Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e342e302f32322d3234203d3e2030.roa
File:                     3130332e3132352e342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          560+WyLhyRl0AVs9xUCtwXQgEhtbBuLACs0tWxF7wTQ=
Subject key identifier:   62:E1:E9:B4:E7:23:45:A2:1D:27:F5:80:56:85:3B:AC:FD:3F:B6:F5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       49376CFC46CCD83B70475B94C2417F812E67A9D0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e342e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:24:38 +0000
ROA not before:           Wed 02 Feb 2022 06:19:38 +0000
ROA not after:            Thu 02 Feb 2023 06:24:38 +0000
asID:                     0
IP address blocks:        103.125.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:37:6c:fc:46:cc:d8:3b:70:47:5b:94:c2:41:7f:81:2e:67:a9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:19:38 2022 GMT
            Not After : Feb  2 06:24:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:ec:55:29:23:fd:5d:ef:5d:c2:15:cf:6f:
                    e9:f3:f4:70:9f:46:21:ff:2e:54:af:89:be:a2:ea:
                    c4:22:de:5e:6a:6a:30:73:22:b5:6b:fd:4f:84:45:
                    ff:02:53:fb:b9:36:7d:1a:e6:1b:f5:ef:b6:ab:3c:
                    a5:cf:28:a4:fa:72:30:fc:b0:03:c5:ad:e7:c6:94:
                    ca:98:12:7a:b3:cd:14:dd:d5:a0:27:af:c5:a6:2f:
                    2b:4f:fa:4b:ad:41:be:8a:b5:7d:dd:b9:bf:fe:04:
                    05:5e:45:90:77:59:49:19:e9:20:b7:9e:20:a2:80:
                    f4:67:8e:19:15:84:a8:f3:d2:35:3e:34:f2:1f:9f:
                    26:55:6b:c9:3c:ce:dd:9c:9c:9c:a5:b8:74:8f:3a:
                    09:bb:13:95:c1:34:59:8a:65:80:42:ab:d8:32:d9:
                    61:bf:5c:02:93:4e:0f:a8:bb:d0:76:82:71:3f:69:
                    d0:9b:26:ee:6f:14:9c:c8:15:69:86:35:e6:b6:7f:
                    86:09:40:b0:10:cb:28:3b:8a:25:11:6f:18:77:8c:
                    93:68:b3:34:a4:10:fa:05:73:a3:6c:33:77:de:71:
                    30:4f:1a:8f:64:7f:17:08:0a:a1:df:85:2f:f6:4e:
                    99:93:49:da:7c:90:78:7c:6f:0d:16:e7:2e:a5:4d:
                    34:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E1:E9:B4:E7:23:45:A2:1D:27:F5:80:56:85:3B:AC:FD:3F:B6:F5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:bb:5f:60:94:e2:42:34:79:58:52:0c:db:eb:9b:c1:7c:80:
         62:2b:f9:ad:5c:38:f0:23:6b:b0:49:8d:4d:f4:9f:d5:a4:e1:
         d9:5f:2a:5e:2c:f3:50:c8:0f:36:8c:f7:11:fc:45:80:4e:bf:
         58:d4:46:e1:a5:e8:58:76:67:3b:89:ba:d5:b6:ce:4c:7e:cf:
         67:db:56:52:cc:2a:f2:3f:22:a5:28:af:de:5b:cb:19:60:44:
         0b:26:75:8e:52:23:fc:2d:fc:a2:76:2f:37:6d:07:4e:a6:6b:
         72:ee:b6:70:c1:47:8f:8b:04:e9:26:4d:04:e3:2c:7a:90:fc:
         69:15:ec:97:40:67:c5:b7:f7:2b:aa:5b:ca:53:c3:97:e7:50:
         92:67:02:47:d4:57:65:84:60:8b:46:c7:99:67:ef:3f:46:dc:
         f5:0f:fa:95:66:d3:dc:7e:08:89:ec:cc:73:0c:69:d7:13:bc:
         bc:e0:ce:a9:dd:5a:53:03:dd:f6:d7:c9:c9:e6:3e:ce:22:b2:
         4e:5c:c0:52:1c:b0:a4:f6:10:36:91:c5:15:a6:54:b4:1c:fe:
         78:42:ed:92:ac:49:4a:0b:58:a1:23:61:92:ee:1a:d5:d4:15:
         e5:fc:d3:18:d5:4a:16:6c:ed:34:33:b8:33:75:d9:d3:32:0c:
         29:8e:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org