Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa
File:                     3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (raw, json)
Hash identifier:          Is/DjjC80YcjOQI4PRQ7MAiOCZ/YGDcXMt17mC+czAw=
Subject key identifier:   51:F0:BA:A5:36:3A:44:18:CF:CE:EF:7A:82:85:E4:06:20:56:6F:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7F8F1A418AB883838CAF402F1195562527968CD4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa
Signing time:             Mon 06 Sep 2021 04:10:15 +0000
ROA not before:           Mon 06 Sep 2021 04:05:15 +0000
ROA not after:            Tue 06 Sep 2022 04:10:15 +0000
asID:                     141646
IP address blocks:        103.162.72.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8f:1a:41:8a:b8:83:83:8c:af:40:2f:11:95:56:25:27:96:8c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  6 04:05:15 2021 GMT
            Not After : Sep  6 04:10:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:05:41:b9:e4:74:4f:06:f6:ff:ad:d3:77:
                    b5:6b:7d:45:1a:6e:df:25:87:1a:57:7f:8b:aa:ff:
                    f1:36:53:c3:05:ff:c9:87:4b:80:18:8e:cf:af:09:
                    fb:99:5f:46:85:f1:8c:c0:69:83:53:2a:99:f8:bd:
                    8a:ba:5c:31:06:f7:8f:16:4b:f7:9b:e4:57:68:2a:
                    41:de:d8:9f:b3:72:3f:24:08:99:02:1e:4b:82:14:
                    a4:3e:6e:1e:75:e5:46:ab:2f:53:ba:4d:a5:a6:9f:
                    1b:3b:0c:87:8f:b1:6d:97:b5:ee:d1:b2:03:18:76:
                    b3:99:c4:7f:05:c5:cd:18:40:54:43:7c:d0:05:6a:
                    f6:eb:2d:86:b3:84:bf:66:33:a1:ca:f0:39:be:7b:
                    9a:d6:06:57:71:d8:73:c9:a6:27:df:4d:41:ab:bd:
                    ba:09:08:08:fe:de:8e:6a:a6:e0:38:25:39:3a:c3:
                    e1:de:9e:72:7e:e8:9d:98:2c:02:19:c2:02:55:ab:
                    33:4d:36:1a:66:0b:06:a7:76:72:5a:b6:fc:9e:a9:
                    6a:67:af:1a:f5:db:3c:8f:ac:99:f2:fd:2b:57:85:
                    59:f7:ea:62:99:70:eb:8e:36:20:81:88:c2:2c:0d:
                    78:91:bf:12:e8:09:c2:db:c8:e7:44:fc:f4:35:a9:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F0:BA:A5:36:3A:44:18:CF:CE:EF:7A:82:85:E4:06:20:56:6F:6B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:dc:8a:ce:d0:2a:53:21:df:63:00:40:76:4a:7c:e9:07:
         a0:1a:1a:eb:14:38:44:42:5e:59:65:32:6d:75:d4:6a:a7:e2:
         d7:34:7d:c0:0a:ea:e3:a7:be:90:30:75:6e:08:77:f5:14:2f:
         9c:a3:09:a8:2e:a3:a0:e8:0f:21:36:b9:34:31:54:98:3b:69:
         ba:55:79:54:7a:59:d7:cb:be:09:60:d8:0f:20:2e:ff:d9:01:
         12:90:87:71:bf:5c:11:d4:ca:31:f1:f3:b3:a9:3d:97:e2:68:
         9a:c1:3a:15:60:b8:2c:09:a1:94:93:8d:a6:8b:18:08:65:4d:
         c9:4f:e4:86:99:b0:79:a7:77:f3:34:e6:cf:75:fe:c2:32:23:
         cc:4f:c6:e1:7f:01:3a:23:28:d8:6d:96:bf:6d:47:fa:5f:0e:
         7e:2a:69:96:b6:76:d2:fc:37:03:a7:da:ce:cb:30:2e:64:23:
         3d:c3:49:69:33:e1:a0:84:b5:b9:58:b9:3a:ff:cb:d7:5c:06:
         4f:30:4e:c0:37:38:6e:15:6a:80:21:da:f3:70:b6:60:fa:50:
         2e:cb:29:0d:49:06:ec:ca:ce:ed:74:9c:5d:51:a3:06:b4:dd:
         61:72:f7:ed:78:48:99:f9:85:9e:54:e8:05:c6:7d:e7:77:3c:
         0d:c9:0f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org