Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36342e302f32322d3234203d3e2030.roa
File:                     3130332e3132332e36342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          DCUu33vgxhRFFn3eENe/6BuSj/61GLUK4prb5THiwiA=
Subject key identifier:   91:24:B0:D7:1B:82:7A:F6:89:68:42:40:3A:DA:5A:30:9F:1B:8B:6F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       78B376EECF934AAC65C3811103A22E7A8D23F200
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36342e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:27:38 +0000
ROA not before:           Wed 02 Feb 2022 06:22:38 +0000
ROA not after:            Thu 02 Feb 2023 06:27:38 +0000
asID:                     0
IP address blocks:        103.123.64.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b3:76:ee:cf:93:4a:ac:65:c3:81:11:03:a2:2e:7a:8d:23:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:22:38 2022 GMT
            Not After : Feb  2 06:27:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:c4:99:81:72:f7:4e:63:b9:b1:3f:df:7b:
                    5f:df:8d:7f:7b:f0:e2:e1:0e:8f:76:e7:b4:d5:3d:
                    fe:d9:47:ee:be:88:19:e3:fe:f9:49:c9:d2:10:16:
                    8a:42:68:1d:13:75:07:b6:e8:78:f3:fa:62:90:84:
                    b5:3e:85:0d:ea:cb:4d:74:b8:84:c7:63:11:2b:85:
                    da:48:35:f1:bc:f0:7b:a4:03:5f:28:be:4a:b7:0e:
                    41:d4:da:d0:28:86:84:ad:85:47:2d:6f:d5:a5:e1:
                    6f:0e:e0:5e:bf:b7:f4:76:08:fa:76:e2:ee:bd:08:
                    39:29:55:2a:78:cc:64:bf:96:d6:be:a9:3d:9e:ef:
                    58:ae:84:45:93:67:8f:40:da:52:a7:f7:a5:81:de:
                    ee:7a:ba:d2:0c:c3:f9:1b:43:be:69:90:9b:41:e4:
                    33:f9:a3:6a:d2:75:9e:d3:0c:89:00:a2:f7:6e:1b:
                    ea:eb:b9:41:c2:70:97:74:5d:cf:6a:41:ba:8d:d3:
                    cc:1d:85:6e:e4:7d:dd:82:2c:fa:f4:66:34:37:82:
                    f3:9c:6f:95:3c:bc:10:ce:c7:02:87:84:8b:9b:5a:
                    08:9b:a8:08:90:d2:eb:03:f2:62:8a:dc:09:1b:e4:
                    19:3b:c3:67:4c:58:b0:64:22:5c:6a:3a:0f:3f:61:
                    9b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:24:B0:D7:1B:82:7A:F6:89:68:42:40:3A:DA:5A:30:9F:1B:8B:6F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:ab:68:fd:e2:df:f4:78:20:e6:a8:67:b1:9d:6f:aa:72:18:
         fd:d4:a6:30:63:7e:9f:69:99:f3:41:0c:4a:63:a9:bb:81:bf:
         dd:3e:90:9b:6b:c9:ae:32:fb:a0:37:60:07:7c:f0:24:53:31:
         1f:2d:36:36:be:35:ef:eb:20:db:9d:0e:72:d2:e4:29:4c:f0:
         a5:59:c1:ed:cd:c2:10:f5:d4:8c:32:86:52:a0:a3:5d:8a:00:
         ea:14:9f:41:b6:2f:62:ed:22:2c:4c:24:c4:32:5e:5f:8b:45:
         78:b2:3d:f1:dc:06:e9:34:e6:6b:c0:c9:36:60:d8:41:24:4d:
         38:55:95:6c:6a:8d:94:64:83:68:1e:bf:da:44:ed:57:bf:4a:
         c5:9d:2c:d1:90:2e:d7:f1:5d:17:a5:b1:5a:77:d4:96:53:8c:
         1b:6b:10:85:8f:61:f9:2d:79:7b:42:50:bf:5d:69:d6:d4:a7:
         09:ee:2c:51:45:3a:d5:c9:e8:a5:be:42:0e:fc:4f:8e:50:d6:
         86:d6:47:4b:cd:15:7b:59:1f:9f:bf:4a:20:da:8c:0e:20:5b:
         1d:bd:87:09:34:71:cb:e6:0a:6a:c0:a3:21:10:92:5a:37:67:
         4f:a0:73:af:6d:9a:7d:65:e8:e2:a9:e6:6e:23:a3:0b:43:06:
         20:ca:df:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org