Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e3134372e302f32342d3234203d3e20313431353736.roa
File:                     3130332e3136302e3134372e302f32342d3234203d3e20313431353736.roa (raw, json)
Hash identifier:          FQHEA4Fyb+5/p0NlriJz+fxo8tyI7h2DIyTtseYqUkQ=
Subject key identifier:   64:4A:C6:66:BD:A8:F8:B4:9E:AD:7E:F5:12:7E:3C:25:19:A6:58:45
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       336926A816B614E79C55B98886B23E60FB45765A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e3134372e302f32342d3234203d3e20313431353736.roa
Signing time:             Mon 06 Sep 2021 04:08:12 +0000
ROA not before:           Mon 06 Sep 2021 04:03:12 +0000
ROA not after:            Tue 06 Sep 2022 04:08:12 +0000
asID:                     141576
IP address blocks:        103.160.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:69:26:a8:16:b6:14:e7:9c:55:b9:88:86:b2:3e:60:fb:45:76:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  6 04:03:12 2021 GMT
            Not After : Sep  6 04:08:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:98:4c:8d:30:54:5e:b0:88:4a:d6:07:3b:
                    7b:da:a6:af:4e:c2:9d:a6:b7:bb:e6:ce:be:db:fb:
                    2b:6b:fe:36:0f:ec:db:f3:c2:64:bc:ab:fd:b0:12:
                    bc:65:1a:01:8c:fe:2e:1b:2e:56:99:31:4c:91:72:
                    47:32:8d:22:c1:7c:f5:c5:25:57:11:5e:cc:d0:f1:
                    4c:2d:a6:3c:d6:ee:df:ed:82:d1:ed:ae:86:18:f9:
                    08:47:fd:40:f7:77:54:15:50:fa:10:c8:ba:3f:5f:
                    5f:98:5f:53:12:4d:cb:46:40:0d:cf:02:05:cd:14:
                    2f:9c:49:bc:a3:fb:9f:4f:59:f7:00:c0:c3:f9:c1:
                    f0:39:2a:7e:3c:12:13:e8:09:95:12:4c:7f:bc:92:
                    b2:61:d0:d3:b9:cb:55:11:9a:e3:40:6f:c6:72:b5:
                    db:0a:eb:f0:01:49:73:53:e9:ac:6b:a2:35:f0:d8:
                    1a:8a:3b:7b:f8:52:6e:a9:46:d7:f4:d5:0f:18:2c:
                    bc:4c:1f:27:83:cf:7f:dc:40:d5:78:72:60:5e:a2:
                    fd:91:ff:51:06:7b:5a:1e:ce:df:eb:7a:50:ad:1e:
                    1e:96:66:38:48:4e:b4:33:63:5f:dd:2b:ae:f7:bd:
                    76:79:80:8d:37:5a:da:f8:64:f0:8a:8e:b2:a1:71:
                    d7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4A:C6:66:BD:A8:F8:B4:9E:AD:7E:F5:12:7E:3C:25:19:A6:58:45
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e3134372e302f32342d3234203d3e20313431353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:1c:ca:c5:29:fc:27:0e:61:12:ca:e9:81:ac:9a:79:94:dd:
         47:a8:ce:5f:b5:4a:b1:4d:45:2b:0b:c1:77:c6:1b:e7:00:f4:
         2d:0c:8d:01:11:50:c2:69:4d:e3:55:1e:8e:7f:3a:b0:57:79:
         8a:01:b0:e6:4b:66:23:79:5f:40:43:f9:c1:94:4e:7c:54:05:
         f1:c0:c3:bc:dd:29:58:ea:90:a9:1d:f1:9b:68:da:55:8d:bb:
         cd:a9:0d:47:90:ca:65:62:db:70:01:96:a9:08:1b:d5:43:60:
         4e:7a:4b:6a:34:ae:f6:09:02:51:47:06:86:32:13:ad:91:82:
         dc:29:2b:5c:3f:01:7e:30:aa:29:66:9d:e7:81:39:8a:58:f4:
         c0:49:f4:5e:97:1d:bf:14:11:b3:f0:ce:69:4e:08:7b:96:fe:
         02:52:9b:bf:56:19:1e:72:04:40:92:cd:cc:78:d4:c9:ce:bb:
         f7:31:da:84:f9:29:e4:92:60:f1:a2:f9:d3:84:f5:6a:ba:ef:
         99:ee:e5:5c:75:2a:bd:6a:bd:e6:86:97:87:34:e6:7d:88:4a:
         dc:8a:bc:d4:cb:cd:53:6e:d1:a0:08:0f:d9:cf:ed:11:7e:66:
         02:d1:d2:a9:b9:17:61:2d:41:3e:ff:20:d2:29:b1:4e:1f:39:
         b8:a4:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org