Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3139322e302f32332d3234203d3e2030.roa
File:                     3130332e3134332e3139322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          j1K1QUXQfSwbDapFteqB3/T/WnsolU8qjaoJLjB3Rok=
Subject key identifier:   4F:2A:53:87:39:9C:41:12:D5:7B:33:E3:E3:1F:84:85:C4:0A:83:56
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       44B37D490DA6E3782258189693AC689A053A22E8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3139322e302f32332d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:24:50 +0000
ROA not before:           Wed 02 Feb 2022 06:19:50 +0000
ROA not after:            Thu 02 Feb 2023 06:24:50 +0000
asID:                     0
IP address blocks:        103.143.192.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b3:7d:49:0d:a6:e3:78:22:58:18:96:93:ac:68:9a:05:3a:22:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:19:50 2022 GMT
            Not After : Feb  2 06:24:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:be:84:40:08:2f:da:56:69:29:ce:99:f6:
                    6e:87:c3:8a:af:9c:90:87:1a:00:64:aa:f7:8a:bc:
                    d0:88:91:a1:d4:85:10:ad:8d:4f:e9:41:35:f4:05:
                    d9:5e:98:23:bf:33:9d:da:68:a9:15:57:a0:b8:09:
                    26:fc:c7:3c:a6:4a:3f:da:98:b5:1a:ba:f0:7f:4b:
                    99:ee:68:91:76:a0:5a:b6:5d:28:1a:6d:d4:76:b2:
                    11:f4:5b:68:2b:b1:e9:05:44:30:80:74:fb:14:58:
                    79:94:03:28:c8:63:23:e1:52:9b:28:60:21:fa:e4:
                    41:0b:c6:29:37:79:19:0c:67:64:a7:a3:eb:ec:23:
                    ac:7b:6c:89:fe:4d:14:67:4a:26:ae:08:f4:78:4a:
                    f8:82:c7:af:76:d4:45:14:62:39:11:1d:fb:30:15:
                    4f:bf:8b:63:cf:03:53:76:2d:54:4b:4c:7f:bc:9c:
                    3f:69:15:bf:b6:0c:f7:2c:03:48:4e:e9:37:3e:0e:
                    aa:70:20:64:34:bd:af:c9:12:ab:46:5e:62:75:65:
                    5b:6b:e9:09:87:d9:66:8d:99:ee:ad:57:40:e1:14:
                    69:f3:64:2e:1e:c7:48:a1:21:fb:1b:85:2a:b6:d8:
                    0e:8e:1d:41:8b:15:80:40:0c:f5:dc:a7:ac:dd:e0:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2A:53:87:39:9C:41:12:D5:7B:33:E3:E3:1F:84:85:C4:0A:83:56
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3139322e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:26:61:98:89:25:08:da:35:4c:ea:b6:0a:c9:05:92:3c:a6:
         b1:2f:8f:1d:6f:77:eb:c1:b3:77:b4:b1:df:13:ad:7f:64:2f:
         33:a0:63:fb:f3:85:b1:d8:91:71:1f:ce:49:29:4d:8d:24:17:
         25:fc:e7:15:25:16:5c:f7:ce:15:5d:fe:99:f7:64:2d:18:59:
         a3:bc:d9:d1:59:1c:87:85:a0:e2:78:40:4f:93:74:0e:88:9a:
         99:fe:27:9e:b0:2d:64:f9:ef:f2:db:c7:89:2b:15:2b:df:fb:
         58:52:dc:70:ad:05:97:92:08:57:0f:1f:e6:be:2b:10:88:62:
         6e:04:46:80:43:80:8a:0d:5c:32:bd:d4:1b:08:6b:83:82:30:
         16:a5:85:a2:ce:50:50:3f:b5:49:a9:b3:88:eb:ca:48:d7:d5:
         8d:18:e8:93:75:de:9a:43:9c:45:b0:38:02:f7:05:0d:c7:c8:
         a0:cd:be:a3:aa:18:df:12:a2:30:ec:d4:8d:5c:b9:3c:09:1c:
         95:8b:08:92:a1:67:7c:ab:b1:65:c1:c0:87:29:23:37:3e:55:
         ba:a9:5b:fd:f7:f7:02:68:07:12:8f:7e:e6:7c:84:25:86:be:
         0e:25:e4:00:c3:18:fa:6f:52:5a:c4:6a:4b:c0:13:54:f6:74:
         2e:7c:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org