Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e3132392e302f32342d3234203d3e2030.roa
File:                     3130332e3132372e3132392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          iwDao8nrBMV41YMacI6rviVFdDa5ZIkB3W7uH6bKKbY=
Subject key identifier:   6E:7B:CA:DF:94:B9:C4:64:36:81:63:6D:C1:6A:B9:5E:67:A7:B8:F6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1C821B81CBB6FD2F2CA16A7555D22D2448FE630E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e3132392e302f32342d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:30:42 +0000
ROA not before:           Wed 02 Feb 2022 06:25:42 +0000
ROA not after:            Thu 02 Feb 2023 06:30:42 +0000
asID:                     0
IP address blocks:        103.127.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:82:1b:81:cb:b6:fd:2f:2c:a1:6a:75:55:d2:2d:24:48:fe:63:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:25:42 2022 GMT
            Not After : Feb  2 06:30:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:43:57:a9:94:0d:5b:ff:6d:36:d0:ba:11:
                    e0:34:cc:ff:ea:86:5d:d6:69:71:30:7f:8d:c2:d9:
                    46:cf:29:72:18:e6:89:15:c8:62:0c:fd:36:b9:bb:
                    ef:26:ba:b4:f4:08:30:d1:d0:c0:64:59:cf:6f:3f:
                    41:e2:13:08:1f:18:18:aa:17:10:4c:0b:53:6c:03:
                    90:0b:49:c2:8f:dd:c4:a2:5d:58:e9:d8:27:ce:17:
                    fe:15:c3:4c:eb:2b:08:89:3a:9c:d4:1a:a2:8d:54:
                    78:3a:8d:fd:6e:fe:c3:14:4c:26:93:6b:f4:9f:fd:
                    46:77:49:56:69:46:63:e1:26:c0:4e:8e:0c:ed:2c:
                    67:63:56:76:30:e0:21:02:59:e5:1c:ab:2e:e8:d9:
                    d9:10:37:b7:05:c3:c2:6e:46:04:73:e8:71:5c:fc:
                    5a:bf:be:63:42:b5:e8:0b:00:eb:90:cc:9a:47:33:
                    4b:06:04:49:02:93:4c:88:55:a0:f8:a6:69:24:86:
                    91:c7:96:23:4a:a8:51:a8:a1:34:67:33:f0:3c:54:
                    ef:65:2b:fd:11:15:41:62:f3:51:c9:83:b5:65:d3:
                    3c:fa:44:a2:d9:36:5d:c9:5f:9e:ca:d6:02:7a:3f:
                    e7:b8:ad:92:f5:f3:09:56:f2:ed:fa:5d:72:e3:a3:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7B:CA:DF:94:B9:C4:64:36:81:63:6D:C1:6A:B9:5E:67:A7:B8:F6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e3132392e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:52:31:62:56:e6:e0:9a:16:82:4f:97:04:89:4d:51:84:
         52:9a:f6:8d:d5:2f:1d:1a:1f:88:6e:c3:ea:e4:c8:eb:26:c0:
         9c:eb:f6:02:58:07:10:4b:c7:37:ef:df:e4:63:42:9c:8b:0a:
         cd:72:a6:96:63:3c:3c:83:a7:0c:0d:ea:9c:fb:79:ba:6a:ca:
         08:ee:71:7f:dc:42:c9:28:06:2a:79:8b:a9:15:e6:c4:fd:6e:
         14:59:b8:18:00:31:bf:14:9c:3a:69:9b:c9:21:4b:82:e8:46:
         4c:50:5c:f9:51:dc:1f:43:b7:10:a4:6e:e6:85:77:63:d8:ce:
         a0:bd:02:53:7a:7e:7e:36:30:b0:79:3f:ae:d1:7e:1e:bf:41:
         61:5b:5d:50:a0:8b:e6:e9:12:95:fb:fd:64:81:a6:04:0d:4f:
         98:cd:40:1c:83:23:63:67:e3:a3:de:33:5f:2f:84:a8:95:39:
         06:64:0d:97:63:1f:f9:38:3b:84:c0:4c:9b:94:0a:d5:05:ac:
         2c:07:2b:f6:34:6c:08:ca:5e:5a:21:00:24:e2:6b:1b:21:f6:
         3e:6d:9b:a2:81:80:3d:04:c6:fa:96:f4:53:c7:cb:43:95:dc:
         e0:57:dc:78:2b:d7:92:ef:a7:d5:be:04:9a:e8:20:66:6a:88:
         d3:ce:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org