Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3133342e302f32332d3234203d3e2034373837.roa
File:                     3130332e3136342e3133342e302f32332d3234203d3e2034373837.roa (raw, json)
Hash identifier:          gwWh7mUT5OJnJZA+7ePM7YAUEX8Th1hN+GtqmAde6KM=
Subject key identifier:   B5:60:2E:CA:20:9A:6A:5D:3C:01:D6:46:C7:29:76:90:41:54:DC:FC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       10D24342694829E43C1446DB66606CD068BE437A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3133342e302f32332d3234203d3e2034373837.roa
Signing time:             Wed 07 Apr 2021 09:30:50 +0000
ROA not before:           Wed 07 Apr 2021 09:25:50 +0000
ROA not after:            Thu 07 Apr 2022 09:30:50 +0000
asID:                     4787
IP address blocks:        103.164.134.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d2:43:42:69:48:29:e4:3c:14:46:db:66:60:6c:d0:68:be:43:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr  7 09:25:50 2021 GMT
            Not After : Apr  7 09:30:50 2022 GMT
        Subject: CN=3082010A0282010100ECD4F43092E7E10EBA249B844776BC131A4CD98FBB8BCA92834B7C9B5D231BE1869C40AF22C3E0BAA66F8811D35319364916AEA07035FA3E4CDB8D2A2B993BD74A0584A813546298D489B74AF13CF4919C4A62D38551DC86DB9868E7D0CA909CF66487289E558D05BFFFE364EB8ECF4F5B42EA868DDA3E5F9220016E99192BC5246AFBD60A31671CE20944126B388A5E537F43043EE3C3BFB272F9CA5FF5E13F19A50CAB124635C2486B30B01A08AB841ADA47B76E02001B1B565F654B3ED0C80483F285BE745076AFB964C9ACD7FECEFC0F4E24C58C204BCE2BDC1C7A12922027DA862C3584185D4253CF8B6A1581E8D06D43264035812B1D34E68289430CD70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d4:f4:30:92:e7:e1:0e:ba:24:9b:84:47:76:
                    bc:13:1a:4c:d9:8f:bb:8b:ca:92:83:4b:7c:9b:5d:
                    23:1b:e1:86:9c:40:af:22:c3:e0:ba:a6:6f:88:11:
                    d3:53:19:36:49:16:ae:a0:70:35:fa:3e:4c:db:8d:
                    2a:2b:99:3b:d7:4a:05:84:a8:13:54:62:98:d4:89:
                    b7:4a:f1:3c:f4:91:9c:4a:62:d3:85:51:dc:86:db:
                    98:68:e7:d0:ca:90:9c:f6:64:87:28:9e:55:8d:05:
                    bf:ff:e3:64:eb:8e:cf:4f:5b:42:ea:86:8d:da:3e:
                    5f:92:20:01:6e:99:19:2b:c5:24:6a:fb:d6:0a:31:
                    67:1c:e2:09:44:12:6b:38:8a:5e:53:7f:43:04:3e:
                    e3:c3:bf:b2:72:f9:ca:5f:f5:e1:3f:19:a5:0c:ab:
                    12:46:35:c2:48:6b:30:b0:1a:08:ab:84:1a:da:47:
                    b7:6e:02:00:1b:1b:56:5f:65:4b:3e:d0:c8:04:83:
                    f2:85:be:74:50:76:af:b9:64:c9:ac:d7:fe:ce:fc:
                    0f:4e:24:c5:8c:20:4b:ce:2b:dc:1c:7a:12:92:20:
                    27:da:86:2c:35:84:18:5d:42:53:cf:8b:6a:15:81:
                    e8:d0:6d:43:26:40:35:81:2b:1d:34:e6:82:89:43:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:60:2E:CA:20:9A:6A:5D:3C:01:D6:46:C7:29:76:90:41:54:DC:FC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3133342e302f32332d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:55:21:cf:bb:65:97:94:a1:e3:e1:02:73:bd:fc:40:23:dd:
         6e:b5:f4:42:53:88:54:32:81:a4:47:37:8f:d9:a6:cf:20:cd:
         ff:81:dd:c1:03:1a:62:40:ff:6e:7b:e7:0b:be:40:6c:81:b1:
         87:33:d3:a4:71:d6:1a:74:92:bb:25:28:47:ce:bf:c0:04:a2:
         f6:a5:f4:b3:42:49:62:ee:ae:e8:76:ab:48:a7:8a:aa:8b:c8:
         e3:aa:a9:31:06:8f:a6:f0:e4:15:0d:17:4b:91:0f:2f:8c:31:
         4b:95:18:c1:a5:2a:8e:08:48:5f:0c:74:16:ee:d8:0a:89:11:
         da:c8:02:f8:b0:c1:54:b7:da:ec:fd:74:47:07:bd:1f:0d:4e:
         d5:a1:51:88:35:fc:ca:4a:8e:06:bb:9e:20:49:64:2a:9f:fb:
         85:89:ad:fb:5c:8a:9a:6e:d4:b0:11:38:f7:86:b2:09:02:2e:
         f8:45:c1:d7:bb:5a:41:79:98:a1:e8:45:9f:14:9a:b7:a9:eb:
         81:4f:b0:98:69:03:48:56:de:6b:fa:d8:26:6a:52:e8:bc:f7:
         4a:a3:16:a0:02:04:4b:e4:0a:64:aa:6e:a0:61:6f:c7:4b:28:
         05:a3:f9:a4:73:28:bd:8b:5e:9b:d7:b6:30:39:ae:2a:f1:dc:
         6e:e4:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org