Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232382e302f32322d3234203d3e2030.roa
File:                     3130332e3132342e3232382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          2oLOu3AQOpAkPzFh/pgXowMd/0CCzKMFpJavE/W/+k8=
Subject key identifier:   8C:54:F9:2A:98:83:9B:95:34:B7:18:C3:B8:74:CD:03:D3:0F:9E:A7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       47D633AFDFF82CF24C5C317E23F21509F62173B8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232382e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:24:12 +0000
ROA not before:           Wed 02 Feb 2022 06:19:12 +0000
ROA not after:            Thu 02 Feb 2023 06:24:12 +0000
asID:                     0
IP address blocks:        103.124.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d6:33:af:df:f8:2c:f2:4c:5c:31:7e:23:f2:15:09:f6:21:73:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:19:12 2022 GMT
            Not After : Feb  2 06:24:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:be:f6:98:a9:6c:cb:c5:50:e0:9a:2a:e2:
                    76:cc:48:2b:7c:3b:fb:a4:f6:45:f3:af:9e:5a:28:
                    60:4a:7b:d0:0f:48:dd:b6:8e:41:cb:c1:94:79:6e:
                    67:4d:cb:6e:a9:06:25:5c:e5:1d:b4:c1:74:08:02:
                    9c:87:eb:89:a8:0a:d7:e0:53:8b:0e:c3:80:c4:17:
                    bf:34:c3:f4:93:87:2d:f2:7d:29:27:cd:ec:58:a5:
                    71:14:4f:f8:ab:b3:66:21:51:86:11:84:21:3d:e3:
                    28:fb:9d:d1:5d:03:65:b2:e3:f7:69:1b:34:d0:e0:
                    c0:98:d8:2c:45:16:d9:f6:3c:42:30:e4:ad:76:b0:
                    71:38:f8:89:8b:c8:96:10:08:66:bd:d2:1f:8d:9c:
                    66:45:7e:a8:0b:8c:bc:62:f5:8a:63:18:fb:51:ef:
                    b4:d4:e5:4f:8a:7e:70:6e:c8:86:e6:85:c7:7d:b5:
                    5b:ad:10:1d:92:e4:79:5c:ae:1c:61:3b:0c:bf:f5:
                    74:13:b3:32:fc:45:38:12:fe:63:fc:0d:51:de:e6:
                    62:40:7c:fd:5a:a8:58:6e:e3:b2:40:02:5b:b6:10:
                    9b:9e:93:0c:cc:3a:56:8e:0f:16:8c:02:fe:7d:ea:
                    86:f3:e5:2f:77:22:b2:f3:a5:13:b3:7e:b0:6c:78:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:54:F9:2A:98:83:9B:95:34:B7:18:C3:B8:74:CD:03:D3:0F:9E:A7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:bb:89:cf:48:c8:b7:f4:bc:e2:f0:28:ba:13:14:39:b1:76:
         eb:4f:a2:21:83:4f:70:06:a9:2b:92:a2:13:49:40:0c:b0:43:
         a2:76:e9:ad:b9:00:31:b1:0e:82:3f:60:16:92:31:b2:55:f6:
         6e:be:43:2d:cc:04:d5:4d:44:3e:05:c3:dd:74:6e:fa:14:a0:
         3e:a1:8e:23:bb:e3:6f:33:1c:b0:5e:f4:c7:65:80:36:43:e0:
         79:30:66:d4:70:4f:8e:a2:4e:46:a1:a4:fe:24:fd:28:19:a9:
         e1:e7:1c:3a:7e:d5:32:ef:88:f2:56:b1:94:fa:b8:14:32:d6:
         b3:8b:bf:75:b0:98:f4:9a:d7:50:75:e4:11:f0:f2:7a:70:f7:
         fa:f2:93:99:73:6f:ab:b0:45:58:df:f8:43:a1:a2:17:70:8d:
         26:d7:8f:c3:7c:c6:55:4b:25:bb:9c:09:07:cd:d8:19:38:f9:
         18:00:86:21:9f:ad:1b:a5:e4:b6:39:0c:0a:57:f4:f1:09:11:
         12:0b:40:41:9d:80:89:66:da:0d:a8:4f:61:cd:48:b3:75:af:
         e8:3f:cd:92:d6:18:d9:49:06:d8:0b:b5:35:40:02:d4:2f:1d:
         64:d2:f0:1b:a5:8b:cf:99:aa:61:68:e8:b4:67:52:32:02:8f:
         63:3e:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org