Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3232332e302f32342d3234203d3e203536323436.roa
File:                     3130332e3134332e3232332e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier:          +TSpXpHvi50bZPSF+2qisx34Z+q1gyWIMuyVJFjEh1I=
Subject key identifier:   E5:92:D1:0D:57:37:76:39:35:70:4D:59:39:E9:06:37:7C:38:A2:E0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3C3A15E472F625BE8EB43187155D616C48DE0A72
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3232332e302f32342d3234203d3e203536323436.roa
Signing time:             Thu 02 Sep 2021 07:47:09 +0000
ROA not before:           Thu 02 Sep 2021 07:42:09 +0000
ROA not after:            Fri 02 Sep 2022 07:47:09 +0000
asID:                     56246
IP address blocks:        103.143.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3a:15:e4:72:f6:25:be:8e:b4:31:87:15:5d:61:6c:48:de:0a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  2 07:42:09 2021 GMT
            Not After : Sep  2 07:47:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:e5:bf:cf:8f:63:eb:40:f7:55:30:b6:4c:
                    74:28:0f:0d:75:df:fb:75:a1:18:64:9f:79:ae:a2:
                    c5:9e:ce:4e:b1:c9:4d:63:3a:fd:dc:00:c5:73:01:
                    cc:01:c8:11:3d:42:d2:89:a7:b9:aa:ff:ef:ee:21:
                    9b:8e:ba:92:dd:ba:fe:40:c8:07:a7:29:b1:07:f7:
                    cb:39:27:e3:19:ef:21:af:42:8d:3d:6c:2c:d9:18:
                    a4:86:62:ee:98:1f:c1:52:45:7a:27:6d:6c:1e:f5:
                    d2:1d:dc:1a:e5:8c:b0:d3:67:22:82:c1:a5:76:6f:
                    3d:32:ad:81:dc:00:7f:0f:9f:2d:5d:2f:ea:0f:69:
                    54:7a:fc:74:2d:67:b6:1d:13:f5:91:c8:24:aa:82:
                    c1:19:c2:d6:f6:1b:5a:6a:b5:f6:96:2f:fa:12:7f:
                    8c:c5:64:bb:d0:d9:63:45:55:ea:dd:93:8b:56:9b:
                    06:4b:1e:67:29:27:2f:96:36:50:8f:11:f9:75:d3:
                    0a:5c:19:7b:eb:ee:de:b0:04:19:59:93:9a:8f:9f:
                    30:c5:bc:17:6d:19:85:d4:66:6c:dc:8c:68:84:70:
                    32:ce:e1:41:31:3c:2c:b2:50:fe:3c:7d:f4:ff:4f:
                    5e:3d:8a:7d:d3:f3:09:ce:c1:65:ef:3c:0d:04:1c:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:92:D1:0D:57:37:76:39:35:70:4D:59:39:E9:06:37:7C:38:A2:E0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3232332e302f32342d3234203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:a9:a7:8b:f9:60:d2:d5:3d:71:90:49:a4:5f:e1:95:77:
         07:be:89:5a:61:c1:9a:ff:99:7b:b2:86:54:eb:df:35:28:9f:
         6c:fa:a7:30:c1:38:0e:8f:f4:d0:68:6e:6e:8b:eb:e6:07:70:
         05:59:34:51:6d:70:82:57:d9:20:ab:38:a0:de:28:bf:a3:0f:
         56:29:b2:26:17:82:8f:4c:47:6e:78:e1:52:fe:cf:5d:85:23:
         ab:1d:cc:b3:fb:48:db:4f:fd:3c:73:9d:85:88:74:43:8e:95:
         6e:fa:07:df:13:d5:d0:c0:dd:eb:da:de:5f:cd:cc:7a:9a:81:
         f4:57:ac:10:e7:ad:32:e4:ca:d0:10:00:07:86:20:32:ff:25:
         8e:7c:bf:52:9a:48:bb:a8:00:e5:da:5a:42:21:45:e9:b5:2f:
         6a:ab:d4:23:31:88:e5:05:7c:08:c8:55:47:52:cf:48:5c:60:
         4c:46:ed:2c:0f:52:04:1f:ff:8e:5a:d6:09:5f:16:44:6a:ac:
         f5:07:c9:5a:6d:44:b5:f0:79:dd:07:30:8f:3c:55:a0:45:ba:
         41:5f:ab:00:8b:c5:80:97:22:f6:9d:1f:c3:6b:07:30:cb:d7:
         f9:c3:fb:20:85:48:85:ba:7a:80:d6:83:2f:ce:f0:be:58:95:
         d5:71:af:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org