Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3131362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          pXxo5V6AUWynm2UrSWXem80mhAHYVaS8xuY4fJGkKNA=
Subject key identifier:   1E:34:9B:C6:22:5C:AE:8C:B6:EF:BC:9D:8A:A8:49:B8:A6:FD:FA:DD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4D07A1898880DE2048079FE06BC1CBAB296C4840
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131362e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:02 +0000
ROA not before:           Sat 26 Feb 2022 23:55:02 +0000
ROA not after:            Mon 27 Feb 2023 00:00:02 +0000
asID:                     17995
IP address blocks:        103.164.116.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:07:a1:89:88:80:de:20:48:07:9f:e0:6b:c1:cb:ab:29:6c:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:02 2022 GMT
            Not After : Feb 27 00:00:02 2023 GMT
        Subject: CN=3082010A0282010100A82A69C3F40F66B22240A230321A505C418620D8AF85CE954D977D70F3E915B931903B41F71B666EE03F73EEACFB34C5DC45E60C98FB3816AB192C8B432B08D42F5531EA715D56727600D21335DE53B57CC3E03BCA9E10D9AAAD48361AF6F39F3AFB02706B339CA8E7509D399C7F8EED093FAD853C5D627F240EC4DC97476AB52460ABB58B9F5B4BD4E8B0E99978F6E80900C389DA6E8B3164BA7E21285CF73CE17D90CB16ECA9BF42902E3BB86A1516FFF2CBA190D7F282298FED40AA9E00583E42369FDC547E54C10110C276A0F5A57B5B1B21D14591D84639C3A75B855D4EA1C7A6083FACD9F1EE1988C5F18267CEECA8D6EAA17B36D0E7B901489743AAD70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:69:c3:f4:0f:66:b2:22:40:a2:30:32:1a:
                    50:5c:41:86:20:d8:af:85:ce:95:4d:97:7d:70:f3:
                    e9:15:b9:31:90:3b:41:f7:1b:66:6e:e0:3f:73:ee:
                    ac:fb:34:c5:dc:45:e6:0c:98:fb:38:16:ab:19:2c:
                    8b:43:2b:08:d4:2f:55:31:ea:71:5d:56:72:76:00:
                    d2:13:35:de:53:b5:7c:c3:e0:3b:ca:9e:10:d9:aa:
                    ad:48:36:1a:f6:f3:9f:3a:fb:02:70:6b:33:9c:a8:
                    e7:50:9d:39:9c:7f:8e:ed:09:3f:ad:85:3c:5d:62:
                    7f:24:0e:c4:dc:97:47:6a:b5:24:60:ab:b5:8b:9f:
                    5b:4b:d4:e8:b0:e9:99:78:f6:e8:09:00:c3:89:da:
                    6e:8b:31:64:ba:7e:21:28:5c:f7:3c:e1:7d:90:cb:
                    16:ec:a9:bf:42:90:2e:3b:b8:6a:15:16:ff:f2:cb:
                    a1:90:d7:f2:82:29:8f:ed:40:aa:9e:00:58:3e:42:
                    36:9f:dc:54:7e:54:c1:01:10:c2:76:a0:f5:a5:7b:
                    5b:1b:21:d1:45:91:d8:46:39:c3:a7:5b:85:5d:4e:
                    a1:c7:a6:08:3f:ac:d9:f1:ee:19:88:c5:f1:82:67:
                    ce:ec:a8:d6:ea:a1:7b:36:d0:e7:b9:01:48:97:43:
                    aa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:34:9B:C6:22:5C:AE:8C:B6:EF:BC:9D:8A:A8:49:B8:A6:FD:FA:DD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:85:1d:28:ea:23:53:cd:46:d3:8d:6a:59:45:9d:b0:cc:c2:
         ef:8f:33:0a:5d:43:ba:46:30:5c:e1:5e:80:51:28:cf:bb:73:
         92:2f:df:dc:35:71:3f:a1:ff:a9:51:38:dd:99:c5:8c:ca:c0:
         d2:6e:f6:e2:ee:09:95:05:79:ef:f6:e0:f6:b1:7b:ae:6c:c1:
         e4:87:7a:21:52:46:a9:5a:06:c4:5c:d3:2e:c9:84:3e:32:ca:
         bc:0f:60:82:b6:70:1c:be:90:b7:1e:10:a6:ff:65:db:91:35:
         66:d7:ce:92:be:92:84:08:96:43:05:81:b7:47:7b:7e:56:70:
         09:6f:6d:31:85:b8:84:c2:35:5d:fb:69:82:7d:e4:f2:5f:06:
         41:9c:eb:7c:3a:5f:7f:71:34:08:d7:c4:51:90:93:ef:28:d0:
         ba:9a:c2:e8:27:27:f5:60:aa:ad:eb:ca:8b:dd:a8:1f:13:ba:
         6e:55:6e:97:af:8a:fd:dd:ef:f9:6a:61:9c:a7:81:3d:f3:e3:
         a2:01:b9:90:83:93:d6:a2:1d:2b:94:c1:a9:59:49:5c:d0:2e:
         dd:0b:4c:f2:46:35:81:de:e3:8a:f3:4a:c5:7d:61:80:99:aa:
         fc:a5:3f:be:71:9f:2c:ed:f2:f7:0e:09:0b:21:49:88:5a:06:
         b9:f7:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org