Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3139362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3139362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          /x35yrvZNoTNxXZa3HfR1toOmr5wl8QdqTTP+VJCSNY=
Subject key identifier:   14:09:6E:F8:81:4D:FF:C6:59:70:69:1A:00:25:63:9E:B9:98:88:84
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       26DB90F411686C2A8DA12D23545C3566B73BD0A1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3139362e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:18 +0000
ROA not before:           Tue 02 Nov 2021 00:38:18 +0000
ROA not after:            Wed 02 Nov 2022 00:43:18 +0000
asID:                     17995
IP address blocks:        103.165.196.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:db:90:f4:11:68:6c:2a:8d:a1:2d:23:54:5c:35:66:b7:3b:d0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:18 2021 GMT
            Not After : Nov  2 00:43:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1f:03:e1:18:22:d2:54:0b:f9:4e:7e:2e:f1:
                    91:ae:ee:eb:50:5d:f5:28:fb:67:1c:cc:81:f7:e4:
                    1d:69:7d:45:1d:2b:76:86:82:0f:dc:da:a4:76:c1:
                    c9:fb:5b:3e:6e:8f:68:2a:6b:50:37:22:45:e2:f4:
                    a4:42:2e:b3:8b:b5:21:4d:ba:5d:56:c8:eb:e9:72:
                    2b:44:6e:c5:de:78:90:d1:ef:de:ab:e7:b3:62:3a:
                    e9:b0:3b:a9:ad:68:28:6e:bb:2b:14:8d:68:cf:4d:
                    5b:17:3f:45:e9:26:28:c8:d4:13:71:fb:56:fa:71:
                    42:89:0e:50:16:40:d3:e8:87:a3:49:47:bf:75:a8:
                    b4:be:ef:21:25:bb:14:eb:bb:a3:da:4f:1a:ea:46:
                    11:8a:39:3b:5c:47:0b:ea:da:be:1c:d4:47:bc:00:
                    d3:d0:e7:21:f5:5a:0c:fd:21:b1:76:1c:5b:69:07:
                    25:dc:3b:d8:ff:29:72:6e:5a:e9:cf:f3:b4:c4:d8:
                    bd:c8:28:02:6e:02:35:42:4b:68:2a:98:47:a4:e0:
                    65:5d:c3:8c:03:03:42:4d:89:ec:09:29:66:28:d1:
                    74:5c:e7:f7:46:1c:95:38:2d:c9:76:79:19:c6:64:
                    aa:14:25:d4:df:98:d9:92:39:2c:c6:06:74:bc:e9:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:09:6E:F8:81:4D:FF:C6:59:70:69:1A:00:25:63:9E:B9:98:88:84
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3139362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:b5:fb:b2:5e:72:bf:30:06:7b:a9:d5:4d:0d:49:a1:3b:
         ed:ef:a5:23:1b:f5:0f:f1:88:07:b3:39:a3:4e:0a:ed:9a:d2:
         e3:b7:3b:59:31:71:a0:c3:b4:0f:64:22:d7:c3:31:19:3e:10:
         44:83:07:7b:f5:29:08:e4:75:5d:4b:cf:06:7c:e2:e1:fe:a3:
         e5:76:9f:7e:47:f6:4a:e1:8d:3c:c9:f0:e9:40:01:b8:f7:f5:
         51:86:6e:87:7e:0f:82:1e:78:5c:5c:60:95:93:8e:3d:4c:ca:
         da:3b:23:d3:15:da:ea:60:6b:67:c7:3e:9d:75:b1:ff:ea:8b:
         1c:c8:b8:41:30:44:e8:d5:7c:e4:57:71:9a:b5:8e:8a:f1:5b:
         95:2a:1b:8f:85:be:1c:d3:36:7c:d0:87:05:78:37:5c:97:51:
         42:d5:20:4b:f9:08:b5:c6:17:d8:b0:9b:38:8a:30:7e:2b:07:
         56:f3:9c:ca:d4:a8:c8:db:ff:78:57:ba:2f:d9:8e:b3:b1:bb:
         89:d2:13:59:0a:63:3f:c1:dc:40:17:bd:76:05:44:3e:7f:0f:
         3b:3a:79:30:08:b2:3b:99:4f:89:02:d5:e8:1c:be:f8:65:1c:
         59:09:55:84:bb:de:5e:93:82:65:41:44:71:a4:04:44:54:5c:
         31:a6:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org