Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134372e3235312e302f32342d3234203d3e20313339393734.roa
File:                     3130332e3134372e3235312e302f32342d3234203d3e20313339393734.roa (raw, json)
Hash identifier:          0p4VTAg79kxEEOBT7bdKlFTuDppeCgwbbqT/rGeMwTM=
Subject key identifier:   01:68:BB:33:76:D2:E9:48:A2:49:53:B6:AB:62:9E:6F:C6:A0:69:47
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       41431010A2D546704A45C61DAACB265A4C4DD160
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134372e3235312e302f32342d3234203d3e20313339393734.roa
Signing time:             Wed 05 May 2021 03:45:05 +0000
ROA not before:           Wed 05 May 2021 03:40:05 +0000
ROA not after:            Thu 05 May 2022 03:45:05 +0000
asID:                     139974
IP address blocks:        103.147.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:43:10:10:a2:d5:46:70:4a:45:c6:1d:aa:cb:26:5a:4c:4d:d1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  5 03:40:05 2021 GMT
            Not After : May  5 03:45:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:df:4a:2a:6d:8a:61:0e:05:ad:28:b5:72:
                    7f:0c:6f:7f:d4:d7:08:75:ae:c5:e6:56:fc:88:b6:
                    fd:3e:09:cd:ee:e3:2c:4d:1b:ab:94:09:7b:91:89:
                    ea:c5:4e:3e:d0:08:b8:fb:44:5d:cb:28:c5:43:c3:
                    c5:53:f4:fd:c3:58:3b:3c:da:bc:81:58:46:b9:4f:
                    7d:c8:72:ad:5b:3c:dd:4d:4c:5a:8e:4a:38:47:af:
                    90:c1:b4:59:75:67:41:4d:2c:bb:12:25:55:92:5a:
                    88:e3:1b:8c:2e:02:53:e8:32:f1:cd:bd:c9:23:7b:
                    86:ec:94:c9:54:ec:a6:cc:c6:06:fa:5e:a2:7d:d5:
                    78:41:41:72:b6:60:cf:28:8e:89:f1:00:c1:62:1f:
                    9a:e6:76:ac:29:88:47:8d:fb:30:f7:14:c9:a9:b4:
                    15:99:a0:f3:34:3e:76:92:27:1a:d2:7a:21:92:ba:
                    69:a4:6e:a0:e8:1c:4f:fe:25:59:15:60:d2:87:54:
                    2d:46:cf:ca:84:5e:84:a3:22:77:91:7c:19:10:7a:
                    a1:ca:4e:3b:08:d3:52:0b:08:27:38:8e:b1:f8:11:
                    73:aa:c9:c5:7e:af:00:fa:38:9d:69:bc:43:ba:81:
                    9a:26:4b:06:64:fb:6b:de:5b:db:e0:21:3d:91:77:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:68:BB:33:76:D2:E9:48:A2:49:53:B6:AB:62:9E:6F:C6:A0:69:47
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134372e3235312e302f32342d3234203d3e20313339393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:97:4e:ea:9b:78:9a:04:7f:c0:02:65:00:77:e3:5c:8e:a9:
         be:cf:ac:39:9e:8a:61:3a:6d:62:c7:5b:86:3c:49:68:80:de:
         08:d1:9e:fc:3b:3d:33:27:cc:7b:9c:27:9a:de:05:07:e0:48:
         0d:0d:a0:46:36:31:bc:e7:22:f2:a9:ff:3d:3a:9b:39:c4:90:
         1a:89:19:c2:65:45:20:0f:35:48:8a:d9:90:2e:b7:98:0a:b5:
         9f:97:4f:65:78:e7:17:2f:d3:57:69:a7:22:e0:fb:31:e4:06:
         1e:76:06:7e:10:95:86:48:20:b8:10:f7:f4:65:2b:b9:6e:da:
         92:89:5e:03:80:16:9e:23:6a:dd:2e:1d:8a:5e:b2:65:ca:17:
         f1:aa:78:da:b6:ad:4f:de:05:53:cc:a7:54:87:16:39:48:b5:
         46:50:73:ec:4c:28:a8:20:06:0f:21:1f:ba:5b:a5:b8:e4:05:
         8a:65:aa:31:47:f7:ba:22:7d:1d:35:fd:8b:f9:81:f2:59:0f:
         9e:ac:2c:9f:8f:ee:24:d4:d9:19:1e:57:d8:9d:9a:21:49:eb:
         34:9e:06:dc:db:55:b6:b5:13:40:81:42:98:9f:67:b8:86:0a:
         6d:28:32:b0:04:23:85:28:2c:c9:b4:b2:9c:38:af:14:52:ec:
         5e:13:b7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org