Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3139322e302f32322d3234203d3e2030.roa
File:                     3130332e3133302e3139322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          9kGGkxCrZQny7W5Fia1JeMI7XAyxPg36i0ah1EA9kac=
Subject key identifier:   0F:CA:09:8E:FF:B8:8C:90:A8:8F:F1:A5:55:9B:77:EC:E3:DA:FE:76
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1D84689CB05CB1F81143D5F464F5F1A1FEA6806E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3139322e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:21:37 +0000
ROA not before:           Wed 02 Feb 2022 06:16:37 +0000
ROA not after:            Thu 02 Feb 2023 06:21:37 +0000
asID:                     0
IP address blocks:        103.130.192.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:84:68:9c:b0:5c:b1:f8:11:43:d5:f4:64:f5:f1:a1:fe:a6:80:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:16:37 2022 GMT
            Not After : Feb  2 06:21:37 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:da:79:a3:44:55:c3:32:b9:ee:41:40:f1:
                    11:50:d3:29:95:e9:a4:9c:99:73:8d:f5:dc:5d:7b:
                    2c:a0:3f:c5:c5:ec:30:ab:c8:16:07:2f:ed:09:8c:
                    af:96:69:3a:b1:bb:42:90:8f:7b:c7:4c:d9:8b:84:
                    c3:93:46:d7:d4:4c:3b:6b:73:a0:af:ad:dc:c0:cf:
                    54:3d:12:0e:eb:70:82:38:db:37:e9:87:bf:c0:99:
                    14:d4:63:10:46:1a:68:a4:77:c5:07:3c:38:f8:b2:
                    e2:27:bd:a8:fb:69:78:c2:17:00:fa:8c:8b:b6:9e:
                    a1:3f:14:2e:07:04:31:74:31:b8:1e:f3:da:03:9a:
                    df:27:2d:5d:ad:b1:92:37:66:cb:62:a1:9e:c4:19:
                    ec:59:b3:63:d0:0e:0e:2f:0c:e6:7e:bd:83:2f:4a:
                    0a:92:fc:1c:bf:4c:57:fa:c6:62:bf:35:70:34:73:
                    18:02:7f:ac:ea:17:e5:1c:56:4c:4d:8e:0d:06:5e:
                    c2:f4:7d:f7:84:49:6c:a8:02:3d:bf:11:0b:78:8c:
                    cb:47:9e:b5:0e:08:35:54:a6:cf:dc:97:6b:32:8d:
                    23:47:8e:63:c2:79:43:74:37:1f:4d:5d:32:b3:39:
                    71:88:ff:d1:d6:cb:1c:bc:67:bb:01:be:32:82:9c:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CA:09:8E:FF:B8:8C:90:A8:8F:F1:A5:55:9B:77:EC:E3:DA:FE:76
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3139322e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:97:e1:4b:f5:a1:9d:65:7d:8e:12:53:26:6c:be:ec:03:38:
         66:4f:50:23:fa:9c:47:c6:ba:2e:c7:c6:f4:26:c6:f9:e4:70:
         c9:ea:6a:b1:58:ed:98:fd:63:ad:0d:65:ca:ee:21:70:aa:7f:
         90:2e:22:25:36:6f:1a:ef:dc:4d:0c:e7:21:2f:0a:51:14:44:
         71:f6:cb:b6:5e:44:99:b4:ce:ee:31:a0:87:35:89:61:96:d1:
         70:14:10:87:cb:82:60:2f:2e:ab:31:9e:34:b9:c4:a8:f6:ca:
         c8:52:ad:e2:89:c9:cf:a1:32:fb:43:c7:ac:1e:48:03:c9:2d:
         86:22:db:c1:87:18:fb:a6:45:c6:32:04:0d:8c:5c:7a:e3:b0:
         46:aa:6e:83:1a:b0:ab:5d:66:51:26:f6:dc:7e:d7:e7:57:69:
         18:7e:19:b9:90:b5:c0:0c:44:ac:7e:b5:01:d0:c0:c4:e8:47:
         95:49:86:83:f9:5e:30:b3:52:8a:74:5d:4e:61:50:e6:b6:0e:
         f2:f0:4f:e6:76:0f:56:28:be:2a:a4:88:ae:31:1c:c8:09:cd:
         96:41:81:f0:2d:b0:66:91:ee:c5:fe:45:8f:8d:55:52:dc:d2:
         19:b9:6f:d2:89:50:0b:a3:62:94:e2:1c:47:ed:d0:71:c1:1a:
         9f:e6:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org