Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3139302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3139302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          A+EbQ+iCEYt0XeHcG/0FNrsVVtqPVHMPUYcVtVwyCKA=
Subject key identifier:   AF:A5:98:F8:24:01:DC:03:6B:F1:B0:CC:F3:67:5C:09:9B:BC:4E:CD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6EEF0F55A05956FB16B0C97EA97D2597D6BCC4AC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3139302e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:14 +0000
ROA not before:           Tue 02 Nov 2021 00:38:14 +0000
ROA not after:            Wed 02 Nov 2022 00:43:14 +0000
asID:                     17995
IP address blocks:        103.164.190.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ef:0f:55:a0:59:56:fb:16:b0:c9:7e:a9:7d:25:97:d6:bc:c4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:14 2021 GMT
            Not After : Nov  2 00:43:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:6a:34:ad:b2:8a:56:98:a0:9f:84:a9:0f:
                    5d:ef:bb:a6:60:5d:65:ac:8b:38:2b:3f:08:68:b1:
                    ee:dd:20:c4:d4:a0:ef:d3:a6:5d:58:93:da:a7:20:
                    37:5c:0a:ee:74:22:f5:ac:7a:ce:60:8b:f7:7c:c0:
                    67:30:5d:1b:c8:b7:92:8c:34:3e:20:db:e9:61:85:
                    66:38:f5:c6:7c:06:91:27:82:74:25:7a:10:49:cb:
                    54:78:70:80:7c:e0:bc:2b:03:43:7e:c9:70:5d:5d:
                    ac:1c:23:49:6b:d4:45:5e:82:f1:4d:9f:82:3a:89:
                    93:dd:79:6f:1c:55:49:21:11:97:5f:44:51:05:a3:
                    68:a0:cf:f2:d4:e7:58:e3:4c:36:f0:1a:ee:09:36:
                    87:b3:d2:7a:e4:89:b8:7d:27:6c:62:a1:25:5e:98:
                    e8:50:7c:db:91:6d:82:8b:2d:66:5e:11:f2:ec:29:
                    1d:2d:06:94:35:70:f9:5b:10:2a:c0:c7:69:4b:11:
                    60:4b:69:10:ef:a7:5d:53:65:61:1e:e1:f5:f7:05:
                    b5:49:14:d7:e7:59:77:3b:6d:74:21:7d:ba:b9:4e:
                    88:f6:a6:0c:d8:db:ce:a9:e8:13:d9:c9:3f:71:99:
                    66:15:12:b4:5f:18:97:1a:a2:1f:17:2b:b3:83:c0:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A5:98:F8:24:01:DC:03:6B:F1:B0:CC:F3:67:5C:09:9B:BC:4E:CD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3139302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:e7:c7:e6:fc:ac:8c:8d:81:de:6c:06:65:d5:d8:28:db:10:
         d3:12:f8:7a:eb:2f:69:e9:9d:12:75:c5:3d:44:df:c6:e3:1a:
         ce:b9:cf:42:12:ee:65:ec:b8:cf:88:71:cc:79:39:79:f9:f8:
         46:4a:d6:28:a1:87:10:f7:02:78:76:9e:c9:22:f9:c4:c3:de:
         6a:db:30:4c:4e:4f:f8:01:93:8f:3f:c5:ed:a9:b0:94:a8:ee:
         ec:78:91:53:6c:8e:be:37:74:59:75:ca:2c:89:18:9c:27:11:
         36:80:0a:b6:fd:3c:e8:ba:94:47:55:59:4f:80:d8:23:59:48:
         a1:aa:10:91:50:69:3e:ed:67:00:04:b2:45:f8:a0:f4:f3:33:
         44:13:5e:70:c5:c9:a9:39:21:b9:5d:3f:60:26:2d:49:46:67:
         0d:f3:cd:a2:ce:eb:bf:25:ef:3e:c2:c8:30:6a:8a:d3:51:31:
         67:c4:86:8a:ad:27:a1:12:07:85:55:1a:ae:5a:2a:53:89:6d:
         e2:d5:e0:30:8f:ec:b2:35:38:86:e8:58:76:4e:83:09:50:3e:
         21:77:5e:74:65:3c:12:95:fb:76:61:5f:49:05:c1:64:73:94:
         3b:69:2c:82:ed:ef:47:f3:09:c0:68:69:69:9b:05:9e:91:96:
         5d:cf:05:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org