Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e3232312e302f32342d3234203d3e20313431303736.roa
File:                     3130332e3135352e3232312e302f32342d3234203d3e20313431303736.roa (raw, json)
Hash identifier:          GdOlnesherLP+4W/g6tj61XLJO1Oktnvf5uEHEPg+T0=
Subject key identifier:   7F:3B:B5:D6:66:06:25:44:D2:4E:66:00:52:51:AD:D5:FC:46:E3:2E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       36B4413E18292BF0804CBAD95F56F416CA0D1645
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e3232312e302f32342d3234203d3e20313431303736.roa
Signing time:             Tue 04 May 2021 07:02:04 +0000
ROA not before:           Tue 04 May 2021 06:57:04 +0000
ROA not after:            Wed 04 May 2022 07:02:04 +0000
asID:                     141076
IP address blocks:        103.155.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b4:41:3e:18:29:2b:f0:80:4c:ba:d9:5f:56:f4:16:ca:0d:16:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  4 06:57:04 2021 GMT
            Not After : May  4 07:02:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:a1:73:61:df:18:98:91:2d:af:8f:d1:6e:
                    0b:1c:0b:59:e5:bf:16:c9:ec:35:96:4e:25:f4:db:
                    9f:72:b0:f3:5b:2d:95:b5:17:11:e9:f9:3b:5f:eb:
                    ad:c7:6c:7f:03:bb:8c:11:12:d7:4c:70:46:5a:06:
                    33:ea:e8:12:e6:20:e8:b6:e8:0c:3c:17:32:bb:f9:
                    b4:38:a8:f5:f3:95:8d:54:e9:30:df:01:4d:80:ed:
                    12:34:2e:00:02:76:1f:0b:a9:86:f0:6d:e2:77:62:
                    21:69:0e:64:28:67:5c:c4:a5:48:44:81:5f:2d:87:
                    57:33:c4:83:7c:08:47:29:df:72:d7:76:ad:b7:ea:
                    e6:85:55:a1:ea:12:4a:32:03:d4:d1:e9:d2:a1:ce:
                    6d:9c:3e:85:90:8b:28:eb:ab:89:64:01:6a:51:70:
                    ae:9e:54:c9:da:01:63:44:63:09:b9:20:de:10:c7:
                    19:a3:fb:ae:aa:e4:2f:80:0c:e2:ef:71:33:b5:ad:
                    ca:75:58:99:b6:b1:ce:69:23:79:d1:02:0b:6e:23:
                    55:d6:79:ee:7f:11:23:b5:25:53:c0:bd:23:5c:0b:
                    07:ad:91:82:f7:1c:5e:23:7c:dd:d7:ac:b9:8f:d9:
                    1a:45:c0:5f:15:48:57:3b:d7:fa:be:26:2f:07:83:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3B:B5:D6:66:06:25:44:D2:4E:66:00:52:51:AD:D5:FC:46:E3:2E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e3232312e302f32342d3234203d3e20313431303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:38:b2:d0:03:1e:7e:56:0c:49:c2:42:f6:69:c9:f4:6f:8d:
         15:9c:bb:d4:44:06:83:27:aa:19:be:b6:1d:21:b3:3d:5a:c7:
         9f:e0:89:26:d3:ef:ef:1e:c8:9f:64:23:af:cb:64:73:e1:4b:
         a8:fc:05:5e:f2:48:fe:41:f7:a8:7e:ec:d2:c4:35:5f:b0:99:
         4b:e3:c7:d9:6e:15:e1:21:f6:8e:59:c1:a9:10:b5:7a:93:3b:
         59:76:54:b7:80:80:a0:72:a8:cf:42:3f:d3:d3:ba:1d:e5:58:
         03:9b:ea:51:8b:3d:3b:1f:20:c3:73:42:2a:8b:17:c9:a8:d3:
         99:f1:3b:78:87:e2:1e:b3:9b:bb:62:80:3a:c5:55:29:f3:c1:
         f7:80:e1:e4:19:29:51:71:1e:77:89:0e:7d:4a:e0:14:1c:04:
         c6:2c:d4:04:8c:15:52:b7:8b:69:ec:9b:70:ba:c5:28:96:3e:
         23:5a:32:09:49:b8:e1:70:97:5a:4c:75:3b:4f:af:ac:e7:02:
         fa:ed:4c:15:3f:be:7e:28:6e:a5:83:61:99:ac:71:d0:20:e3:
         92:29:ea:a8:96:d3:c9:41:fe:a6:65:a9:b7:31:40:fe:a1:ef:
         31:f2:cb:21:54:4e:aa:c5:8a:22:b7:31:85:40:5a:71:ba:d1:
         13:bf:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org