Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e39362e302f32322d3234203d3e2030.roa
File:                     3130332e3133312e39362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          33dl75/XUnHz2ON29Mx4FoXfZssomqbVxk5+g932wxk=
Subject key identifier:   18:85:17:41:93:EF:60:7C:04:DE:2A:6F:5B:23:38:84:9E:82:6C:64
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       61BE091EA6270CF0A7B74425357F239B27858156
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e39362e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:23:37 +0000
ROA not before:           Wed 02 Feb 2022 06:18:37 +0000
ROA not after:            Thu 02 Feb 2023 06:23:37 +0000
asID:                     0
IP address blocks:        103.131.96.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:be:09:1e:a6:27:0c:f0:a7:b7:44:25:35:7f:23:9b:27:85:81:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:18:37 2022 GMT
            Not After : Feb  2 06:23:37 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f8:95:33:27:98:bf:da:0c:dc:20:c3:c0:27:
                    ed:41:22:23:d5:0b:ac:b3:98:15:30:e9:7b:2c:c7:
                    9b:3d:b7:a3:98:9f:c8:28:ee:db:99:aa:b4:62:a2:
                    f5:2e:bc:5b:99:a2:c6:cc:a6:12:fc:9b:ea:9f:36:
                    8d:50:85:e8:a5:87:e2:17:ef:fd:3a:3f:20:e5:ab:
                    03:1d:8f:a4:1c:29:8c:a5:d3:d6:0f:3c:0c:7c:91:
                    66:c4:49:48:c7:78:a3:31:35:29:b3:ad:06:70:f5:
                    0a:bb:2a:d9:93:59:e4:56:3d:69:ee:77:f3:98:5a:
                    0b:e4:74:07:21:b0:36:9b:d3:9b:99:a8:d2:d6:9a:
                    31:3d:81:f8:5d:bb:35:32:9c:34:1c:ad:40:13:9f:
                    1b:f1:fe:c5:e9:67:fc:03:b1:58:f2:b4:15:18:ba:
                    2d:a3:17:f0:84:35:3b:7b:0e:7d:4d:da:ed:87:c0:
                    db:40:32:a6:9d:b7:77:5c:d9:66:41:a1:ba:4f:6d:
                    8e:48:d4:56:be:11:2b:5d:53:08:90:35:d3:34:65:
                    2a:91:39:6f:6f:78:c0:2b:d2:5c:4b:97:35:39:b5:
                    a3:de:01:b1:20:48:94:f0:58:75:3c:f6:48:7a:2c:
                    85:d6:6a:7e:b7:fd:1c:1d:74:33:fa:56:bc:21:4e:
                    5b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:85:17:41:93:EF:60:7C:04:DE:2A:6F:5B:23:38:84:9E:82:6C:64
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e39362e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:51:4a:4b:1c:5a:7a:73:25:12:03:60:c8:b4:7f:93:49:f5:
         57:76:34:da:5b:00:0b:09:51:d8:5b:30:9f:82:0d:f5:d4:25:
         86:6f:af:7a:61:1e:7a:ab:80:6e:e4:57:25:b1:ad:ad:78:ca:
         49:e6:31:2a:db:68:c7:e5:5a:8a:42:9b:a5:1b:8f:f9:46:9e:
         47:33:8f:94:9b:e4:61:17:a0:8f:45:e4:4c:00:d8:e6:77:0a:
         97:97:b4:ad:39:89:d9:07:91:af:f7:f2:5e:b6:5a:78:69:37:
         80:7d:66:6c:f4:a7:7f:16:c1:a3:87:d7:6f:a2:3c:01:ec:79:
         26:fc:47:00:7b:11:a3:b1:ea:8e:e5:16:1e:c9:b8:f5:5b:3b:
         f2:3d:07:41:3c:63:58:48:81:e4:19:b0:47:11:f8:15:1d:f0:
         b1:3a:65:1e:d6:f6:79:4c:db:57:8c:e3:8a:f1:ba:44:7b:a2:
         1c:04:07:62:40:90:09:c2:db:b2:27:6a:de:6d:79:60:45:2a:
         51:56:ed:7f:fe:4b:f1:77:5b:51:26:d6:79:28:0e:9f:e0:73:
         ad:c9:3f:fd:65:f4:af:99:3e:41:16:c8:ea:d2:6a:a6:f9:a1:
         f7:75:a7:04:54:fd:8c:bd:33:2f:4e:0b:58:55:8c:06:7f:16:
         41:77:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org