Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132392e3231362e302f32322d3234203d3e2030.roa
File:                     3130332e3132392e3231362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          o9SXEw1o+8VtUq9EQFlChjEMQ/AvyGzv9EeDeb0/YsM=
Subject key identifier:   75:4B:BF:1C:0A:BA:B9:83:28:DD:92:27:8C:C4:23:14:4B:52:63:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2E2C02596005B39F2771F7A072660859996CE840
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132392e3231362e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:26:27 +0000
ROA not before:           Wed 02 Feb 2022 06:21:27 +0000
ROA not after:            Thu 02 Feb 2023 06:26:27 +0000
asID:                     0
IP address blocks:        103.129.216.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2c:02:59:60:05:b3:9f:27:71:f7:a0:72:66:08:59:99:6c:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:21:27 2022 GMT
            Not After : Feb  2 06:26:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:55:a6:54:a9:6b:d4:cf:c0:12:f7:d0:73:e1:
                    0d:98:c2:50:09:0b:55:0f:04:a5:97:c2:aa:9c:52:
                    d3:bf:75:60:30:1f:31:51:5f:46:55:50:b6:b6:b9:
                    c7:b6:b8:d2:ed:a8:ce:61:f1:bf:97:4e:b0:af:65:
                    a0:08:3b:0b:c1:01:bc:08:fa:4c:5b:68:9c:c4:02:
                    95:9f:66:76:4a:11:4f:22:53:57:b5:81:eb:9d:fd:
                    0b:63:7d:65:ca:ea:bb:86:0f:38:51:24:d2:d2:8a:
                    de:c4:8f:6c:4f:08:24:20:9d:09:43:4c:6f:f5:bc:
                    b9:e2:3f:47:19:ba:a7:01:31:86:1f:aa:50:02:fb:
                    ad:fc:25:7b:ec:e8:39:ea:22:4a:fd:46:ab:63:c8:
                    28:f0:ed:a4:4e:98:4c:93:0e:24:84:71:95:d8:2b:
                    45:76:fb:2d:ee:8b:32:4d:ce:9d:d8:ca:8c:28:d1:
                    b0:2e:9b:36:5c:6d:06:de:be:d3:e7:10:5a:63:bc:
                    92:23:e7:83:03:a0:9b:23:23:fd:ba:50:97:bd:8d:
                    e9:10:57:0d:46:40:75:26:dd:3a:fc:35:83:b3:97:
                    47:04:86:af:a5:43:40:cb:b9:11:ea:71:53:a7:e4:
                    03:5e:ee:df:b5:a8:3a:7d:19:b0:62:fc:9a:5d:03:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4B:BF:1C:0A:BA:B9:83:28:DD:92:27:8C:C4:23:14:4B:52:63:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132392e3231362e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:ec:b1:ce:56:f7:b3:6b:11:5f:29:cd:b4:db:2c:1d:f8:b7:
         53:8c:e0:8b:2e:39:a9:7e:a5:c1:c7:54:3a:87:cc:53:1a:d6:
         9d:10:f3:41:2f:11:71:33:e6:8c:3e:14:2a:0c:a6:f9:0a:47:
         91:95:c1:61:b0:8b:79:a9:05:6a:ef:44:56:f6:e9:9d:4c:3a:
         b9:3b:0f:d8:31:1b:39:f1:9e:48:fe:df:65:93:40:eb:18:7d:
         03:31:43:ad:1f:34:de:05:6c:6d:92:a3:3f:cb:e5:c1:00:d7:
         0a:d0:c0:14:b7:6b:8d:1a:a1:94:b4:20:00:5d:c7:cf:ec:e4:
         5e:25:58:7d:42:7d:3c:8b:5e:30:2d:bd:af:87:1b:a4:2b:ef:
         dd:ca:76:9c:c9:44:81:9f:31:9a:d2:2d:72:2c:cf:c3:64:da:
         60:ab:ab:78:2d:e0:70:04:46:78:c1:06:d4:9c:22:2a:20:ab:
         9d:88:fe:05:bc:7e:2e:0c:c6:c6:b1:3d:10:f0:e3:fe:69:d2:
         8c:cc:a3:3b:27:b6:69:47:45:2f:cf:fe:90:dd:37:ef:94:26:
         25:34:a4:9d:ae:98:23:3e:df:cf:a2:8e:c3:1d:77:4f:9d:38:
         3d:39:ca:4e:9c:54:db:79:0a:a2:7a:07:0f:74:39:18:3f:92:
         34:cc:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org