Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136312e3132382e302f32342d3234203d3e20313431363236.roa
File:                     3130332e3136312e3132382e302f32342d3234203d3e20313431363236.roa (raw, json)
Hash identifier:          +u5yOhse0lXMkR154uxHylqpseOpG3uQUST9ysqZSTA=
Subject key identifier:   B5:93:21:6E:68:44:AD:C6:99:D1:F2:C4:AF:4C:A1:28:C1:38:14:84
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0F1580987839D855131316CCD71884B359C1AE68
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136312e3132382e302f32342d3234203d3e20313431363236.roa
Signing time:             Tue 27 Apr 2021 07:34:41 +0000
ROA not before:           Tue 27 Apr 2021 07:29:41 +0000
ROA not after:            Wed 27 Apr 2022 07:34:41 +0000
asID:                     141626
IP address blocks:        103.161.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:15:80:98:78:39:d8:55:13:13:16:cc:d7:18:84:b3:59:c1:ae:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 27 07:29:41 2021 GMT
            Not After : Apr 27 07:34:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ac:38:fe:5a:6d:15:ab:67:e1:2f:28:ab:f2:
                    f9:b8:20:50:e9:c7:d4:05:a0:99:6e:76:68:63:d0:
                    a5:cf:2e:e8:7b:68:22:ab:a7:a1:5e:28:c6:c3:75:
                    26:d3:0e:4f:34:ab:d9:76:e3:06:39:97:fa:26:be:
                    0b:b0:0d:74:01:12:31:6d:1e:8e:49:cc:a4:7d:a9:
                    dc:86:05:90:b0:d2:cd:8b:6b:5f:84:f7:02:27:ab:
                    16:95:eb:1b:99:32:2a:c6:8f:c0:09:58:52:96:4d:
                    43:c7:89:33:74:5b:25:74:93:f7:b6:35:d5:6b:8c:
                    46:37:29:64:84:83:70:de:0e:cc:68:fb:13:36:ee:
                    1b:19:57:0b:e7:9f:c7:e8:cf:8e:da:0a:f2:8a:e0:
                    9b:0d:fc:ef:46:2a:fd:0a:27:22:09:f9:3f:36:61:
                    00:59:f5:bb:3c:f9:dd:dc:42:19:cd:a5:53:cd:66:
                    45:94:a7:34:36:86:20:15:d9:a8:9c:00:5d:9a:26:
                    f4:69:ae:10:ff:07:7c:71:e8:39:6f:c1:b7:15:26:
                    bb:d8:dd:7b:da:81:02:2e:50:3d:7f:e1:9d:0c:8c:
                    1b:f6:17:07:e6:0a:67:7e:12:0a:bf:f2:90:46:f9:
                    53:28:e0:08:80:f9:5c:74:c3:ab:24:4c:4d:34:84:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:93:21:6E:68:44:AD:C6:99:D1:F2:C4:AF:4C:A1:28:C1:38:14:84
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136312e3132382e302f32342d3234203d3e20313431363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:78:e3:f9:2d:7b:42:f5:a4:c2:0e:f4:8b:54:a2:b4:29:ff:
         56:f0:5c:c0:dc:ae:df:26:da:f2:c2:c9:b2:3d:d5:7a:da:84:
         1d:73:ad:b5:8c:3d:03:7a:f6:de:2b:57:11:24:a7:ff:7a:8e:
         3f:03:e6:16:47:02:e3:45:e1:20:2f:e3:b1:23:92:d5:3d:a0:
         30:ea:97:09:0d:bd:28:70:e9:15:e4:0d:45:be:4f:0c:bd:6c:
         a5:51:e3:e6:e4:28:85:8b:52:45:d1:40:1e:db:34:18:78:73:
         c4:ee:eb:77:3d:c8:e7:8d:e9:a5:bf:7f:9a:17:2e:47:90:cc:
         0e:cc:f3:14:dd:cd:28:23:00:68:9c:5e:3b:85:a3:10:34:66:
         93:70:cf:32:78:15:84:d1:88:62:e4:b0:86:e8:86:0a:e7:10:
         28:65:09:ce:8f:45:ca:27:f8:c6:b2:58:48:a1:5e:c2:35:5a:
         3b:e1:42:80:05:4c:bf:54:db:0a:d3:63:aa:9a:1e:fc:32:1e:
         97:60:a2:3b:31:c4:10:13:a3:11:15:b2:af:9c:c3:3d:b5:2f:
         ca:e5:f7:87:d9:ea:44:69:16:e0:1b:69:62:4f:8b:5d:d9:4b:
         6c:fc:c0:09:b6:b8:a0:ad:a5:57:f3:8c:6a:de:d3:ec:66:6f:
         30:ad:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org