Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e3133312e302f32342d3234203d3e20313333383233.roa
File:                     3130332e3136322e3133312e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          2SOv5YQSzVHVnqe6uwZ059XQu8/F8topZzra1dvMWn0=
Subject key identifier:   AF:C7:0A:B3:9A:F2:1E:EE:72:AC:FA:BF:A6:B3:98:4E:CC:32:CA:BD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       46C5D3A0656F33CCDBB3FF360AD622C9AC3177A4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e3133312e302f32342d3234203d3e20313333383233.roa
Signing time:             Thu 05 Aug 2021 09:47:33 +0000
ROA not before:           Thu 05 Aug 2021 09:42:33 +0000
ROA not after:            Fri 05 Aug 2022 09:47:33 +0000
asID:                     133823
IP address blocks:        103.162.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c5:d3:a0:65:6f:33:cc:db:b3:ff:36:0a:d6:22:c9:ac:31:77:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  5 09:42:33 2021 GMT
            Not After : Aug  5 09:47:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:43:55:3e:3b:af:33:cd:23:c6:57:6f:a8:d3:
                    e5:df:92:02:ba:ce:94:e7:32:4a:61:96:81:e9:ca:
                    e0:37:c3:d7:e6:03:b8:2b:f3:31:96:23:55:ef:9b:
                    38:ce:be:9b:4d:ba:f7:db:4b:18:57:6e:dd:1b:00:
                    36:ef:2b:c0:bf:f4:53:6d:0a:d6:40:cd:25:0c:f4:
                    ed:c4:5e:f2:5c:27:66:cd:84:30:7c:61:d7:89:3d:
                    8f:51:6a:a4:eb:f4:1d:15:f9:d5:e2:c5:fb:57:14:
                    7a:d7:41:1f:42:f8:cc:3c:cc:15:57:4c:7c:e3:85:
                    47:af:c2:23:08:33:63:8a:ba:c5:1f:c8:e4:57:60:
                    17:16:36:f0:8e:3c:fe:74:04:f4:ba:0f:54:9c:1d:
                    56:b0:57:34:3c:34:88:6f:64:29:df:64:03:c3:ec:
                    cc:7b:2a:c3:3c:0e:6c:99:9f:be:8d:ed:a6:89:55:
                    f8:e0:fd:20:77:7c:de:cd:ca:4e:31:bb:8c:20:83:
                    3e:63:ac:b4:0a:a0:95:cc:37:29:9a:b4:f2:56:5f:
                    ca:e4:25:0a:eb:37:46:29:8b:e0:47:92:12:e5:55:
                    d0:4c:19:58:16:08:91:8c:b4:5c:2f:62:58:7f:cf:
                    c8:1f:3e:28:ed:d4:d2:1f:01:f9:2a:3d:75:9d:29:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C7:0A:B3:9A:F2:1E:EE:72:AC:FA:BF:A6:B3:98:4E:CC:32:CA:BD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e3133312e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:34:1a:a9:60:54:4d:52:c4:e7:50:bf:64:1e:56:85:26:
         e1:9b:04:7c:52:60:51:df:f5:a3:d7:68:58:15:27:da:0c:62:
         aa:6e:04:5e:af:28:3b:4f:55:e0:25:ec:0b:b5:15:5b:3e:0f:
         3c:25:f3:31:77:3c:5e:56:91:7d:7f:cd:af:8a:e4:7e:32:91:
         2d:14:bf:25:72:5f:23:b3:cf:98:ed:43:42:4a:ea:2c:54:6f:
         9c:88:3a:30:0d:fc:1e:a1:9a:0b:ea:2c:10:60:d0:5e:1e:7c:
         51:f0:9c:58:95:8d:ef:af:f1:1f:4e:e3:e4:ac:3a:7e:b8:1d:
         96:a8:58:c2:39:8f:7f:de:b5:b4:02:96:bc:2c:ac:88:dd:34:
         d1:a3:8f:8c:12:8d:1f:ae:71:48:33:40:6a:7f:cb:07:c7:96:
         ed:4a:ee:0e:94:34:77:3d:00:27:20:80:06:fe:19:b8:8b:eb:
         e7:51:0b:e0:0c:c8:8f:2b:58:f7:93:81:d8:a1:e5:86:dc:cc:
         fc:19:21:6e:07:7b:15:7c:a4:f9:58:b0:21:24:06:15:20:39:
         c3:41:a7:f8:e9:89:30:06:bf:52:6a:a3:78:7c:a9:27:b3:36:
         b8:41:84:22:97:86:36:37:78:03:dc:f2:83:9a:20:a5:f8:73:
         04:5b:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org