Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa
File:                     3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (raw, json)
Hash identifier:          tFKjkWfu7UNmQeMZBw73/y7nNEWM70cQUri22+EFJP4=
Subject key identifier:   83:67:96:55:71:E5:FB:41:01:FE:61:F0:61:0A:88:D4:11:61:C8:E6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6DB2E7C4D5C9CC41114100B063B62DAC69DA80FF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa
Signing time:             Fri 02 Jul 2021 06:21:04 +0000
ROA not before:           Fri 02 Jul 2021 06:16:04 +0000
ROA not after:            Sat 02 Jul 2022 06:21:04 +0000
asID:                     141939
IP address blocks:        103.164.192.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b2:e7:c4:d5:c9:cc:41:11:41:00:b0:63:b6:2d:ac:69:da:80:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  2 06:16:04 2021 GMT
            Not After : Jul  2 06:21:04 2022 GMT
        Subject: CN=3082010A0282010100A1B05AD797C69D7308F86C1216C67F4DD11CD712306CD85B3AF33BA2370C7F6F3F448123FF04CD53CE6DF6493B0CFC8914F1124AA7997C0CDAC492D1245999ED6F119CBCD4D77DB6E45F96851D25AB59CCDD580BAEA94A10230E69428A1EAC3F4D344D59E663781E78AC3F342D2C057394F5C94F11D6C8292D21A3F28E4C45D9A4EC9555D9B170D34DDC48D16F9CB998B766A898576C9B3D4440A9DF4BD7207D7400C5D863CCBEA60EA32F357B6D656A7663D55770611CA0B5280EDB824614A41D13A73DA442917DC9B9D96EBFEED2EF01506F4A0D3098B10FF77A35EFA72A9DB073329AAC96F645F8058C8455406BD5E5299BB22650AF195A47FF9069ED99FF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:5a:d7:97:c6:9d:73:08:f8:6c:12:16:c6:
                    7f:4d:d1:1c:d7:12:30:6c:d8:5b:3a:f3:3b:a2:37:
                    0c:7f:6f:3f:44:81:23:ff:04:cd:53:ce:6d:f6:49:
                    3b:0c:fc:89:14:f1:12:4a:a7:99:7c:0c:da:c4:92:
                    d1:24:59:99:ed:6f:11:9c:bc:d4:d7:7d:b6:e4:5f:
                    96:85:1d:25:ab:59:cc:dd:58:0b:ae:a9:4a:10:23:
                    0e:69:42:8a:1e:ac:3f:4d:34:4d:59:e6:63:78:1e:
                    78:ac:3f:34:2d:2c:05:73:94:f5:c9:4f:11:d6:c8:
                    29:2d:21:a3:f2:8e:4c:45:d9:a4:ec:95:55:d9:b1:
                    70:d3:4d:dc:48:d1:6f:9c:b9:98:b7:66:a8:98:57:
                    6c:9b:3d:44:40:a9:df:4b:d7:20:7d:74:00:c5:d8:
                    63:cc:be:a6:0e:a3:2f:35:7b:6d:65:6a:76:63:d5:
                    57:70:61:1c:a0:b5:28:0e:db:82:46:14:a4:1d:13:
                    a7:3d:a4:42:91:7d:c9:b9:d9:6e:bf:ee:d2:ef:01:
                    50:6f:4a:0d:30:98:b1:0f:f7:7a:35:ef:a7:2a:9d:
                    b0:73:32:9a:ac:96:f6:45:f8:05:8c:84:55:40:6b:
                    d5:e5:29:9b:b2:26:50:af:19:5a:47:ff:90:69:ed:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:67:96:55:71:E5:FB:41:01:FE:61:F0:61:0A:88:D4:11:61:C8:E6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:c1:e9:e6:2c:03:90:e2:e3:6b:88:2c:7f:07:9a:60:24:89:
         16:42:16:94:ba:9e:c7:f9:fa:42:d2:ea:e3:fe:52:94:3e:06:
         fd:99:e9:be:56:8c:b6:e2:06:41:cc:26:a8:b1:00:e4:31:f2:
         ee:5a:8b:b7:30:71:72:03:1c:6b:25:6c:59:b2:34:0e:4f:33:
         ff:95:85:1a:69:e7:66:d3:45:10:df:c4:66:1a:c9:af:65:4d:
         03:ec:79:23:d6:ac:14:c0:1d:42:23:1e:03:79:44:40:12:b1:
         a9:fd:57:c6:d6:b9:45:6b:06:cd:9b:3e:89:57:b7:69:fb:28:
         9a:34:5d:e6:20:d9:18:e3:db:2f:17:c3:75:4f:b3:45:4b:d5:
         ee:13:20:28:23:93:e4:f6:8a:4a:b2:81:4c:58:36:05:ac:b2:
         c9:c3:20:3b:19:22:cd:05:ac:f7:4d:f6:df:f6:8c:10:fd:f8:
         65:90:1c:99:9f:59:53:4e:3e:65:cb:85:c5:72:8a:1c:37:12:
         23:94:63:4a:70:00:9d:f8:4b:4c:8a:ed:6d:1a:bf:b5:c4:93:
         63:9c:85:77:20:d4:a6:5f:f3:37:b9:b4:e6:ae:e4:1f:2b:33:
         b8:66:bb:3f:75:38:23:68:e1:f8:7e:a5:e5:0f:6e:d2:f9:c5:
         97:24:e1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org