Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3233342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          fv6bA0SddVNv77iXJhxmdU6wbd9su5/gQfwkoGTQENw=
Subject key identifier:   98:58:84:5A:4A:50:AA:E3:43:6B:64:F0:A5:F7:36:65:5B:32:7A:41
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1A3D8817BCC3CD0D5381CD1B7F6C8CD7710EDA03
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233342e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:15 +0000
ROA not before:           Tue 02 Nov 2021 00:38:15 +0000
ROA not after:            Wed 02 Nov 2022 00:43:15 +0000
asID:                     17995
IP address blocks:        103.165.234.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3d:88:17:bc:c3:cd:0d:53:81:cd:1b:7f:6c:8c:d7:71:0e:da:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:15 2021 GMT
            Not After : Nov  2 00:43:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:75:17:b2:21:b5:c5:03:99:b0:a2:9f:bb:16:
                    ef:33:1e:71:97:30:b7:a6:53:c7:7f:f1:d6:2a:b4:
                    a9:7c:fa:dc:5e:f7:c7:86:16:be:2a:8c:67:9a:e5:
                    11:24:5e:06:13:45:cb:ec:62:d3:79:23:5e:e3:52:
                    b3:5d:5b:a6:17:e1:23:7d:38:f2:e2:38:ed:a3:22:
                    4f:c3:41:66:e4:ce:25:82:eb:9c:f9:c9:5a:e7:34:
                    98:ab:fa:0c:a5:a5:38:9a:94:59:ed:62:21:c9:13:
                    9e:d6:ef:33:1b:90:94:b8:c0:f7:e2:d5:c7:05:78:
                    0e:51:f9:10:e9:54:8f:c4:c8:1a:6f:80:fd:fb:18:
                    87:32:67:11:de:9c:5d:4f:ac:6e:fa:f6:cd:a2:cc:
                    70:5a:97:a8:80:83:7d:f2:41:8d:cb:80:33:73:47:
                    5d:ba:f7:87:87:35:21:95:6f:f0:6a:87:72:11:83:
                    ac:b2:e3:6d:c7:2c:65:92:fc:93:25:5d:46:03:fa:
                    eb:cc:9c:2d:e1:39:a0:51:6c:f2:70:42:d5:e0:be:
                    cc:c8:a2:8a:8c:58:8a:19:fa:ed:a0:29:2d:31:ec:
                    6d:e8:5f:fc:7e:61:d6:b5:65:f2:b5:85:27:ee:45:
                    61:d3:81:e2:5b:5d:29:3f:41:68:9f:e6:1e:80:01:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:58:84:5A:4A:50:AA:E3:43:6B:64:F0:A5:F7:36:65:5B:32:7A:41
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:b0:4c:82:d3:e8:d8:57:54:d4:dc:e0:82:48:f7:f1:01:
         0d:7c:d1:c7:77:a6:57:cd:06:54:f0:47:f8:e7:13:b7:29:a0:
         67:a9:b4:04:26:27:3f:20:1f:ec:e9:62:9b:c9:c0:3d:6c:fe:
         b7:8c:ed:af:8c:5a:8b:b9:57:d5:70:0e:4b:f6:b9:d7:b2:c9:
         c2:f9:e0:8a:b8:40:34:53:68:ca:a4:13:e3:c3:1b:02:14:19:
         7b:08:d8:68:7f:3b:c1:5b:c4:88:aa:64:51:50:88:8d:98:1f:
         ae:15:97:c9:bc:25:27:17:9e:be:36:eb:bf:52:c5:7b:5a:d3:
         ac:e2:8f:ad:3e:ff:06:18:eb:ae:e0:ea:06:5f:43:1d:89:c4:
         a4:7b:5f:25:32:1f:46:e1:b8:9b:cd:f3:71:98:30:c5:54:d1:
         f2:5f:b0:a6:82:91:95:83:ac:0b:2f:f6:92:68:c7:06:72:35:
         ef:00:b4:d3:da:6d:b8:b6:5b:34:0f:0a:64:6b:d9:3f:77:99:
         0a:f0:50:82:68:32:20:fa:0f:3f:d0:92:65:5d:43:71:96:3a:
         e3:ad:d9:14:47:8e:bb:80:45:6d:65:42:1d:45:ce:39:bf:83:
         ca:a1:73:ff:c1:e0:7d:47:ca:07:62:fe:2d:1c:6e:67:3d:4f:
         62:3f:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org