Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3232302e302f32332d3234203d3e2030.roa
File:                     3130332e3134332e3232302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          G0Oc8ddFonk423rHxEhfkHCa3mlt5use1vJ6goO4N8A=
Subject key identifier:   BE:88:6B:E0:61:D7:75:48:6C:F1:63:C6:28:5B:AA:C7:41:15:05:D3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       682E5AEFF1F965EC0D4C9FBD9E6B532A1FA4DF4C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3232302e302f32332d3234203d3e2030.roa
Signing time:             Fri 01 Oct 2021 01:33:27 +0000
ROA not before:           Fri 01 Oct 2021 01:28:27 +0000
ROA not after:            Sat 01 Oct 2022 01:33:27 +0000
asID:                     0
IP address blocks:        103.143.220.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2e:5a:ef:f1:f9:65:ec:0d:4c:9f:bd:9e:6b:53:2a:1f:a4:df:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  1 01:28:27 2021 GMT
            Not After : Oct  1 01:33:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:52:c4:47:f7:31:e2:65:5c:de:06:23:42:
                    73:56:85:6f:fe:0b:fa:1d:07:f0:dc:3f:9a:8c:6d:
                    60:12:19:59:91:a9:20:7c:4b:6a:a8:77:82:b7:55:
                    31:4c:8a:2d:1a:1f:70:fa:0b:8d:e6:83:0e:4e:86:
                    7e:67:d0:e7:4c:5b:d8:d5:85:a1:ab:11:f2:fe:36:
                    84:21:6c:c5:2e:db:41:3e:aa:60:4f:ea:48:71:a7:
                    9f:de:b3:71:89:4a:ea:84:3f:19:c9:26:40:b5:74:
                    d3:f4:89:ef:04:16:7a:52:bf:c7:97:e5:2b:9e:df:
                    42:c6:13:27:8b:f5:90:13:6a:e3:e2:31:87:a8:d2:
                    a2:42:49:45:1f:07:4d:fa:0b:42:16:62:df:44:04:
                    bc:12:d7:d4:8a:44:2f:1a:ff:9c:12:ed:ba:5e:1d:
                    12:7a:cb:5b:56:0d:25:8d:62:0d:7e:6a:a9:0d:03:
                    3e:85:92:25:f1:0d:f7:a7:7f:53:09:c8:05:5f:0f:
                    4f:d3:f7:e5:d4:31:db:99:b9:73:41:1f:89:7a:60:
                    15:ea:9c:7e:1d:e2:45:86:8f:cb:45:80:e1:7a:71:
                    67:f8:4b:40:57:c9:e1:47:ca:1f:05:26:82:fe:b0:
                    00:51:4d:d4:4e:1e:62:b6:15:4a:c5:ed:bf:3b:24:
                    38:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:88:6B:E0:61:D7:75:48:6C:F1:63:C6:28:5B:AA:C7:41:15:05:D3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3232302e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:c0:40:ae:a6:af:a7:27:f0:29:0c:7b:8c:de:0c:88:65:08:
         55:da:f3:e5:2a:46:01:09:61:ab:ca:b8:09:9b:71:2d:be:3d:
         83:53:e9:3f:0e:b1:d9:89:8a:dc:f4:3c:4d:c1:a2:3c:3a:d5:
         2f:7a:a5:56:4d:e4:4e:2a:4c:2c:93:ac:fa:f3:f2:5e:80:09:
         83:b6:90:8c:36:2a:7c:93:cb:6f:7c:6e:6d:ad:e9:3b:cf:f6:
         4e:7d:20:aa:96:df:38:38:38:eb:c2:38:63:2f:38:7d:b5:1d:
         e9:db:b6:5a:5d:6c:ff:32:59:3b:b7:de:70:5f:11:a3:8d:3b:
         5a:f0:b8:1d:15:1c:77:82:19:7a:4e:36:c9:34:46:f0:9c:ae:
         e0:3f:e2:4a:39:0f:bd:83:55:c8:9c:ca:99:cf:a8:fc:a6:72:
         67:20:4f:75:3c:24:b6:ef:65:07:d5:e5:0d:30:3e:87:20:33:
         1d:c1:68:80:0c:45:18:b7:df:9a:5f:3b:4b:1c:b7:af:d8:86:
         ac:64:d4:85:da:fc:7b:fd:92:0f:81:04:ed:b5:16:58:85:13:
         41:93:ea:c5:6c:27:1f:36:a8:4c:4a:63:5a:67:de:36:2d:94:
         89:be:6e:d3:81:cd:29:a6:70:b2:01:46:3f:00:15:77:d4:16:
         5a:3f:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org