Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132392e3234382e302f32322d3234203d3e2030.roa
File:                     3130332e3132392e3234382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          jjty90Qt3/qNHqctmwJYDUHlGLvDUq9zsknrtckww3E=
Subject key identifier:   8B:2B:26:E0:9D:5B:79:C2:AA:E9:D2:FD:98:45:27:D9:B4:F9:92:4D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4989F7D85F0BD9B56537131D4E56CF82D7392C9D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132392e3234382e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:21:00 +0000
ROA not before:           Wed 02 Feb 2022 06:16:00 +0000
ROA not after:            Thu 02 Feb 2023 06:21:00 +0000
asID:                     0
IP address blocks:        103.129.248.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:89:f7:d8:5f:0b:d9:b5:65:37:13:1d:4e:56:cf:82:d7:39:2c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:16:00 2022 GMT
            Not After : Feb  2 06:21:00 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:69:6a:70:7a:ca:99:3c:1a:20:ff:d9:de:
                    d5:cf:1f:4f:45:cc:42:6d:1a:5f:87:43:9d:7a:35:
                    71:3b:d5:dd:5b:53:5a:21:e6:fe:e8:51:ef:59:6d:
                    17:ff:e8:3d:66:bd:d2:07:44:3c:57:cc:f2:06:cc:
                    28:df:f5:66:50:b2:fc:18:ae:4e:9e:37:01:06:00:
                    5f:ff:b1:ae:89:e5:58:2d:ee:a4:60:f9:36:c9:ab:
                    4c:e3:40:1b:3c:53:8d:0e:92:d0:b2:c9:e7:bb:be:
                    dc:63:6a:20:dc:df:f8:d3:c9:ce:04:28:bf:e9:3d:
                    13:94:8c:4a:0e:07:ed:7d:63:da:e8:51:23:3b:e9:
                    02:7d:ac:cd:4c:ad:ba:83:4f:7d:d6:04:a3:48:02:
                    34:07:8c:a0:10:0d:19:2c:cd:04:7b:0e:d6:9e:f9:
                    37:57:97:b7:36:d5:f7:96:0d:b7:06:b3:91:7f:56:
                    91:2a:14:d1:6c:73:f2:b0:8f:38:4d:cd:57:98:0d:
                    1c:60:2c:ee:ae:62:4d:e4:b2:3f:2d:fc:90:d9:ab:
                    1e:a0:3c:93:21:ac:de:4d:50:50:02:20:78:d7:3f:
                    37:f6:08:00:d4:6f:a1:7f:a4:a8:8e:d1:3c:da:70:
                    99:0a:12:cc:7c:e6:b0:14:e2:d6:fd:2d:54:2a:6f:
                    e2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2B:26:E0:9D:5B:79:C2:AA:E9:D2:FD:98:45:27:D9:B4:F9:92:4D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132392e3234382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:a7:3e:a3:19:57:01:c5:45:08:7e:2d:95:bc:92:d9:fe:2e:
         5f:7d:3f:be:c5:84:98:a9:35:49:e3:54:f2:08:c9:f9:20:1d:
         b4:ca:a6:c0:51:c6:f8:a1:29:84:05:4a:be:93:84:6c:39:23:
         49:82:3e:e0:80:3f:21:4a:35:7f:9f:c5:1b:ea:9d:06:8c:36:
         3f:f3:9c:c2:00:1c:f0:14:45:a4:b9:d0:68:51:f2:50:57:74:
         91:be:31:0b:26:ba:92:4e:89:20:f6:4f:92:8a:b7:85:b0:6e:
         24:cd:fd:1f:d9:f3:28:7a:01:15:bc:99:39:aa:0d:b4:3b:a4:
         23:a6:7c:7e:4b:92:88:d5:bd:d8:2b:a7:66:3e:a2:75:4d:ea:
         7c:53:52:83:8e:b7:61:7f:7c:52:44:2c:03:62:bc:49:0a:03:
         5a:b7:cb:27:f7:7e:e0:43:ca:65:cf:92:94:07:52:e7:02:9f:
         f3:f3:73:ad:ae:cb:ba:23:d6:ca:57:c9:ba:02:06:a2:6a:bd:
         c7:ea:83:5a:63:fe:12:7f:77:11:30:06:e9:3d:f1:c5:9d:2d:
         fb:84:cf:c3:9c:ea:9b:05:45:98:53:f1:53:86:72:8f:7a:2c:
         e0:50:c3:4f:59:bb:9c:6e:ce:33:c6:bb:a6:6c:e0:d7:34:0b:
         2d:8b:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org