Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133372e34322e302f32332d3234203d3e2030.roa
File:                     3130332e3133372e34322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          D0H6/oEziMXSjilF9g1EWuVfuRGqi6HxyFvziLpavqk=
Subject key identifier:   1F:08:53:62:37:B6:4A:9F:82:4B:07:8F:59:52:BD:F8:9C:44:7A:48
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4E51243E52124A823DFFBAF03A902226F7AB7A14
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133372e34322e302f32332d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:31:03 +0000
ROA not before:           Wed 02 Feb 2022 06:26:03 +0000
ROA not after:            Thu 02 Feb 2023 06:31:03 +0000
asID:                     0
IP address blocks:        103.137.42.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:51:24:3e:52:12:4a:82:3d:ff:ba:f0:3a:90:22:26:f7:ab:7a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:26:03 2022 GMT
            Not After : Feb  2 06:31:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:48:d0:e7:eb:ac:00:ba:2f:cd:c0:27:9e:
                    d5:e8:d6:40:9b:d4:49:ba:4e:5e:2b:cc:fc:91:0d:
                    a2:8b:fa:99:17:73:e2:ba:b7:f7:84:24:d6:45:b5:
                    a5:18:9d:a7:2e:51:f0:11:ec:b0:1e:45:a4:80:3b:
                    78:fc:d9:00:7a:24:f5:a2:07:98:98:61:c7:2f:4e:
                    71:2c:f4:d2:8d:3b:05:b3:eb:ce:5a:13:cd:a2:4f:
                    57:7d:b1:aa:d8:30:12:80:b6:f7:a0:99:b8:67:4c:
                    ed:8b:91:fe:91:f4:b5:b4:6a:23:d5:69:35:c4:e3:
                    c8:5a:ce:27:87:b2:0f:01:37:71:86:bb:76:da:e0:
                    40:9f:e0:67:df:5f:55:7e:29:51:f0:20:85:da:7a:
                    ae:c7:42:df:28:82:7a:a1:e5:d1:16:a5:f1:d9:ab:
                    4c:7c:5b:74:c5:15:1d:a1:62:d9:20:d4:96:5a:5b:
                    a2:f1:37:3c:82:22:8d:6a:f5:0f:0d:24:62:34:7e:
                    17:6e:23:6c:87:15:17:53:f4:cf:d1:65:c9:5d:52:
                    a0:c8:cb:1e:30:75:83:74:4f:ae:d5:81:66:d0:5b:
                    d0:6e:37:00:b8:99:56:cb:ee:7e:bb:08:8b:d1:ed:
                    d2:ab:c6:18:b6:8e:2c:8c:72:36:c6:01:57:ff:c9:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:08:53:62:37:B6:4A:9F:82:4B:07:8F:59:52:BD:F8:9C:44:7A:48
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133372e34322e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:4f:92:e2:2f:56:a1:76:8b:1e:5d:7e:20:d7:7e:c1:14:a6:
         13:e3:ed:fb:10:7f:06:38:f4:97:3a:1b:0b:40:02:9a:58:a5:
         cd:a0:e7:75:6a:19:8f:d8:cc:9c:a9:e9:26:6a:f7:3a:0d:75:
         41:51:16:a6:5f:e1:fb:7c:6f:96:e1:f0:4e:a0:89:62:11:59:
         82:5e:ba:3a:1e:7a:c5:cb:1b:dc:8d:19:5e:db:ee:df:20:27:
         63:4d:db:67:16:24:81:8e:de:e7:f5:70:93:48:bd:01:09:64:
         f1:74:80:bf:36:8d:46:4b:96:69:5d:15:bb:67:3e:b2:54:6f:
         86:22:34:79:78:3f:59:ba:0d:da:17:8a:21:7b:b5:1b:b7:b3:
         69:d2:a4:bc:66:a8:aa:84:d2:a3:d2:fc:e9:57:13:a7:8c:e5:
         6b:85:31:02:32:e3:d2:e9:6e:07:38:f5:51:82:69:e7:1c:0c:
         a1:51:79:a7:fa:b7:b5:6f:35:45:8f:02:cd:3c:a8:9e:ab:fc:
         be:99:58:a0:4c:ed:ad:8f:e5:14:75:70:dc:67:4c:85:bf:4e:
         7d:a7:a2:15:3f:1c:b6:bc:c1:34:df:90:03:fb:08:2d:bf:44:
         75:d6:6d:0d:f9:6f:32:56:a4:c2:d8:e2:15:8c:f3:62:ce:16:
         a0:32:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org