Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132362e3132302e302f32342d3234203d3e2030.roa
File:                     3130332e3132362e3132302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          vq7LYUjMP+4/VGFBoKaVdbffmaaVz6yJdGIywdIRX0c=
Subject key identifier:   12:25:CF:22:A3:AF:34:D9:55:0B:08:9B:F6:62:6E:53:54:96:37:BA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       764A54FD4567354C723E94C434675FBEDDD193FD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132362e3132302e302f32342d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:33:33 +0000
ROA not before:           Wed 02 Feb 2022 06:28:33 +0000
ROA not after:            Thu 02 Feb 2023 06:33:33 +0000
asID:                     0
IP address blocks:        103.126.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4a:54:fd:45:67:35:4c:72:3e:94:c4:34:67:5f:be:dd:d1:93:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:28:33 2022 GMT
            Not After : Feb  2 06:33:33 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:9c:49:11:0c:c7:c0:c9:5b:cf:41:50:f4:
                    85:8a:81:ee:cc:af:30:bf:46:ec:41:5f:be:02:e5:
                    e1:b5:fa:cd:29:c0:cb:67:b2:21:7f:83:20:09:6f:
                    3b:ab:f3:ce:21:dc:d9:46:c3:42:11:3b:6f:e3:36:
                    9f:48:d2:16:97:93:48:f5:f5:50:f4:b0:d8:16:88:
                    92:d7:b2:5f:df:fe:35:d6:ea:f9:b0:86:64:a5:30:
                    96:04:a7:37:a7:6f:44:bb:65:70:6b:6f:d9:18:34:
                    2b:7d:a0:f7:a9:77:fe:9b:ac:fb:d1:fd:da:69:68:
                    02:e7:a3:26:b8:ff:e7:55:f6:17:38:c3:2d:c3:f2:
                    0a:56:d8:d2:82:5d:81:53:56:a8:12:ef:75:5d:9d:
                    64:7c:0b:22:06:73:c1:92:fd:2e:19:a2:1a:d5:3b:
                    59:56:e7:c7:54:a6:23:a1:65:b4:63:9e:ff:f0:ac:
                    1f:5a:b0:c1:4c:37:5b:dc:d3:aa:1e:1d:76:44:fb:
                    f0:3d:2d:b3:34:5c:ed:1c:8f:1a:31:bf:eb:a7:3b:
                    e5:a1:35:2b:cc:09:0b:0f:94:9c:45:8c:69:d0:61:
                    32:36:19:f2:f4:27:ce:37:5c:cc:dc:26:67:e7:c9:
                    ae:95:29:93:17:c8:bc:13:a8:a3:28:a5:ac:b5:35:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:25:CF:22:A3:AF:34:D9:55:0B:08:9B:F6:62:6E:53:54:96:37:BA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132362e3132302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:bc:91:c4:de:07:d7:28:48:81:ea:e7:da:34:df:3d:92:8e:
         a5:4b:66:95:08:c5:58:b1:12:5f:51:b3:70:93:b8:78:7c:e6:
         18:81:fc:26:f7:f0:62:e3:41:69:fa:d0:98:29:18:bd:62:65:
         28:59:e9:da:9c:58:9d:7c:a9:47:63:8c:fd:e3:be:75:0d:70:
         40:d4:47:d9:e7:81:37:93:3f:64:dc:04:83:ff:dd:e0:93:31:
         15:c1:4a:39:c4:0e:fc:c0:ba:36:65:57:92:57:e5:0b:eb:17:
         cf:ad:be:65:e3:f6:57:e9:ca:42:ea:17:66:b4:11:b9:ad:79:
         e4:87:ba:ee:be:23:66:2e:bb:13:8e:71:f5:77:33:7e:72:a7:
         58:20:a3:40:32:26:5f:c9:65:28:e5:a9:c2:57:e4:07:53:55:
         1d:c4:5a:dc:6a:da:70:69:17:da:7e:80:b6:6c:8c:a3:b1:3d:
         00:4b:b3:b0:38:08:92:6c:0d:f6:11:bd:86:d0:27:7d:4e:39:
         b0:8d:4d:21:75:b9:26:bc:b1:1f:f0:e0:e7:a9:c9:05:a0:cd:
         85:17:36:63:93:6d:72:1c:35:c6:a8:57:66:73:64:e2:1a:64:
         b8:77:d5:43:7e:b1:d1:1a:eb:f3:e9:9d:f6:10:cb:0d:9f:05:
         4b:16:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org