Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e3134332e302f32342d3234203d3e20313431313331.roa
File:                     3130332e3135382e3134332e302f32342d3234203d3e20313431313331.roa (raw, json)
Hash identifier:          CQjvHTykcHl8+ktVNV5RUr1xzFi6P1H4SjnhrLFugdk=
Subject key identifier:   C1:F9:E3:3F:C3:27:78:9A:A4:D3:1A:7D:4E:1E:43:13:7A:98:A1:AF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6E9FE6F1DE42A4C53302054EB8A16C637EB2439F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e3134332e302f32342d3234203d3e20313431313331.roa
Signing time:             Mon 06 Sep 2021 04:07:06 +0000
ROA not before:           Mon 06 Sep 2021 04:02:06 +0000
ROA not after:            Tue 06 Sep 2022 04:07:06 +0000
asID:                     141131
IP address blocks:        103.158.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9f:e6:f1:de:42:a4:c5:33:02:05:4e:b8:a1:6c:63:7e:b2:43:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  6 04:02:06 2021 GMT
            Not After : Sep  6 04:07:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:e9:28:83:3d:28:af:0f:b1:14:6e:4d:5c:
                    48:e7:44:44:7e:01:35:c8:af:e5:05:80:0d:75:cf:
                    a6:17:f2:37:5b:b8:a2:9c:52:c7:35:5c:93:ea:ae:
                    f3:43:d9:57:40:e0:2c:6b:14:e2:3e:0c:c0:74:87:
                    3a:43:f4:8c:80:56:1e:23:79:97:81:e9:02:6e:07:
                    43:66:6c:ad:96:8c:e7:9d:e6:9e:62:14:01:c8:4e:
                    1b:d8:60:91:d5:5a:bc:bc:b4:fa:03:2f:29:bc:d8:
                    82:7d:9f:d8:58:cc:51:d7:aa:81:15:c1:57:a4:de:
                    dc:04:ed:11:f6:86:da:ad:aa:39:e8:46:e3:a5:d2:
                    61:f4:74:b9:91:77:09:c1:19:44:71:bc:b7:ec:b0:
                    87:b8:07:42:b4:71:e0:57:26:6f:18:34:79:1a:05:
                    f6:63:5e:fd:47:9c:89:69:70:cf:4b:44:cf:8a:1a:
                    67:7a:3b:80:fe:2b:e5:7b:f1:6b:a2:61:de:b1:d4:
                    36:62:ff:96:37:ff:65:1c:a8:0a:e8:84:49:66:27:
                    a6:f6:5e:5a:80:8f:4d:36:ca:26:05:3c:85:bf:06:
                    ef:0d:1d:be:07:2c:f0:a4:38:b9:eb:6f:d5:24:3d:
                    ab:3d:8b:01:cb:bb:c4:9b:01:57:8d:bd:49:bd:7f:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F9:E3:3F:C3:27:78:9A:A4:D3:1A:7D:4E:1E:43:13:7A:98:A1:AF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e3134332e302f32342d3234203d3e20313431313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:15:ba:c4:96:0c:c3:7b:db:c3:96:f7:c5:5c:cf:ed:b1:02:
         7d:4c:67:08:1d:40:ec:56:34:9a:d3:84:98:1d:76:6f:9a:4b:
         25:52:96:db:fd:48:ef:8c:5c:35:1d:d0:a6:ee:ad:07:07:1f:
         60:e7:87:37:8f:50:c6:f7:d3:c8:91:62:34:17:79:70:1c:a5:
         73:52:3b:ee:b4:57:fa:46:6b:b4:c3:2d:6d:e7:59:c5:e8:04:
         0c:82:1e:93:00:aa:80:33:25:59:a4:ac:d2:4f:a4:29:1c:1f:
         83:08:32:f7:93:75:d7:6f:e9:b7:96:e1:73:6e:0c:9e:af:69:
         e1:0e:95:45:d6:3c:24:95:49:f4:4e:01:fc:f3:a2:bf:f5:b3:
         e7:6c:b8:b0:dd:89:cc:9a:a5:5c:b4:91:c3:e0:14:c6:70:4b:
         82:69:1b:56:0f:e0:8f:d1:0e:9b:92:dc:b7:1b:be:6f:3e:db:
         00:15:57:ce:65:97:33:96:b4:d1:11:7a:9a:8f:08:ba:1f:fc:
         65:cd:bf:3b:cc:fe:c7:22:e1:a9:0f:f7:e3:61:a6:56:cd:67:
         8c:8c:5a:16:5a:ba:1e:68:83:d0:72:b8:82:0a:bb:3a:fa:0f:
         db:3a:61:8a:84:df:22:aa:16:cb:8f:8b:1c:75:c8:b6:b6:c5:
         ec:b3:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org