Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134362e37302e302f32332d3234203d3e2030.roa
File:                     3130332e3134362e37302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          GYOOTSj4wjBHWwi0rpfx2HQ7L9Zwzbg2dv5C/k0UhCA=
Subject key identifier:   70:8D:F2:5A:E5:35:EC:18:AE:8D:10:0E:E3:AD:A4:6D:38:27:7B:02
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       19BF52294C334C1B1CF9F6876087AA450DED0F7F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134362e37302e302f32332d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:19:14 +0000
ROA not before:           Wed 02 Feb 2022 06:14:14 +0000
ROA not after:            Thu 02 Feb 2023 06:19:14 +0000
asID:                     0
IP address blocks:        103.146.70.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bf:52:29:4c:33:4c:1b:1c:f9:f6:87:60:87:aa:45:0d:ed:0f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:14:14 2022 GMT
            Not After : Feb  2 06:19:14 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:fd:75:00:97:2f:80:99:ed:19:c7:34:91:
                    72:89:9a:64:fc:06:74:64:df:6d:46:77:8c:e0:c5:
                    b5:64:bf:2e:26:80:0d:0b:cc:68:42:7a:39:35:75:
                    c7:b4:0c:b3:81:94:91:ce:e1:fb:52:49:42:fe:9f:
                    f8:75:07:86:07:d9:45:57:7b:d9:75:72:05:da:36:
                    01:8e:0d:dc:98:0b:55:c9:3f:66:79:8e:c9:38:9f:
                    80:99:3c:46:11:3f:f4:4c:a2:e6:7e:b8:d2:8b:ac:
                    21:22:a9:4f:3e:38:1e:68:5a:c9:34:57:d2:01:1d:
                    a6:59:b0:2c:ba:63:b4:74:69:2e:9b:b1:74:d5:96:
                    ac:06:c6:1e:b2:02:3f:69:bd:c3:ef:fe:b1:10:0a:
                    b8:4f:24:41:52:37:b7:c7:9a:0c:56:91:8f:89:0e:
                    f9:b3:f5:cf:0e:05:72:db:e9:5c:d4:15:ee:da:9d:
                    52:93:ab:5b:c8:83:1a:c1:ae:75:6a:56:18:ad:45:
                    23:17:ba:64:44:55:0c:ba:78:90:c4:1e:8f:44:2e:
                    87:35:4f:a7:47:46:a3:b1:9e:b4:27:c6:a8:9f:cd:
                    20:36:cf:8b:f9:68:bb:4c:03:b1:e4:48:d1:fd:7d:
                    11:0f:c3:cd:f9:42:6c:26:f9:7f:26:59:7d:3b:4c:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8D:F2:5A:E5:35:EC:18:AE:8D:10:0E:E3:AD:A4:6D:38:27:7B:02
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134362e37302e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:43:5c:01:30:82:51:98:ba:1a:51:d3:25:09:b1:f0:03:6e:
         bb:b2:a9:ab:a8:55:8a:23:93:2e:db:f2:6b:01:0e:cb:a8:6c:
         50:1c:d2:e1:1a:03:29:2d:52:7c:36:78:f6:c0:fd:53:af:78:
         e5:cf:7c:5a:9a:7c:6e:59:19:8f:17:eb:39:83:e1:25:ec:17:
         96:82:26:db:7c:c8:f2:2e:39:b2:0c:62:dd:31:21:1b:50:b2:
         a0:52:1c:7a:37:82:d8:06:ad:49:94:67:b5:59:5b:a6:c1:26:
         13:e8:fd:f4:2b:85:e9:29:68:e4:60:b2:7b:93:53:c2:cf:2a:
         3f:0b:fb:f7:28:23:5d:fb:18:34:1c:18:f7:fa:9d:ba:d4:67:
         43:58:4c:cb:1c:c9:e3:dc:f0:1e:9d:db:36:37:6d:89:70:dd:
         98:69:ec:e3:ca:e8:ef:83:3e:cd:50:5f:31:15:77:de:3b:0d:
         a2:d4:cc:cd:48:03:b4:e9:47:89:f4:40:70:99:df:8f:05:f3:
         51:c1:35:59:a0:5e:1b:1b:e6:57:42:0b:7f:30:26:89:e3:55:
         69:75:19:03:3c:2d:1b:96:fb:2a:8e:f7:59:0c:ff:47:cc:37:
         3f:99:a3:44:5b:ea:31:74:ec:d2:46:85:05:48:2b:09:cb:ff:
         fc:42:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org