Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3233322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          AYtdAd3DuG84njxnXNLS83qtPTnEuZIkMD/PiEuFG8Y=
Subject key identifier:   B9:BA:C7:62:50:C1:75:71:50:E0:45:15:08:90:95:A0:9C:9C:45:C7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4CFB1643888B5BEEA7527A38C70A65C4F49795A4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233322e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:16 +0000
ROA not before:           Tue 02 Nov 2021 00:38:16 +0000
ROA not after:            Wed 02 Nov 2022 00:43:16 +0000
asID:                     17995
IP address blocks:        103.165.232.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fb:16:43:88:8b:5b:ee:a7:52:7a:38:c7:0a:65:c4:f4:97:95:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:16 2021 GMT
            Not After : Nov  2 00:43:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:26:12:10:f5:a7:57:84:9f:f2:c7:42:83:05:
                    18:3d:4e:a1:3b:77:83:5c:1a:10:3e:c3:24:a5:cf:
                    df:e1:7c:23:d1:b5:f2:1e:5e:63:10:b5:41:db:c0:
                    09:cc:02:2e:85:d6:4f:c6:1a:16:17:94:29:2f:cf:
                    0e:e8:f0:1d:bb:19:a4:dd:ff:ee:74:00:ac:a7:bd:
                    2b:c9:99:54:bf:9d:24:3c:fa:0a:e7:47:90:79:03:
                    c8:03:b4:d1:ce:c5:c3:c5:9e:29:16:56:04:88:a0:
                    c8:ab:fa:13:a6:8c:46:4a:1c:cc:92:4b:08:10:08:
                    31:5b:3c:f4:1f:d2:27:da:1f:ec:10:42:9d:77:e0:
                    03:ed:5c:68:88:23:06:6b:e0:fc:1e:31:31:22:24:
                    62:a9:90:09:57:4a:e6:9f:74:30:42:ec:55:dc:9f:
                    a3:e4:89:83:7e:3c:9b:80:5f:aa:8a:15:8b:a2:6a:
                    b5:97:9f:23:ea:da:6c:9b:f2:dc:f4:04:49:d0:5c:
                    62:d7:16:c4:53:19:42:29:6d:20:39:d2:9d:97:c9:
                    70:6a:e7:f8:ad:c4:fd:1f:4a:c8:a0:6c:9b:1f:6c:
                    8d:7b:a5:32:65:51:9a:88:e0:b1:41:ec:b6:4f:98:
                    ed:f5:86:c3:75:23:bb:3b:7d:71:0b:0e:81:7f:c7:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BA:C7:62:50:C1:75:71:50:E0:45:15:08:90:95:A0:9C:9C:45:C7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:f3:e3:ad:90:d9:64:3f:91:72:50:2a:d5:6e:e6:47:08:87:
         50:06:ba:d7:aa:94:74:47:04:4b:fc:64:b5:0b:76:bc:ac:a5:
         3e:5c:55:1f:60:c9:ed:54:e1:50:34:4c:e1:58:38:bd:91:41:
         35:ea:4c:52:d8:6c:3f:c8:2e:f7:47:f4:b4:56:36:46:7b:cf:
         5e:4d:55:62:46:b4:73:08:bf:4a:ca:c1:ee:82:e5:0f:57:dd:
         05:59:7c:e1:29:9b:b2:d8:3d:03:c2:35:b3:fa:e6:c9:85:fb:
         60:f0:bc:84:73:9d:fe:e1:1d:48:e4:41:25:77:a3:c2:86:e5:
         2d:c1:fa:0a:98:9b:df:a1:67:d6:a5:f5:de:2c:ce:43:5f:d6:
         9f:43:e4:7d:f0:02:48:6b:53:37:5d:56:f4:f2:4e:a9:ab:db:
         ea:ac:36:09:8f:0d:95:34:a8:64:c1:9d:cf:80:0d:13:29:35:
         1c:34:f3:58:4b:51:05:ea:2d:dc:e7:65:1d:84:e2:a6:9c:39:
         50:4c:a0:02:b2:6d:33:89:99:d9:bc:8a:74:0f:d3:a4:d1:c4:
         fd:bc:06:e9:56:c1:75:8c:c3:85:d7:8f:c5:95:2f:23:ee:2b:
         47:cb:29:1f:45:b4:75:6e:18:c6:e3:b6:c5:6e:d6:b0:ac:45:
         f0:e1:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org