Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          L4qXNwj1sNLeTUAgJ4bEHJzKdPk0bQjbW+AetaW7eTM=
Subject key identifier:   90:1A:D8:B7:27:2C:0A:B0:27:D0:DC:8C:1A:C8:D1:48:98:A1:23:AB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1C0BDACB62800CEEB43CF7E9F00A0081E3060315
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa
Signing time:             Thu 03 Mar 2022 04:00:06 +0000
ROA not before:           Thu 03 Mar 2022 03:55:06 +0000
ROA not after:            Fri 03 Mar 2023 04:00:06 +0000
asID:                     138131
IP address blocks:        103.164.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0b:da:cb:62:80:0c:ee:b4:3c:f7:e9:f0:0a:00:81:e3:06:03:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 03:55:06 2022 GMT
            Not After : Mar  3 04:00:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:2c:61:b2:7a:85:98:d6:87:2f:a8:70:d3:
                    7c:d4:e9:31:ad:9c:5d:79:27:f7:c1:17:e2:08:ac:
                    e6:0c:8d:9d:87:3e:e1:7b:92:16:9f:9d:e1:50:80:
                    20:f2:ef:a3:9e:03:4a:e0:46:8f:fe:3b:0e:c0:ff:
                    9e:88:b7:a4:ad:78:ca:66:ac:a4:4d:3d:eb:56:73:
                    b9:15:bf:78:7d:b0:af:43:58:3c:31:6d:cf:27:d7:
                    e6:8f:a7:0e:c5:fb:53:5b:29:fc:49:d5:37:9e:cc:
                    06:12:9f:66:e8:5f:09:4a:41:e5:ef:b4:e5:6d:11:
                    56:03:7b:58:e7:57:8a:f6:60:d8:2e:9a:de:04:d0:
                    f6:a3:b3:3a:0f:46:d0:d7:ad:bc:73:21:a3:df:17:
                    e3:22:c2:3e:36:4f:ae:19:31:52:b7:47:95:96:9e:
                    f8:94:e7:1c:b5:5a:f9:8f:4e:5b:5a:d6:e8:8e:6c:
                    25:87:ea:b1:ee:3c:be:05:e0:1c:28:a6:9f:7b:7f:
                    0e:d7:a7:c0:f9:27:ed:ba:7f:1f:6d:9a:3f:d1:25:
                    b7:92:2c:fc:e2:cb:e4:32:cd:fe:8f:ad:73:e5:e2:
                    11:97:94:f9:ac:c7:e6:f2:92:35:ae:73:56:ff:0b:
                    fa:65:48:e8:ef:86:8f:a0:fb:27:83:b3:7f:98:01:
                    e0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1A:D8:B7:27:2C:0A:B0:27:D0:DC:8C:1A:C8:D1:48:98:A1:23:AB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:5b:17:98:86:40:ee:1c:6c:42:a3:da:83:99:3a:fd:d7:
         b3:3a:0b:66:c2:86:7b:53:59:ac:34:3a:85:82:ac:0b:52:34:
         13:dc:21:8e:0e:06:52:55:a3:09:34:c9:49:79:87:4d:18:30:
         31:4a:9f:08:69:7c:4f:9b:19:20:83:79:09:b9:e2:b8:1d:e3:
         2c:55:b2:df:c3:f0:fd:d2:5b:70:c6:d5:de:a4:a8:5a:47:c2:
         f6:3b:a2:3a:f2:a9:63:f8:6a:a8:86:fd:ca:b7:37:57:76:ac:
         dd:d6:51:4a:b5:84:b4:e2:c0:bb:e3:56:6c:b1:87:4a:d4:ca:
         2d:47:26:75:3c:11:86:c1:6d:f4:44:fd:25:fc:5f:19:22:bc:
         84:28:6b:f3:97:b7:50:bc:29:de:a7:9a:e5:7b:c8:63:93:14:
         0b:ef:a4:ee:48:52:5e:ba:e2:1d:24:54:68:bb:cf:0c:a2:d9:
         40:79:62:09:48:1c:57:07:81:b9:37:ef:46:e4:98:ef:4a:aa:
         f5:b9:bc:b8:3f:6e:fc:3c:25:61:70:9b:e4:8b:09:46:44:a3:
         59:82:e3:ca:2b:77:43:29:bc:59:71:16:f8:aa:ce:cd:09:13:
         5d:d7:7d:c9:b4:5f:91:c2:f8:39:8f:1e:42:cb:f0:d5:64:32:
         c1:ec:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org