Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e3136312e302f32342d3234203d3e20313431383932.roa
File:                     3130332e3136332e3136312e302f32342d3234203d3e20313431383932.roa (raw, json)
Hash identifier:          KVCuAsq9Be/dfoBxIVQ4sIvndCVbrX5Z1tuCx/9H9E0=
Subject key identifier:   59:89:6B:05:7B:E4:61:73:0F:6A:DB:3A:F7:44:A8:66:5B:63:B1:B1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       33CF777CB146D236265A74DEC38A9524589A1C2D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e3136312e302f32342d3234203d3e20313431383932.roa
Signing time:             Mon 05 Jul 2021 09:28:39 +0000
ROA not before:           Mon 05 Jul 2021 09:23:39 +0000
ROA not after:            Tue 05 Jul 2022 09:28:39 +0000
asID:                     141892
IP address blocks:        103.163.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cf:77:7c:b1:46:d2:36:26:5a:74:de:c3:8a:95:24:58:9a:1c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  5 09:23:39 2021 GMT
            Not After : Jul  5 09:28:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:2c:18:ab:01:15:8c:57:39:c7:cf:ba:2e:
                    79:20:91:f8:21:16:4c:9d:d0:74:ec:0a:b7:74:40:
                    ef:8b:e1:11:4d:a1:cc:fa:b8:5f:c9:2e:5c:d2:95:
                    3b:6d:75:43:52:1a:c0:e6:69:48:15:86:12:8e:bf:
                    7d:05:35:bc:ec:bf:1e:f6:a6:dc:96:32:80:6b:38:
                    a7:bc:64:b9:44:db:eb:b6:87:6a:51:cf:fa:8c:9c:
                    45:32:04:bf:f7:04:d9:c3:4a:45:87:89:68:c3:96:
                    60:ad:fb:c9:38:bf:1d:df:98:e1:af:3e:00:bf:ce:
                    fd:46:52:12:96:c0:c6:99:8c:cd:8b:de:84:ed:57:
                    fd:51:f7:00:a3:42:25:4d:5c:48:c8:f1:20:d9:3a:
                    61:9d:42:8e:26:f2:48:60:58:4c:56:c7:ac:e8:13:
                    d1:d3:90:c7:77:d0:b3:9b:10:fb:00:9a:f4:2e:28:
                    ea:79:1e:59:78:e9:8a:71:b5:dd:3c:12:18:2e:d2:
                    97:3d:d9:2f:a8:91:0f:e7:e7:6f:74:d7:9d:b2:be:
                    61:ab:e0:02:fd:e7:bc:d2:fa:56:5e:33:e3:33:07:
                    b9:05:f4:9b:8d:ee:bb:7d:2a:70:1f:59:b1:81:07:
                    37:0f:0a:b2:1f:c6:1d:81:b2:5f:12:91:07:a3:6e:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:89:6B:05:7B:E4:61:73:0F:6A:DB:3A:F7:44:A8:66:5B:63:B1:B1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e3136312e302f32342d3234203d3e20313431383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:4d:8a:ac:6b:b4:36:88:1e:83:a3:44:ce:1b:c3:be:06:3e:
         5e:04:de:5a:99:c5:d5:bf:e1:4f:f3:81:1f:ff:de:15:a8:20:
         8c:04:bc:8d:17:61:a7:e9:92:4f:96:d6:e4:ec:92:9a:c8:91:
         13:f9:6b:bc:b3:97:19:dc:22:db:28:01:44:6b:77:97:18:8e:
         1b:57:6b:dd:02:32:b9:cc:4b:0b:93:a5:bd:56:0e:01:74:6d:
         2d:4c:80:05:30:6f:f2:21:bf:52:6e:42:3b:2d:28:b3:ea:d6:
         6e:11:b5:a0:2b:f3:18:61:ba:0d:88:30:e9:dd:94:d3:26:8e:
         74:9d:2b:0b:21:cc:fc:bf:e4:0d:0d:7e:02:0e:08:f6:c5:7a:
         13:ae:f9:de:7d:dd:44:bb:b1:70:67:d1:6c:c6:22:89:3e:ee:
         f1:cb:7c:f0:cc:76:a0:fe:96:e6:69:85:50:7f:b0:f0:49:40:
         d7:dd:0a:8c:d1:8a:62:9a:53:19:33:34:89:8c:46:cc:46:9b:
         af:2e:2b:23:6e:ea:65:0a:c2:d3:d1:d5:05:dd:fc:78:5d:c5:
         09:90:07:bd:94:98:64:00:43:27:c8:f8:0b:64:e4:36:d1:27:
         c6:61:ce:ef:67:d7:2d:df:47:a5:ff:a9:c3:9d:9c:cf:7b:11:
         02:45:39:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org