Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3132382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3132382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          BV48KYYdaA5ohCykoqRBxZ5Ns/TL8Dv+jjEb69kTfgM=
Subject key identifier:   9B:69:19:08:4E:39:C9:BE:22:07:9C:CE:C4:DA:06:4A:A4:38:75:DC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       719D6A880348DDD92D22FA68233C264463D99718
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3132382e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:12 +0000
ROA not before:           Tue 02 Nov 2021 00:38:12 +0000
ROA not after:            Wed 02 Nov 2022 00:43:12 +0000
asID:                     17995
IP address blocks:        103.165.128.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9d:6a:88:03:48:dd:d9:2d:22:fa:68:23:3c:26:44:63:d9:97:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:12 2021 GMT
            Not After : Nov  2 00:43:12 2022 GMT
        Subject: CN=3082010A0282010100AB87DDFB601BF4CBA9127770789DBC9AE341DBA5341D40B656038F239733798D57B48559496E867F67543FD68B271D7019F4435449E1E6066C5502F7E07BF372017983F308B5813A24653CC636F3856BB1CA7FFD28B0DBBBFE6F4696BE0CBB712182A096AF23C87C237D08ACD210CB601E332709546ECC1699B2A4AB9AEDD9146F51F3BD50EAFA61350452D4177AA4C07C62F025EEC37C3670423D7651F34B1EB51F216E7D5E65BCC3570B097362DEB533161A799C0FD701DCA036C85E7AAEF48696A6409F0398FDC29C663A611475CB4C20A4C547A532C72F95DCF2428E9B5AACFA02FF2F848C69F2AED95E6339A3E93F46B72C70BB71BEDA9B777541BCEF4B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:dd:fb:60:1b:f4:cb:a9:12:77:70:78:9d:
                    bc:9a:e3:41:db:a5:34:1d:40:b6:56:03:8f:23:97:
                    33:79:8d:57:b4:85:59:49:6e:86:7f:67:54:3f:d6:
                    8b:27:1d:70:19:f4:43:54:49:e1:e6:06:6c:55:02:
                    f7:e0:7b:f3:72:01:79:83:f3:08:b5:81:3a:24:65:
                    3c:c6:36:f3:85:6b:b1:ca:7f:fd:28:b0:db:bb:fe:
                    6f:46:96:be:0c:bb:71:21:82:a0:96:af:23:c8:7c:
                    23:7d:08:ac:d2:10:cb:60:1e:33:27:09:54:6e:cc:
                    16:99:b2:a4:ab:9a:ed:d9:14:6f:51:f3:bd:50:ea:
                    fa:61:35:04:52:d4:17:7a:a4:c0:7c:62:f0:25:ee:
                    c3:7c:36:70:42:3d:76:51:f3:4b:1e:b5:1f:21:6e:
                    7d:5e:65:bc:c3:57:0b:09:73:62:de:b5:33:16:1a:
                    79:9c:0f:d7:01:dc:a0:36:c8:5e:7a:ae:f4:86:96:
                    a6:40:9f:03:98:fd:c2:9c:66:3a:61:14:75:cb:4c:
                    20:a4:c5:47:a5:32:c7:2f:95:dc:f2:42:8e:9b:5a:
                    ac:fa:02:ff:2f:84:8c:69:f2:ae:d9:5e:63:39:a3:
                    e9:3f:46:b7:2c:70:bb:71:be:da:9b:77:75:41:bc:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:69:19:08:4E:39:C9:BE:22:07:9C:CE:C4:DA:06:4A:A4:38:75:DC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3132382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:50:1a:94:1f:b6:c7:61:6d:b6:fd:dd:25:53:e5:e9:78:0a:
         2b:00:75:9e:ef:19:3e:62:c8:00:28:d5:55:76:8f:b3:6d:bb:
         1b:58:28:df:ae:cd:a2:1f:77:92:cf:6e:87:87:0a:3f:01:55:
         ec:01:28:41:0f:50:e7:a3:7c:d6:38:eb:a9:03:5a:27:51:a3:
         50:e7:c2:cb:0f:4b:37:7d:11:3a:38:c5:7f:a6:87:8c:14:1c:
         a5:f4:d8:9c:c8:13:8c:8d:d6:44:d4:da:4c:b4:37:04:b5:89:
         ed:97:c9:ce:1c:ed:49:21:4c:90:35:b5:76:58:6a:8b:61:37:
         24:d0:5f:2e:4f:6a:be:a8:72:44:21:b2:7d:86:f9:e2:19:58:
         67:35:fc:e9:4a:b0:fd:db:2a:06:39:e4:90:93:7f:9b:3b:25:
         4c:7e:fa:01:ca:7b:fe:14:91:c4:33:0d:08:c7:52:c8:af:c6:
         2c:09:5e:77:76:bb:4b:7f:26:88:ce:8e:27:c0:5f:2b:61:c1:
         21:01:c2:d6:1c:26:93:56:d9:7e:05:ad:85:86:48:52:b7:ca:
         df:41:3b:5c:87:44:5e:d7:5c:be:45:e5:78:1f:fe:32:46:b2:
         b7:bc:a6:4a:5a:57:a0:4f:a8:2c:7c:65:af:f6:0e:27:0c:91:
         fe:b0:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org