Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134312e3232382e302f32342d3234203d3e20313337333833.roa
File:                     3130332e3134312e3232382e302f32342d3234203d3e20313337333833.roa (raw, json)
Hash identifier:          VMxEisMC1PUP4yLmlDcu5LS+ukTaMxxP3nlIl7JgrtA=
Subject key identifier:   66:0A:42:DF:85:B1:FF:3E:C4:C8:B8:62:20:C6:F7:09:98:7D:D4:DA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       16A994FA8AA0FFABEFE8ACBB98FD0A7845D661EB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134312e3232382e302f32342d3234203d3e20313337333833.roa
Signing time:             Wed 02 Mar 2022 04:00:03 +0000
ROA not before:           Wed 02 Mar 2022 03:55:03 +0000
ROA not after:            Thu 02 Mar 2023 04:00:03 +0000
asID:                     137383
IP address blocks:        103.141.228.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a9:94:fa:8a:a0:ff:ab:ef:e8:ac:bb:98:fd:0a:78:45:d6:61:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  2 03:55:03 2022 GMT
            Not After : Mar  2 04:00:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:49:95:7c:76:42:7f:02:28:3b:bf:b3:b8:
                    5d:b1:a9:c8:a8:d2:51:e0:cb:7e:c8:6d:a1:c0:5b:
                    a0:f8:39:17:de:58:83:19:82:e0:3c:2f:09:e8:41:
                    fa:98:f3:8c:c2:1a:3b:40:e1:08:3c:9e:e8:33:89:
                    21:97:cc:8a:50:f6:89:1c:ad:a5:e1:0f:6a:0e:03:
                    0c:b6:6a:2e:bc:9d:1c:6a:19:51:f4:e5:12:5f:30:
                    32:f4:f1:3e:df:67:37:81:d5:5c:84:7c:0e:e5:6f:
                    e9:81:49:a3:89:10:4a:78:52:de:e3:56:00:92:b4:
                    69:9d:67:46:31:b6:b2:04:b1:7d:9c:a6:f1:7e:f3:
                    30:c4:ce:92:68:91:73:55:6d:72:2f:af:5a:c4:75:
                    f0:d7:92:f1:0a:d6:63:d6:e2:c6:ac:40:8a:54:97:
                    03:92:25:6e:24:fe:6a:d8:13:bc:cc:a2:a7:56:54:
                    76:ce:20:42:7d:09:3a:d8:6f:64:85:fe:2c:a1:c8:
                    dc:2b:76:90:8c:a2:5d:d6:52:ae:8b:6b:5a:a5:2a:
                    c5:f9:55:5d:a8:3a:05:0c:3f:5e:fe:07:8c:96:19:
                    26:b1:46:4b:31:d9:cd:06:a3:6d:d8:db:63:c8:30:
                    6d:2c:49:fa:b0:ab:cc:6f:c9:43:32:da:52:64:f5:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:42:DF:85:B1:FF:3E:C4:C8:B8:62:20:C6:F7:09:98:7D:D4:DA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134312e3232382e302f32342d3234203d3e20313337333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:70:6f:16:4c:a8:b8:82:5b:69:9f:14:1c:eb:ee:b4:86:1c:
         00:75:f4:f8:ec:c7:64:fb:16:29:10:71:a0:aa:d9:74:91:60:
         a5:6b:86:a2:c8:33:33:1a:6d:fb:d1:02:dd:e5:9f:fb:9b:a2:
         35:7f:ca:2e:2f:2f:65:bd:37:e4:66:95:2c:60:aa:6b:40:84:
         88:bf:42:bd:8e:03:bb:e0:15:0c:9c:ff:f6:9f:94:1f:27:8a:
         e0:82:c6:d1:e2:08:82:c2:70:72:0d:21:65:d3:15:72:e4:c5:
         eb:38:ca:13:fc:22:30:10:a4:07:a0:b8:6f:4d:f4:12:00:a4:
         c4:97:77:5f:55:55:d8:0e:78:85:16:41:ea:3d:b9:39:27:18:
         95:5f:72:56:c1:43:5f:c6:71:d8:23:4d:1e:03:ac:dd:65:f4:
         7f:00:59:b5:ef:01:71:16:15:6d:4a:7a:c4:24:8b:65:3f:09:
         8b:b5:7f:16:ca:ad:13:26:25:10:20:5b:b4:00:79:67:89:3d:
         bb:2e:f5:4c:64:25:d5:59:ef:77:a2:70:35:b2:8d:ec:dc:a8:
         aa:1c:dc:eb:ce:47:5e:91:27:c6:70:41:8a:9e:18:b9:d4:72:
         90:74:e7:95:fa:79:a1:21:06:2a:ba:c2:a8:1e:3b:fe:aa:88:
         a0:8e:92:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org