Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3138382e302f32322d3234203d3e2030.roa
File:                     3130332e3132342e3138382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          p1tQ6o379midBxHxrydlqiEnZfE7SGPpk65Y3bQSN+E=
Subject key identifier:   76:23:22:E5:FF:6A:86:65:F1:8F:FB:C0:5C:07:47:8A:4C:49:39:C5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       47537E3BAA9B96B6BBD6B8175C5FEAC7E645D6F7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3138382e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:23:54 +0000
ROA not before:           Wed 02 Feb 2022 06:18:54 +0000
ROA not after:            Thu 02 Feb 2023 06:23:54 +0000
asID:                     0
IP address blocks:        103.124.188.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:53:7e:3b:aa:9b:96:b6:bb:d6:b8:17:5c:5f:ea:c7:e6:45:d6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:18:54 2022 GMT
            Not After : Feb  2 06:23:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:ae:bb:26:65:e7:d6:c0:a8:8c:17:e0:6e:
                    69:44:17:7f:c1:8b:6d:1e:23:4f:50:13:83:d9:36:
                    d2:bf:ea:b0:28:8f:96:ae:a2:04:5e:55:87:cd:85:
                    1e:83:a9:55:06:3d:54:c6:b2:41:12:f5:31:91:5e:
                    41:65:9c:4f:9a:f7:d6:25:fd:65:b9:9e:34:c2:c7:
                    af:50:c7:5e:4e:10:e4:b4:ca:e7:c6:ce:38:41:31:
                    f6:7a:3a:0a:47:4d:5c:a5:71:68:c6:c2:58:92:83:
                    c9:60:5e:f2:52:e2:58:2c:ae:3b:80:af:3a:28:25:
                    b0:c4:b1:c4:bd:2b:44:ac:00:9e:77:47:3b:5e:aa:
                    b3:db:dc:bb:57:85:66:54:b2:a2:ae:61:e8:ad:cb:
                    e2:67:ff:94:4f:74:e6:fa:67:36:e7:ce:9d:16:c4:
                    41:80:b6:a5:a9:89:41:0e:fb:ff:b9:e9:ca:29:ca:
                    1f:20:1f:3a:4c:82:27:f2:52:1b:fa:45:95:c9:7a:
                    28:86:16:d8:0c:65:e1:ae:d1:7b:78:ea:20:f5:79:
                    95:29:8f:c6:96:13:95:76:18:75:08:e6:7b:dd:9b:
                    47:a2:b5:d2:3e:2e:05:36:f6:88:27:8b:e3:a2:3f:
                    71:d2:af:df:66:e2:d0:16:0b:b9:49:8b:8e:d6:0e:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:23:22:E5:FF:6A:86:65:F1:8F:FB:C0:5C:07:47:8A:4C:49:39:C5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3138382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:5f:82:fa:4b:3f:06:f8:da:8c:d7:41:d6:e5:73:cc:ed:d8:
         18:ac:87:35:48:c7:84:77:f1:f5:66:4b:0a:36:79:3d:4b:65:
         de:3a:71:31:a3:cf:ff:a8:7a:fd:9e:e1:89:52:fc:19:4b:3d:
         f0:f0:48:7d:c7:4f:07:55:b9:49:91:c3:bb:dc:98:d2:99:6b:
         2e:00:9c:ac:4d:96:e2:1c:d3:25:23:ce:90:45:9b:de:7c:8e:
         39:cd:6d:f3:e4:28:66:02:09:f8:f9:dc:b7:05:e2:60:5c:0e:
         cb:8a:5c:b9:3b:36:bf:62:1f:0a:7b:7f:56:a4:02:ba:f3:45:
         72:24:73:b5:f5:a5:09:75:b6:3e:f0:f2:76:7e:d0:03:d4:da:
         19:13:02:ba:e7:0f:7a:40:53:cb:13:7c:4a:ab:a7:9e:06:87:
         9d:31:4d:ec:70:da:85:5c:6b:af:a3:40:aa:0d:47:a6:17:0f:
         e8:ff:3d:43:2a:4c:dc:13:5b:f9:1e:e7:20:7b:94:36:06:fe:
         cc:32:a0:7d:a4:9a:c9:29:75:04:e6:58:2e:2a:03:14:f5:07:
         ed:2b:d2:f5:00:22:db:d0:83:14:ed:64:76:81:a7:2d:3e:ec:
         6d:f7:32:32:08:36:e0:98:73:0d:78:8e:7d:8f:93:81:5b:03:
         33:d2:8c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org