Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e33392e302f32342d3234203d3e20313431383930.roa
File:                     3130332e3136332e33392e302f32342d3234203d3e20313431383930.roa (raw, json)
Hash identifier:          rQe6HedmhZAO+i8sq4xz2w3OjvvC6HlO9OyTBD4vB3c=
Subject key identifier:   41:94:3A:51:34:2B:51:97:7F:89:D1:89:4C:91:81:0A:44:F6:E8:79
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       23645C85227F3FAD6ACD0BEE7F954B89BE4E6C5F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e33392e302f32342d3234203d3e20313431383930.roa
Signing time:             Wed 05 May 2021 02:34:11 +0000
ROA not before:           Wed 05 May 2021 02:29:11 +0000
ROA not after:            Thu 05 May 2022 02:34:11 +0000
asID:                     141890
IP address blocks:        103.163.39.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:64:5c:85:22:7f:3f:ad:6a:cd:0b:ee:7f:95:4b:89:be:4e:6c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  5 02:29:11 2021 GMT
            Not After : May  5 02:34:11 2022 GMT
        Subject: CN=3082010A028201010095AC23B98133FE82B392FCDEF82FC1D204DAD0A3293AD57B59CE2C200248FAAA8A9E24818DFDC4CA8350410B45B6CEB73F326C4AB36AA55D19F2249B724A82FEEDACDE696E26E1F3A4B53945DE2DB50F2BE785B63105224E22D38E14932D6ADF69A552C1784FBAE1A11987E22566B72631D8F7DF9CD80C1D1703553DA2E9E3EA1FABDABC5E372A1FFE81823C594624C5C41EECFC9B948AF45083374399516B276BF115FE0BE272813978D390262D4326CD04047264FB850325B0FBA74CBDA328124AED4B6DF1CE6D65C5321A3A32A498584EAA6380789DE223DC7E690DE586366AF73BD05231894E353465A0BDD0CAA4B08DAF520A0C95361C62AEBBD81F2E710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:23:b9:81:33:fe:82:b3:92:fc:de:f8:2f:
                    c1:d2:04:da:d0:a3:29:3a:d5:7b:59:ce:2c:20:02:
                    48:fa:aa:8a:9e:24:81:8d:fd:c4:ca:83:50:41:0b:
                    45:b6:ce:b7:3f:32:6c:4a:b3:6a:a5:5d:19:f2:24:
                    9b:72:4a:82:fe:ed:ac:de:69:6e:26:e1:f3:a4:b5:
                    39:45:de:2d:b5:0f:2b:e7:85:b6:31:05:22:4e:22:
                    d3:8e:14:93:2d:6a:df:69:a5:52:c1:78:4f:ba:e1:
                    a1:19:87:e2:25:66:b7:26:31:d8:f7:df:9c:d8:0c:
                    1d:17:03:55:3d:a2:e9:e3:ea:1f:ab:da:bc:5e:37:
                    2a:1f:fe:81:82:3c:59:46:24:c5:c4:1e:ec:fc:9b:
                    94:8a:f4:50:83:37:43:99:51:6b:27:6b:f1:15:fe:
                    0b:e2:72:81:39:78:d3:90:26:2d:43:26:cd:04:04:
                    72:64:fb:85:03:25:b0:fb:a7:4c:bd:a3:28:12:4a:
                    ed:4b:6d:f1:ce:6d:65:c5:32:1a:3a:32:a4:98:58:
                    4e:aa:63:80:78:9d:e2:23:dc:7e:69:0d:e5:86:36:
                    6a:f7:3b:d0:52:31:89:4e:35:34:65:a0:bd:d0:ca:
                    a4:b0:8d:af:52:0a:0c:95:36:1c:62:ae:bb:d8:1f:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:94:3A:51:34:2B:51:97:7F:89:D1:89:4C:91:81:0A:44:F6:E8:79
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e33392e302f32342d3234203d3e20313431383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f2:9b:3a:52:72:c9:47:c9:7b:19:01:d5:ad:bb:46:95:31:
         66:ef:be:59:09:7d:96:e5:4f:68:91:2b:07:9b:5f:db:51:50:
         a3:e1:c7:66:1b:e5:fd:39:c5:2c:fa:b2:6d:cf:65:39:53:ef:
         4d:c9:42:e9:cc:78:79:96:ab:3e:8f:c1:52:19:17:c8:48:c6:
         60:14:09:f0:eb:4f:07:47:21:b0:71:2e:ee:8c:26:37:9e:3c:
         6f:fa:ef:ee:06:9a:db:56:01:e5:a0:12:8c:e9:57:b6:d7:60:
         df:72:4a:91:35:e6:3b:30:fa:90:16:5a:0c:f2:77:94:a6:01:
         be:15:a8:87:c6:49:c3:62:d2:37:77:80:28:08:9e:ea:6e:45:
         86:1f:74:3a:0c:70:40:64:e0:b9:67:30:70:a8:3a:d9:9e:c5:
         fc:d5:b5:05:f5:98:15:71:6f:fd:55:7f:56:51:1d:62:9e:0d:
         fb:e9:22:a3:82:37:81:a2:e3:04:ce:c4:67:91:a9:82:dc:51:
         62:1d:58:c8:c2:38:60:e2:d8:f7:20:e2:4f:02:d8:a2:1a:51:
         36:11:2b:64:e0:42:2e:8f:6d:77:74:5e:e8:b5:e9:cc:db:9b:
         ac:d1:51:de:46:93:03:52:4b:ca:a8:0a:ec:d4:07:0e:16:da:
         9e:bb:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org