Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136312e3136342e302f32332d3234203d3e20313431363231.roa
File:                     3130332e3136312e3136342e302f32332d3234203d3e20313431363231.roa (raw, json)
Hash identifier:          bku2RPDF7U/yXmiKiF1k+F18LO7xQmUsQE5H46+xCSA=
Subject key identifier:   C6:79:50:A1:B3:B6:94:F2:94:C8:0C:51:BB:39:AD:3A:70:27:CF:5B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       44F0A9999C4864EBEBA2846A25B388D725EFA537
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136312e3136342e302f32332d3234203d3e20313431363231.roa
Signing time:             Mon 05 Apr 2021 05:02:41 +0000
ROA not before:           Mon 05 Apr 2021 04:57:41 +0000
ROA not after:            Tue 05 Apr 2022 05:02:41 +0000
asID:                     141621
IP address blocks:        103.161.164.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f0:a9:99:9c:48:64:eb:eb:a2:84:6a:25:b3:88:d7:25:ef:a5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr  5 04:57:41 2021 GMT
            Not After : Apr  5 05:02:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:b6:0e:cf:37:f5:30:37:27:f4:d7:96:c2:
                    19:d4:4f:f2:5a:b6:79:b0:ed:31:f1:ee:e9:7e:58:
                    cb:17:8a:00:88:96:cb:7c:23:ad:82:c0:97:d8:b7:
                    f0:87:af:a7:05:e4:26:e6:95:ab:52:45:03:0c:02:
                    33:7f:3c:2d:2c:e1:7b:2c:5e:6d:01:84:eb:44:2c:
                    1f:0b:9d:e8:fa:2f:a2:a4:76:57:a4:d3:c3:3d:fd:
                    ff:21:47:87:e3:de:4b:8d:f8:76:d3:67:e4:72:35:
                    5b:d3:ec:b0:4d:4c:a1:e7:ab:6b:84:33:f4:4d:d6:
                    8a:06:8c:f8:e4:6c:61:36:81:d4:1c:9c:5a:56:fd:
                    4b:76:d5:c0:47:60:4f:8e:65:64:41:46:25:4d:6c:
                    7b:ef:64:c5:79:c1:43:13:c8:55:8e:bf:ac:ec:1c:
                    e0:d4:c6:1e:9b:2b:9b:70:73:61:40:07:eb:21:43:
                    b2:af:3e:af:1a:f9:6a:3f:84:6c:e4:65:f4:ee:8c:
                    29:6a:99:04:f2:21:c7:d5:25:1a:55:b1:83:26:66:
                    e1:17:98:26:44:dc:9f:3f:42:b6:79:d7:3a:1f:25:
                    b2:4e:8b:ca:73:65:1f:48:fa:8a:6c:f5:83:ef:2f:
                    56:0f:84:2b:4b:64:d5:ec:e6:11:4f:15:8e:35:54:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:79:50:A1:B3:B6:94:F2:94:C8:0C:51:BB:39:AD:3A:70:27:CF:5B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136312e3136342e302f32332d3234203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:57:69:a5:d7:98:84:78:01:d3:7f:71:ae:d9:52:7a:cd:4b:
         07:b2:c2:88:9a:df:28:7e:db:b7:de:91:89:73:07:d4:49:c6:
         5d:8d:4b:41:c6:b6:50:6a:8e:28:f5:07:35:d0:74:0f:17:5a:
         3e:42:8b:16:6d:37:68:04:d5:6b:00:06:6e:83:c0:2c:93:f6:
         ca:4e:4d:66:38:61:b4:3e:62:a5:3b:75:29:72:61:0f:2c:dd:
         c8:d8:34:00:71:a5:8a:94:ef:48:67:bd:de:76:4b:ed:17:f6:
         ce:7e:94:3d:9a:c3:9d:c2:d3:51:c0:8b:05:f2:ff:69:4d:5e:
         ab:b6:77:95:52:db:c1:fb:0d:43:ee:1e:2e:c6:5e:51:cd:a6:
         17:ec:13:2a:a0:4c:8f:0b:76:1e:d0:07:13:e0:9f:31:c9:28:
         38:9c:1e:a1:23:7f:32:04:f6:5d:8a:dd:14:ea:cf:83:f6:bb:
         3f:6a:30:e5:4f:e8:e1:b0:c6:d0:11:7c:21:0e:4e:68:b3:86:
         d9:b4:8f:e9:e8:27:c4:db:c3:30:d8:91:f0:1c:3a:64:e2:75:
         bc:bb:ee:62:99:ea:73:0f:89:c8:c5:79:b6:c3:b9:77:5d:5b:
         2a:2c:18:c5:54:3d:8a:c9:a8:47:b8:9d:73:9c:ec:1d:4e:41:
         94:aa:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org