Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e302e302f32322d3234203d3e2030.roa
File:                     3130332e3133312e302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          JScGC/iLaP9yVCFQJ2RQBsBakRI62cI6YzUc2PqSck8=
Subject key identifier:   91:D7:FA:BE:0E:2B:BB:71:DC:A5:72:D7:ED:D2:7B:EE:F9:83:F2:98
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       77A8A9A0860FA7A575AABBD2026553829A32F866
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e302e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:26:04 +0000
ROA not before:           Wed 02 Feb 2022 06:21:04 +0000
ROA not after:            Thu 02 Feb 2023 06:26:04 +0000
asID:                     0
IP address blocks:        103.131.0.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a8:a9:a0:86:0f:a7:a5:75:aa:bb:d2:02:65:53:82:9a:32:f8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:21:04 2022 GMT
            Not After : Feb  2 06:26:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:e9:3e:b0:4f:4f:5f:91:67:98:07:da:f6:
                    69:b2:0c:43:0b:11:c3:9e:1d:35:83:4d:48:de:34:
                    67:1b:ef:0f:b3:50:a0:ab:fd:ad:51:e1:96:9d:ac:
                    d0:fd:7a:0f:07:91:a1:2c:73:0d:10:85:37:ee:a8:
                    e1:c6:6c:41:17:22:4f:c2:2f:10:06:9f:87:bb:8f:
                    c9:f9:84:0a:c6:f5:cb:17:e1:04:2e:f1:ae:1f:1d:
                    7e:cd:e5:96:c4:a7:14:74:be:cf:85:62:64:e2:24:
                    54:d7:22:2f:84:05:b9:75:cd:ec:32:ec:3d:65:22:
                    98:c4:06:3c:d3:02:58:17:c9:a8:1d:f9:5d:aa:4e:
                    64:22:ef:3f:01:0b:85:af:d2:48:76:fc:f2:e1:b6:
                    4b:14:54:c9:22:f5:b9:fd:e4:ce:ac:91:a5:5c:93:
                    a9:99:51:a6:03:33:69:d2:12:30:78:3c:28:ff:43:
                    c4:98:7d:4a:55:c5:3b:67:a0:36:2f:08:cb:df:25:
                    e1:ce:d7:02:59:18:fb:58:ba:30:33:6b:cf:32:02:
                    ae:ce:4a:81:c0:84:a3:79:fc:c2:c8:7a:22:58:31:
                    8f:28:ed:87:d7:3c:9a:c6:58:e5:3b:c3:8f:d5:3b:
                    15:74:c1:a9:e1:01:25:76:03:91:13:e5:48:88:ac:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D7:FA:BE:0E:2B:BB:71:DC:A5:72:D7:ED:D2:7B:EE:F9:83:F2:98
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e302e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:9a:d8:b1:2c:b5:d5:2d:51:12:e1:ae:02:c1:70:ac:d9:08:
         1b:38:92:7d:c6:33:38:2b:b7:22:e7:d4:be:7d:25:ea:5e:0b:
         b0:3d:4c:97:61:76:e0:1f:fe:75:84:0f:18:8b:2c:b7:70:08:
         a5:f8:16:1c:a7:8a:22:57:03:00:e7:a6:ba:a9:ab:dc:0f:c8:
         ee:58:58:1a:f8:55:b8:4f:fd:f3:90:5d:0f:1c:4f:e5:a0:92:
         f2:f1:e9:43:4f:10:23:25:b5:b9:0c:79:bd:42:72:0e:f3:a7:
         af:4c:78:6e:8e:d2:27:e6:9d:9a:22:2b:98:17:4c:24:35:cc:
         d0:18:59:cf:49:04:42:a2:91:04:9a:d7:e3:fb:64:30:d7:34:
         58:5d:74:5b:7c:93:4e:63:84:bb:d3:d2:ca:a7:6b:b0:ed:38:
         e1:02:32:49:87:85:37:7c:74:8d:73:7e:d3:25:b2:14:12:01:
         f4:93:91:a8:bc:fe:25:2f:cf:81:70:7b:d2:b2:03:dc:d4:06:
         99:d4:b7:f0:46:ea:23:50:b6:81:09:ba:f2:a2:6f:e7:07:e9:
         95:ef:15:9c:a3:9d:a1:80:d6:16:cf:4c:5f:8a:58:b1:5c:f9:
         d6:0e:b8:7d:18:6f:6a:be:ce:52:88:5e:9a:d5:9b:b5:f4:c1:
         0c:bb:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org