Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3232362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          VWmfAFmhSJpLf6DwmXVGaayRkQKb0mwZWbaRpj12E7o=
Subject key identifier:   57:33:6D:5B:7A:00:6F:E1:29:CC:2C:91:B3:EE:03:7C:2C:67:F5:E8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1E35E206F3B9B417029A20B51CA29A3599CF60C0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232362e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:14 +0000
ROA not before:           Tue 02 Nov 2021 00:38:14 +0000
ROA not after:            Wed 02 Nov 2022 00:43:14 +0000
asID:                     17995
IP address blocks:        103.165.226.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:35:e2:06:f3:b9:b4:17:02:9a:20:b5:1c:a2:9a:35:99:cf:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:14 2021 GMT
            Not After : Nov  2 00:43:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:0d:6f:a1:ab:77:7c:72:c9:10:5a:4e:9d:
                    f8:72:cf:06:4f:1d:fe:d1:b3:d3:f3:6e:95:e5:15:
                    f1:9f:f0:63:7c:29:a3:31:32:67:c9:d5:77:ed:55:
                    c4:94:f8:ac:05:30:f5:8f:b7:a2:d1:be:f8:89:93:
                    d8:80:c8:14:83:3f:86:07:01:f4:ae:d7:0c:30:54:
                    51:71:d5:52:5a:d2:df:a1:b6:f3:d2:00:59:83:91:
                    63:45:77:ca:70:90:48:68:5c:47:ed:b2:1e:34:d5:
                    39:16:ed:4d:3f:0a:c0:2e:0e:24:71:0a:60:3f:d4:
                    68:3d:32:02:61:54:77:a7:fa:4b:13:30:59:e4:03:
                    95:17:db:4e:03:19:76:76:c8:d1:dc:15:56:ee:bc:
                    e9:3a:62:67:62:c9:bc:47:3c:f1:fe:91:9d:96:db:
                    ed:14:33:b1:30:9a:da:49:53:14:3f:88:de:b8:59:
                    f8:ed:74:52:ab:ac:6c:68:1a:93:85:cc:86:f7:92:
                    8a:5a:65:82:b5:37:33:a9:7d:6f:05:0a:44:23:f2:
                    27:08:5c:d4:55:98:ae:e6:f0:4c:97:bb:e6:52:d7:
                    95:3e:a2:d6:2d:ca:93:8b:e0:8a:1e:7b:90:c0:da:
                    f8:3c:5f:34:09:46:80:ca:d0:9e:c8:e3:84:1b:51:
                    cd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:33:6D:5B:7A:00:6F:E1:29:CC:2C:91:B3:EE:03:7C:2C:67:F5:E8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:0e:71:c0:d2:9f:8b:33:ef:a4:ec:73:88:56:4d:b8:3e:6c:
         fc:90:de:a2:28:3e:15:bd:8c:41:2b:15:b4:11:c0:d0:af:ca:
         76:95:4a:1a:7a:46:d2:53:d4:ce:87:22:89:5a:46:fc:0c:aa:
         07:14:11:14:29:c9:62:e0:bc:4a:21:72:5e:ad:46:c4:a1:b4:
         f9:e7:89:b1:8c:fe:cb:ca:5a:35:a1:a7:fe:7d:b8:24:ff:5e:
         c1:65:64:7c:9d:2b:00:96:be:e9:8e:01:3f:94:5d:af:9f:37:
         5e:d2:4e:a9:c4:90:05:8a:cf:af:62:58:40:72:f9:d8:7e:42:
         56:69:70:1d:33:fe:8e:b4:e1:d4:d8:b7:57:9d:72:a6:bd:1c:
         d6:63:37:95:db:ab:d5:1f:d9:0c:09:31:0e:c2:e6:6c:98:0a:
         e2:bb:fe:15:62:24:a5:7e:cb:f1:b9:32:d9:e7:56:e7:d1:0c:
         05:ea:1c:74:06:9c:65:7d:46:24:e1:52:3a:17:46:ce:35:bb:
         a0:ca:66:f0:c8:1b:bf:a2:9b:f6:8b:a5:81:c9:a3:7f:1d:94:
         92:5d:0d:d5:38:6e:c9:3d:38:64:34:2f:33:98:20:8f:f2:04:
         21:8a:5c:cf:65:e3:c5:9d:55:4b:79:33:29:51:3d:53:a9:66:
         0f:41:1c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org