Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134372e35342e302f32332d3234203d3e2030.roa
File:                     3130332e3134372e35342e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          jVuKUTpcIVQkS2eYcz4X1jDtVfID+canjeVui4nFWXA=
Subject key identifier:   17:E1:AC:3E:5F:66:F4:EC:C9:B9:89:C7:2D:79:8B:1E:EB:50:7D:DD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5027F1A5DF8EE98E174C1E82A6105CF93121E547
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134372e35342e302f32332d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:18:53 +0000
ROA not before:           Wed 02 Feb 2022 06:13:53 +0000
ROA not after:            Thu 02 Feb 2023 06:18:53 +0000
asID:                     0
IP address blocks:        103.147.54.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:27:f1:a5:df:8e:e9:8e:17:4c:1e:82:a6:10:5c:f9:31:21:e5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:13:53 2022 GMT
            Not After : Feb  2 06:18:53 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:22:61:28:9a:7b:55:7b:5a:f7:e4:6a:b1:e8:
                    13:38:3e:9d:ab:e2:e1:c4:68:ba:a6:ec:e0:46:e1:
                    c1:3f:10:18:3d:16:c7:06:bc:40:1d:bf:b5:ea:30:
                    8b:f7:c9:81:b0:de:58:a3:de:47:da:a2:27:88:bf:
                    d4:26:4e:3a:15:66:24:ff:ad:80:07:68:6f:07:30:
                    b3:22:32:28:f4:26:f0:c0:4d:ed:7f:8e:bc:6c:ac:
                    e1:9c:1b:d7:e3:a4:c5:a3:74:a7:cc:c5:f7:d4:f7:
                    b4:64:19:7c:fc:d2:49:94:50:3f:ca:b0:46:83:92:
                    91:90:8f:53:75:48:67:c9:3b:5e:9f:8a:c8:dc:bc:
                    52:a9:be:fb:f1:59:96:4a:08:39:09:97:bd:56:7e:
                    b3:9f:09:47:7e:b1:eb:ac:30:ff:60:7d:90:dc:2f:
                    b4:1d:b6:02:2d:cf:65:ab:dd:fb:90:9a:20:6b:ee:
                    a6:b7:07:4e:b5:76:23:7c:69:98:8f:14:fa:23:d2:
                    6c:02:f0:a1:46:07:1c:32:9e:e9:c2:49:73:3b:91:
                    56:2c:7e:55:6e:9f:2a:8d:46:cd:68:a8:a6:f1:07:
                    97:4a:55:67:ec:52:32:66:6e:7a:25:e3:1d:d0:f6:
                    55:ff:f7:18:fe:e0:97:30:0e:45:9a:3c:56:99:62:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E1:AC:3E:5F:66:F4:EC:C9:B9:89:C7:2D:79:8B:1E:EB:50:7D:DD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134372e35342e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:67:af:c7:67:52:4b:46:97:99:d9:1d:3c:6b:a2:7a:42:df:
         0e:b3:95:57:51:01:b0:45:f0:8a:52:62:e7:95:82:d2:27:ef:
         40:0a:72:1f:b4:3d:22:da:6b:d5:09:00:a9:34:f0:90:eb:1f:
         23:90:aa:bc:50:37:87:bf:51:07:8b:3a:8c:56:70:8d:45:c8:
         f6:31:62:56:d6:cc:2c:09:12:c7:a1:35:7f:d7:a4:0e:26:53:
         2e:6c:9d:e1:07:36:01:13:ad:30:04:2b:17:0b:5a:58:f9:64:
         14:6c:a1:2f:0d:0c:2d:69:ca:cb:38:e6:6c:68:9d:52:68:e2:
         bf:ea:4c:f7:10:a2:8c:89:36:0b:a2:71:be:22:95:5b:9c:e0:
         23:fe:f2:01:e7:1a:f6:99:51:9d:08:db:5c:50:38:c8:87:50:
         61:5b:a3:00:11:8a:a2:f5:c3:3a:0e:f5:4c:fc:23:2e:46:09:
         2c:f6:3b:00:9b:9d:b7:32:d4:75:53:ad:12:61:13:6a:6f:e2:
         2b:67:9b:7a:6a:a7:20:97:3c:7d:d0:8b:b3:48:f5:a1:cc:2a:
         4f:ca:f6:b9:27:64:50:1d:a5:56:b2:e3:9b:c4:c8:9e:a3:15:
         88:17:51:cf:31:9d:a3:c2:23:e9:66:86:28:fd:91:7e:e6:0c:
         39:8d:97:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org