36:25:70:70:CF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5663213815CFB28EF0825DCABC6E77DD09AE78EA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234342e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:25:53 +0000
ROA not before:           Wed 02 Feb 2022 06:20:53 +0000
ROA not after:            Thu 02 Feb 2023 06:25:53 +0000
asID:                     0
IP address blocks:        103.123.244.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:63:21:38:15:cf:b2:8e:f0:82:5d:ca:bc:6e:77:dd:09:ae:78:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:20:53 2022 GMT
            Not After : Feb  2 06:25:53 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:53:9b:64:e9:a2:28:20:e9:2c:0c:b8:1d:
                    d5:b3:9b:30:6b:16:10:e2:2d:1c:f1:9d:00:b6:c5:
                    0e:46:cc:66:05:95:f1:16:16:20:2f:21:8e:ed:ae:
                    8e:54:57:50:99:ce:52:19:c3:cc:f9:43:ef:92:83:
                    a8:13:1c:6b:16:06:7d:c8:8f:7a:11:10:8d:31:6c:
                    da:fd:8e:05:fb:cf:38:c3:bb:8d:03:49:fc:d4:9e:
                    a5:48:2e:3d:63:12:21:df:42:13:62:d2:6e:f9:17:
                    d2:8d:be:b9:fa:66:2c:88:af:a2:8f:2b:33:54:5c:
                    61:60:72:74:b6:b3:6d:88:7a:ec:38:bc:93:f4:f9:
                    61:a5:ec:8d:69:53:0c:b4:07:86:aa:bc:69:4e:8b:
                    4a:45:f1:e1:77:04:d3:ca:11:45:84:0c:6e:b3:8b:
                    98:b6:9a:08:f0:a6:ad:af:0f:11:fa:e2:7a:dc:dc:
                    aa:a9:61:27:2d:c5:58:98:d7:77:80:62:3c:4e:a9:
                    2e:4e:28:55:c7:d3:f1:57:90:b5:84:0d:57:45:b0:
                    40:2c:a9:25:9c:b4:48:a2:e6:59:af:64:21:16:c3:
                    7b:5b:e4:09:ce:3e:34:fd:bc:0b:be:bc:a1:08:41:
                    f3:b1:88:ee:6a:62:61:6f:a8:28:58:28:24:8f:85:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D6:A0:87:C1:75:67:91:5F:B0:75:F9:D0:86:F7:36:25:70:70:CF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:12:5c:57:cd:44:8f:1e:3c:5f:3a:5d:49:b2:00:56:58:c1:
         1c:7d:ce:71:61:1c:17:dd:f5:21:95:d3:5c:ba:8e:3e:82:58:
         86:65:ca:af:7c:a9:cc:d4:32:17:e3:87:9c:f1:80:0a:c9:2c:
         e4:8d:41:6d:a9:b7:7c:9a:53:ab:7e:6c:16:9d:b6:bf:4f:99:
         5c:43:c0:18:8b:95:b5:dc:bb:04:8b:74:3f:dc:ee:7e:d5:23:
         44:c5:71:02:3a:46:5e:eb:53:ff:4a:c0:cc:59:b6:12:94:5d:
         a7:49:ff:14:f1:9c:a1:43:c0:bb:a6:b5:e8:71:12:03:cb:74:
         e2:ad:70:6e:cd:1d:d5:a3:12:38:63:8e:55:f1:90:8c:4b:82:
         c2:29:cd:dd:61:8b:0a:1d:20:f9:1b:ee:fe:b0:c6:7b:be:28:
         80:4c:82:50:a2:a4:40:79:6f:c1:40:14:01:f3:c0:1b:0c:4d:
         00:58:0a:58:ca:ad:fa:39:14:37:8d:4c:19:0f:ed:63:d9:11:
         d7:8d:1c:d9:1d:90:b3:63:47:c7:79:a1:dd:f2:7d:84:8a:83:
         0c:48:4f:ab:31:8b:88:b8:9f:82:d9:d7:0a:5b:8a:2c:cc:d8:
         f0:f9:c1:61:16:60:40:9e:30:32:cb:00:42:80:49:ad:0a:12:
         fb:29:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org