Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e38392e302f32342d3234203d3e20313431303836.roa
File:                     3130332e3135362e38392e302f32342d3234203d3e20313431303836.roa (raw, json)
Hash identifier:          LIbfomO96pdgNYZSvZi63288+hzemEA8YIiCCB9tXfw=
Subject key identifier:   D6:07:C5:81:4D:30:6A:AF:92:EA:F9:2C:24:79:49:31:6A:55:D5:FB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       054830161AF68DB4605C6A918756263134504FAA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e38392e302f32342d3234203d3e20313431303836.roa
Signing time:             Mon 06 Sep 2021 04:06:21 +0000
ROA not before:           Mon 06 Sep 2021 04:01:21 +0000
ROA not after:            Tue 06 Sep 2022 04:06:21 +0000
asID:                     141086
IP address blocks:        103.156.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:48:30:16:1a:f6:8d:b4:60:5c:6a:91:87:56:26:31:34:50:4f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  6 04:01:21 2021 GMT
            Not After : Sep  6 04:06:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:8d:aa:85:df:21:22:67:4c:4c:54:9e:33:
                    63:13:1b:f7:55:c2:67:b1:67:74:50:cf:34:31:da:
                    9a:05:86:11:3c:11:2c:c8:b8:6b:f3:69:c2:30:7e:
                    3c:e2:8d:c1:eb:45:de:ec:36:e0:b1:6a:6b:38:46:
                    51:80:d3:d2:6b:b1:d9:ed:ef:c7:6b:35:19:78:02:
                    49:61:e8:31:4f:12:ed:9c:99:f2:49:2a:c1:e0:33:
                    98:74:57:6f:78:25:8d:cd:fc:33:7d:11:02:d1:cc:
                    73:39:9f:3e:99:76:d3:9f:b4:26:53:b7:ec:7d:ba:
                    2e:02:9f:1f:cd:da:f7:e7:78:7d:e2:31:17:b1:62:
                    56:7d:90:22:9d:47:96:92:4c:9c:54:e4:08:fa:70:
                    96:10:b7:6c:89:01:5f:cd:1a:54:3c:5f:22:c5:30:
                    52:fa:f2:40:78:51:76:7b:79:3f:4d:bd:9d:19:47:
                    13:a8:01:53:7f:69:4a:36:45:c5:9e:34:7d:db:76:
                    aa:c9:f3:47:1b:64:1e:60:a9:44:94:09:d4:5f:26:
                    d9:e0:05:3c:e7:d3:62:97:f3:45:e0:90:ff:cb:e1:
                    72:3a:d0:c0:0c:4e:de:55:c6:fc:56:f1:ff:f5:e6:
                    83:59:de:18:56:a1:f1:72:e5:69:08:80:8d:cb:79:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:07:C5:81:4D:30:6A:AF:92:EA:F9:2C:24:79:49:31:6A:55:D5:FB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e38392e302f32342d3234203d3e20313431303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:1a:9b:fa:d9:fc:a5:ff:cd:da:a8:4d:d0:c3:13:c5:8e:e2:
         1a:0f:7e:14:94:fa:fb:24:a4:5a:23:e3:57:06:7e:14:4e:38:
         a1:47:a8:c2:94:5c:28:68:25:fb:a7:0f:41:17:29:77:10:e2:
         aa:cf:43:81:a1:ac:59:2d:59:10:5f:d7:81:f3:9d:4e:51:5b:
         2e:55:66:d4:aa:f0:db:c8:49:a6:8f:23:ce:f6:1d:30:61:47:
         96:ae:b2:a5:32:35:23:f2:d2:8a:ae:05:84:5e:06:f1:9a:d1:
         fc:36:db:2b:06:c2:78:b3:ec:20:12:45:a0:dd:f1:0e:02:09:
         21:b4:69:7f:f2:d9:6b:db:61:3e:49:c4:be:d8:b9:ae:f9:de:
         50:c6:7b:ae:7c:82:b3:ea:f9:ff:94:a8:7f:a7:4d:c7:19:e6:
         80:8c:c2:5b:7e:d2:d3:e5:17:e8:fa:6c:95:7a:7d:da:65:65:
         21:b4:33:74:3a:e9:7c:cc:3d:ac:58:6e:8f:47:14:14:e6:95:
         6e:fc:eb:b7:ea:7a:5e:1a:bf:96:b6:43:51:41:80:d7:94:6f:
         04:18:db:4c:a2:a4:2c:05:48:23:01:2c:43:b6:aa:19:95:f0:
         21:ff:71:8c:f4:d3:c3:90:26:03:f9:ac:08:e8:18:3e:38:f7:
         6f:10:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org