Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36382e302f32322d3234203d3e2030.roa
File:                     3130332e3132332e36382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          OxD0WUSMT9AiPU2Em/+psApdt4kJ4I28+wFXh0c3aOg=
Subject key identifier:   84:B0:64:20:55:25:A7:83:96:E4:4F:A5:26:91:A2:DB:F6:4E:BD:80
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       26FC97397CEF2321484D46AC180AADA60E5CE260
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36382e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:26:46 +0000
ROA not before:           Wed 02 Feb 2022 06:21:46 +0000
ROA not after:            Thu 02 Feb 2023 06:26:46 +0000
asID:                     0
IP address blocks:        103.123.68.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fc:97:39:7c:ef:23:21:48:4d:46:ac:18:0a:ad:a6:0e:5c:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:21:46 2022 GMT
            Not After : Feb  2 06:26:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:1b:9e:56:4f:bc:bd:49:7e:c6:ad:1e:ad:
                    7d:13:3e:05:5f:72:43:db:dd:cd:56:ce:9f:44:10:
                    08:40:bf:42:9d:9b:23:58:c4:55:af:e9:25:4e:5f:
                    a0:5c:f0:4a:3f:e2:59:2b:a9:de:98:44:e6:9d:f7:
                    a6:ea:4f:57:a3:31:cc:7f:3b:c9:09:57:d1:91:a9:
                    6f:b3:81:62:fb:98:88:38:c5:62:d9:17:01:8b:24:
                    df:3d:a5:3a:39:b2:35:95:61:16:ab:37:70:0d:3b:
                    28:59:a7:64:84:17:69:b9:04:cc:cb:ec:9c:bd:38:
                    e1:93:b1:35:6d:86:a4:01:22:a6:e1:86:93:34:bc:
                    91:11:89:60:8a:ae:8c:be:9b:fe:60:40:bb:ad:e8:
                    1f:ae:5e:38:9b:4f:37:f6:1d:7c:9f:7b:ea:f7:1a:
                    82:aa:c9:45:76:6a:15:15:bf:d5:9f:f6:bd:74:e9:
                    ad:b2:59:cd:c2:14:59:33:65:9f:a4:d9:84:07:2c:
                    ec:cd:8e:31:e8:09:f2:cf:bd:51:a8:82:dd:fb:98:
                    b9:98:76:c6:38:f3:33:c4:93:df:87:5f:f2:a3:06:
                    76:a6:1e:33:9a:38:a9:34:f9:3c:2f:d9:8b:0d:67:
                    3a:10:87:ad:ff:7e:93:e0:8e:cf:7d:2a:8d:b0:fa:
                    3d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B0:64:20:55:25:A7:83:96:E4:4F:A5:26:91:A2:DB:F6:4E:BD:80
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:c7:6d:34:6a:03:04:4c:c5:41:8f:2a:e9:65:b7:06:0f:a3:
         6c:46:c4:0d:96:8f:58:b6:13:16:4c:fd:b2:84:78:85:dd:ac:
         1c:f0:92:a5:da:c1:f5:9a:05:a6:6b:21:8a:b0:a1:97:82:51:
         f9:09:84:18:d1:61:af:39:da:34:3e:24:79:01:d0:49:a6:68:
         56:0f:90:b7:cd:eb:b3:93:6d:85:7c:dd:1a:39:d9:f7:c3:35:
         13:d9:f2:66:9b:05:e3:8e:1b:08:53:84:86:86:5a:c5:1e:bc:
         4b:cb:b2:cf:0f:63:69:a4:48:da:a9:30:4d:25:f9:4b:35:04:
         1c:59:31:90:18:1e:f2:01:1a:aa:7d:c9:07:ce:02:15:94:59:
         1b:32:e5:b6:8d:21:b6:b9:63:1f:71:26:f8:7d:64:86:a9:5a:
         83:40:5b:cf:fb:8c:0d:84:ec:1a:e1:fd:c6:e4:f7:a1:df:05:
         3f:45:2e:55:2a:95:f7:5f:23:88:43:3a:d0:1f:c4:ca:97:67:
         9f:f8:77:58:17:7f:86:cc:d5:7d:ef:c7:3a:13:94:59:2a:53:
         75:36:5d:65:de:17:0d:61:8b:cf:f5:e4:72:09:41:e5:96:c8:
         ea:dc:2d:a5:dc:02:ec:61:0d:79:6b:4a:34:a0:d0:cd:20:7a:
         21:9c:71:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org