Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e3132382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136332e3132382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          vViEphejCoXbvycbMTirvIN0Acyyt8OiPoVpGoL9p7g=
Subject key identifier:   C6:F9:8D:5E:6E:A4:AA:02:25:77:D0:77:3F:82:F5:12:40:17:4B:36
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3B929518021B3BE624980FEA8E18EE4316497120
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e3132382e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 07 May 2021 05:42:28 +0000
ROA not before:           Fri 07 May 2021 05:37:28 +0000
ROA not after:            Sat 07 May 2022 05:42:28 +0000
asID:                     17995
IP address blocks:        103.163.128.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:92:95:18:02:1b:3b:e6:24:98:0f:ea:8e:18:ee:43:16:49:71:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  7 05:37:28 2021 GMT
            Not After : May  7 05:42:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:22:d2:ae:f5:6f:8b:44:84:9a:5e:14:65:
                    f5:2e:c0:96:f2:10:f2:99:0d:dc:c2:f5:83:c6:0a:
                    8d:a0:f7:75:9b:26:da:83:a8:d7:df:16:56:02:ad:
                    e1:5b:28:b9:00:b5:75:31:8c:ef:ed:83:f8:fc:16:
                    98:ce:e1:b7:b5:d6:4e:6d:13:38:72:72:20:c7:08:
                    68:4b:ad:23:85:a6:a9:e7:02:85:db:06:9d:4f:11:
                    20:b1:4d:56:c9:25:80:1d:41:d8:e6:b1:51:f6:57:
                    28:93:a6:93:e3:1f:14:cc:eb:55:0e:25:5c:93:68:
                    ef:5e:57:24:50:35:d4:70:42:89:d8:0d:b8:6b:89:
                    6e:10:d8:37:a2:4b:24:5e:89:11:34:d5:ff:06:53:
                    17:92:84:ac:7d:04:cb:41:0a:f2:fd:07:f7:3d:41:
                    d1:fb:7d:05:e2:09:8c:1a:df:be:34:2e:a7:d3:92:
                    90:be:19:96:c3:53:77:1e:5f:d8:19:ef:70:13:a8:
                    8f:ae:88:27:43:21:77:38:37:c8:e5:ed:33:d7:cf:
                    0d:aa:3b:04:39:8d:0b:28:1b:22:a9:a4:51:93:c0:
                    56:94:a7:93:10:bf:f8:16:2f:b1:d8:96:6e:1b:90:
                    c8:56:6f:f7:3d:ec:46:02:47:4b:43:39:9f:0a:a0:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F9:8D:5E:6E:A4:AA:02:25:77:D0:77:3F:82:F5:12:40:17:4B:36
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e3132382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:12:46:c1:fc:2c:91:0e:95:48:33:50:50:ea:b3:9b:c8:b4:
         83:43:6f:42:63:f8:81:d2:8c:14:a7:27:c0:c9:2c:2a:2c:bd:
         ee:50:53:94:48:f5:de:2f:d2:c7:2f:f8:7f:30:19:15:67:bf:
         16:0c:10:7e:4a:0a:ee:66:0b:08:dd:79:01:00:9f:de:6b:13:
         07:13:c3:d8:5e:5e:c3:47:8f:e6:fd:7b:91:36:c7:fc:ce:37:
         ba:ed:ba:1a:b0:46:4a:4f:16:42:21:e3:07:18:64:b7:4b:43:
         a2:9c:bf:f6:0b:a1:22:3d:22:bf:a8:e0:a3:bd:e7:f6:fa:93:
         cb:83:2b:cb:c5:12:78:d7:13:e1:22:3c:a8:57:7b:2d:0d:02:
         17:ff:9e:61:eb:c6:e4:cd:7e:50:2b:37:cb:67:62:22:4e:d5:
         d1:a6:74:60:8c:49:1c:2a:1a:7b:00:99:cd:83:4d:bf:df:29:
         29:2c:a7:d6:fd:04:88:e2:3d:1c:2a:13:94:a2:03:c8:6f:a9:
         2b:33:b1:07:c2:5a:96:f6:96:50:4a:a8:22:da:02:48:36:6d:
         79:75:3a:09:8d:e3:35:ed:05:a2:29:99:90:ac:0e:04:fe:12:
         2a:ae:3c:6c:74:d1:8e:20:03:4b:c6:70:ba:42:ff:b8:4c:ea:
         ab:9c:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org