Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e3138322e302f32332d3234203d3e20313338383136.roa
File:                     3130332e3133362e3138322e302f32332d3234203d3e20313338383136.roa (raw, json)
Hash identifier:          zeRUGjsVKTBwAmWgzt+MUhzELyCiOwPRElRlA6U3VTA=
Subject key identifier:   37:FD:41:15:1D:93:C2:D7:C7:B2:44:55:34:FA:68:0A:29:02:58:E4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       09E8827CCE86160DB0F33A3691D4B62676632A7F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e3138322e302f32332d3234203d3e20313338383136.roa
Signing time:             Tue 08 Jun 2021 09:39:56 +0000
ROA not before:           Tue 08 Jun 2021 09:34:56 +0000
ROA not after:            Wed 08 Jun 2022 09:39:56 +0000
asID:                     138816
IP address blocks:        103.136.182.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e8:82:7c:ce:86:16:0d:b0:f3:3a:36:91:d4:b6:26:76:63:2a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  8 09:34:56 2021 GMT
            Not After : Jun  8 09:39:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:c1:57:da:27:0f:e1:f4:d1:39:f1:9d:4b:
                    da:08:63:be:d1:57:87:e7:79:58:fa:19:01:fe:ec:
                    28:55:00:0f:6a:17:4c:15:7f:6c:a4:5f:24:02:b0:
                    d2:9e:26:10:99:20:dc:9a:3d:35:0a:0a:68:ce:d7:
                    11:60:c7:fd:33:95:ed:80:04:8b:9f:15:de:14:6f:
                    29:21:ff:c6:88:25:40:d1:06:31:ee:85:56:a5:e6:
                    40:e4:1d:77:17:a0:ad:f5:4b:94:6a:42:03:a9:04:
                    d8:22:c2:45:de:86:eb:63:95:c2:99:06:ac:c8:7a:
                    6a:d2:b2:80:82:8e:fa:fb:5a:0b:10:2b:8c:b7:0a:
                    48:47:8c:b1:24:63:f7:5b:4d:9c:31:01:be:13:77:
                    9a:2d:d1:a4:97:47:50:96:9a:d6:5a:f8:0d:2c:f2:
                    2d:45:b0:71:a4:79:7c:47:00:a7:72:db:f7:e3:ef:
                    3b:a7:04:c0:c6:b9:af:ad:20:fb:35:24:6b:f3:b9:
                    69:ea:ae:25:5a:81:fb:f4:62:c4:ea:77:87:cc:c1:
                    b5:a9:5d:a2:7d:9a:e6:d4:20:51:79:4d:fb:5c:10:
                    90:7d:34:10:ab:6c:a8:6e:4e:de:97:38:68:92:2e:
                    81:dc:23:78:4a:36:02:a9:0d:81:cd:04:66:25:c3:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FD:41:15:1D:93:C2:D7:C7:B2:44:55:34:FA:68:0A:29:02:58:E4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e3138322e302f32332d3234203d3e20313338383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:c5:e8:79:17:ea:ab:cc:bf:4a:a9:88:47:08:d4:78:b0:52:
         73:71:18:6c:7d:65:c7:7d:8e:0d:23:29:a2:eb:d2:7b:65:c6:
         8c:bd:99:15:d0:e7:58:8e:df:34:26:ec:ab:ec:19:ba:c4:73:
         11:f9:45:b1:08:6c:f8:43:6d:4b:98:07:e0:86:cf:db:98:c1:
         d7:25:9d:1d:79:da:83:9b:f3:13:ed:78:52:87:b2:35:95:ed:
         05:4a:ae:92:9d:fa:30:2b:17:09:4f:24:aa:8c:43:9c:9e:97:
         45:cf:6d:2b:84:c9:59:14:3e:7b:c5:45:cc:91:c5:79:69:9a:
         d9:fe:15:b5:26:c6:cf:20:c8:0f:18:6f:c0:0c:7c:8f:55:8d:
         9e:86:a1:7d:a9:ae:5c:e9:ef:de:43:a8:b5:bf:a8:5a:be:80:
         02:4a:00:f0:43:ad:6a:26:e2:85:c1:bb:ed:40:7f:c3:48:95:
         8b:cd:6c:f9:4d:c2:c8:37:8b:41:31:a8:cd:d9:9d:00:85:f3:
         ff:69:58:99:ca:19:97:ee:47:d2:f8:cc:51:32:cd:4b:7b:4f:
         23:6e:ef:e9:db:f0:70:70:4d:40:b1:82:be:03:f4:75:48:68:
         38:9a:fd:af:4c:9f:55:33:52:46:35:c6:e0:68:3f:ca:66:e9:
         78:45:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org