Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3134342e302f32322d3234203d3e2030.roa
File:                     3130332e3132342e3134342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          yHRg35vJvlu9bppPw8qbLPXKxIXqp7Q7vLaZD9Mvn3c=
Subject key identifier:   8F:49:57:0E:86:1F:8A:F6:C0:C4:80:1F:D5:1E:0B:88:8E:C8:5F:98
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6EC09DD8EA91AC224A42CC11B3C7D816354003F7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3134342e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:23:45 +0000
ROA not before:           Wed 02 Feb 2022 06:18:45 +0000
ROA not after:            Thu 02 Feb 2023 06:23:45 +0000
asID:                     0
IP address blocks:        103.124.144.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c0:9d:d8:ea:91:ac:22:4a:42:cc:11:b3:c7:d8:16:35:40:03:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:18:45 2022 GMT
            Not After : Feb  2 06:23:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fe:37:33:43:23:00:1c:85:e5:cb:92:0a:de:
                    d9:5e:bc:e5:f9:9c:e0:af:3d:a8:bb:e8:68:1c:45:
                    27:31:98:dc:f3:b4:92:db:47:30:71:cc:24:6f:c4:
                    6e:63:76:8d:92:4e:39:02:01:84:f3:94:92:8c:6a:
                    a7:02:f9:d9:a0:52:13:5a:08:0f:ba:85:34:b6:d8:
                    6a:cd:06:f4:ad:da:44:04:5b:61:db:d2:6a:41:22:
                    fa:07:35:c4:ca:d5:1b:cd:ce:c0:3e:d9:65:18:26:
                    64:c0:d9:04:79:14:9f:2f:73:01:f3:eb:57:e6:45:
                    20:fc:e0:c8:b6:39:83:37:b6:e8:9d:1a:25:63:4a:
                    70:ac:53:88:74:fd:da:ba:41:94:79:57:cc:14:54:
                    db:50:a4:fc:53:05:d1:38:2f:54:e7:c6:67:07:2e:
                    d5:96:e0:b9:9c:9a:45:bb:57:ff:64:24:81:79:f2:
                    6b:54:a9:9c:85:34:eb:cb:38:5e:2a:1f:9e:74:24:
                    82:0f:a4:ae:1a:7c:6d:49:cc:69:0d:de:6e:29:1e:
                    57:d3:15:5e:d4:f1:c9:7b:36:62:65:70:17:04:90:
                    f1:8d:9d:59:ad:b1:b8:d1:17:50:a0:ef:5b:fe:a1:
                    31:76:ad:2d:bc:5f:64:5f:c9:4c:e4:27:6c:9e:95:
                    12:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:49:57:0E:86:1F:8A:F6:C0:C4:80:1F:D5:1E:0B:88:8E:C8:5F:98
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3134342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:f7:73:9c:39:99:f7:31:b6:79:a9:68:3d:1b:8a:fe:dc:3c:
         1a:46:ef:57:de:78:0d:d1:c9:3a:ba:c4:75:89:2a:ea:b0:27:
         2c:13:bc:ff:b7:6d:18:3e:08:ba:fe:04:db:b6:b2:a4:af:de:
         76:38:e6:c1:99:4d:86:0b:25:d6:95:99:4b:ee:27:87:dc:a0:
         6a:8f:3d:4e:d1:d4:11:cf:ec:3f:96:08:3f:53:7b:82:65:f9:
         20:67:33:82:29:4f:fd:6d:ae:27:a1:d1:a8:b2:a8:e1:a6:56:
         12:f7:49:1f:74:e3:a5:b8:c7:80:1f:fc:9e:34:69:97:b2:91:
         f0:ce:6b:e9:bf:30:d1:e3:7f:2f:84:ef:51:0c:c9:db:4b:29:
         63:0d:a1:05:0d:63:e8:b7:ac:b5:50:3a:e3:7f:53:09:d8:e2:
         d4:48:ed:af:bf:31:e2:6e:06:35:6f:3e:0c:9a:dc:e3:25:3f:
         25:2e:c2:a2:f1:99:c5:0f:ed:9a:eb:42:c5:38:f1:9d:29:62:
         17:23:bd:97:ea:11:65:40:1b:22:a1:6c:3f:af:a3:6d:b9:0d:
         3c:80:68:bd:da:7f:07:a7:a5:0c:38:c2:59:64:48:fe:c9:af:
         e1:c5:0d:d3:1f:5e:54:99:dc:76:49:8f:74:ad:81:db:06:22:
         70:bd:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org