Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3138382e302f32332d3234203d3e2030.roa
File:                     3130332e3134332e3138382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          Yq6z6aCEr62AWFOuz3Hwme0Du4c19Ii3j/tjmhdo77Y=
Subject key identifier:   60:C2:EA:E5:39:16:DA:41:20:27:7A:91:9C:D3:3F:DF:4F:5F:78:25
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       623CFDE9611C3F69CC132B5B83714B01198B3D51
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3138382e302f32332d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:35:15 +0000
ROA not before:           Wed 02 Feb 2022 06:30:15 +0000
ROA not after:            Thu 02 Feb 2023 06:35:15 +0000
asID:                     0
IP address blocks:        103.143.188.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3c:fd:e9:61:1c:3f:69:cc:13:2b:5b:83:71:4b:01:19:8b:3d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:30:15 2022 GMT
            Not After : Feb  2 06:35:15 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:ea:50:77:bf:22:c5:b4:9d:6b:28:9b:ef:
                    64:94:ba:40:cb:b5:bc:a3:cb:67:92:ef:2a:91:f9:
                    d6:c4:be:9f:04:f8:b7:df:76:4c:f8:ff:63:4e:73:
                    f9:d5:2f:12:55:cc:60:16:a4:10:06:f9:96:2e:36:
                    a9:18:63:ff:6b:ac:70:8d:08:93:41:7f:04:d7:aa:
                    ef:04:b3:0d:6a:15:72:05:ee:c1:dc:e4:15:bf:52:
                    2d:27:87:07:2e:fc:ec:89:d2:61:3d:b5:25:04:be:
                    c3:0b:56:f0:6d:35:7a:4a:d9:0e:8c:41:7d:de:f1:
                    fc:4d:2f:94:7f:66:df:6f:17:25:65:2e:76:52:8b:
                    b1:22:ed:f8:9a:a7:96:6e:9a:20:00:4c:47:1e:90:
                    db:02:eb:3c:51:5c:9c:58:41:a5:ff:d5:95:eb:b5:
                    77:31:30:62:d6:21:bc:57:a1:23:0e:95:ca:c6:66:
                    ac:2e:2d:d1:17:d5:74:f1:6a:a1:2a:54:b1:69:b2:
                    d5:b9:45:64:d7:5e:ac:c5:09:32:94:10:a6:b7:74:
                    47:4f:7f:4d:f5:46:1e:e2:32:18:bd:a7:34:ce:44:
                    84:17:df:da:c1:f4:c9:f1:8f:b9:d5:57:78:af:61:
                    f7:a4:d3:d0:e7:ee:7d:de:dc:cc:48:50:59:5f:74:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C2:EA:E5:39:16:DA:41:20:27:7A:91:9C:D3:3F:DF:4F:5F:78:25
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3138382e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:45:57:39:16:1a:ce:ac:6e:4b:ae:7c:0f:97:5d:78:7c:a6:
         48:aa:20:bc:cc:f3:b9:ce:7a:da:80:cb:00:6f:f6:6a:3c:86:
         70:74:11:61:c0:09:27:c3:58:83:14:1c:83:0a:06:4f:8e:4b:
         24:e4:93:04:d0:11:d1:59:33:22:e0:3d:4b:33:10:c1:00:e5:
         84:c2:eb:19:fb:09:87:ea:80:97:29:05:f6:25:98:ba:3a:e2:
         96:6c:5d:9f:63:f0:fe:7b:50:aa:15:11:8e:0e:77:9f:ab:56:
         99:15:a9:13:57:8e:cf:17:2f:a3:cf:e6:16:3d:90:04:ac:22:
         05:1b:e8:2c:54:a1:7c:e2:44:40:56:da:e1:0f:3b:9a:80:3e:
         c0:a3:47:c6:56:c8:dd:40:13:73:96:5b:9b:0d:a2:60:f2:a5:
         c8:81:ad:8a:3a:10:e2:fb:45:79:0d:b1:ec:be:27:e0:9f:9c:
         f3:2e:76:2b:72:b9:af:93:b0:5f:4d:06:57:18:2e:6f:5e:03:
         95:25:02:ca:32:8b:68:a5:e2:6f:1b:73:9f:ca:7a:4f:58:41:
         5b:9c:83:95:b1:e4:d7:63:9d:8d:8f:12:e2:a4:c9:91:67:8d:
         1d:53:6a:75:1e:f3:b3:34:a1:57:29:de:2d:d6:c0:b7:88:de:
         79:fd:1d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org