Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e33362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          ezviMIYo+JZ0kCOhGU201bkbbFs1/n4IVYysWZxhuq4=
Subject key identifier:   1C:83:04:D5:0F:FE:6A:62:FC:BE:9E:B8:81:BE:9C:FF:A4:5B:44:4B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3C691DF925DD4192C53C3829DA5AF1A735C5B256
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33362e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:19 +0000
ROA not before:           Tue 02 Nov 2021 00:38:19 +0000
ROA not after:            Wed 02 Nov 2022 00:43:19 +0000
asID:                     17995
IP address blocks:        103.165.36.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:69:1d:f9:25:dd:41:92:c5:3c:38:29:da:5a:f1:a7:35:c5:b2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:19 2021 GMT
            Not After : Nov  2 00:43:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:a2:5c:1f:66:0b:30:30:a5:d7:8d:37:ca:
                    f1:1c:91:3e:c1:60:f0:3f:e9:26:6c:42:80:f7:42:
                    05:80:85:79:99:c5:bb:ee:69:8e:8e:8e:b3:7e:d6:
                    60:0d:d2:92:e2:e2:aa:da:7c:77:69:56:ef:d3:28:
                    a1:9f:7b:91:ae:4d:44:c8:2f:1c:55:9e:d4:a1:f4:
                    01:09:fb:4f:69:05:97:2f:14:cf:17:5f:f7:1f:7d:
                    2b:4a:16:7c:8c:4d:6c:25:05:5a:68:a4:33:fd:0a:
                    c1:ca:f5:b5:c3:b8:2e:d7:0d:3c:c5:bc:18:e3:ee:
                    4b:e6:53:03:e6:d1:4c:34:bd:af:01:9d:60:02:eb:
                    eb:54:af:d0:c4:93:50:0a:15:fb:0f:8f:fa:26:9a:
                    38:b3:7d:55:08:d7:b5:07:14:9b:a5:54:51:28:1c:
                    f2:44:7e:76:1b:28:64:74:4a:dc:61:01:c3:92:da:
                    3f:a9:d4:ac:c6:0d:71:76:6f:f7:eb:9f:91:34:fb:
                    9c:35:41:a0:7a:56:80:ac:61:0b:1f:fb:84:4a:38:
                    11:27:6e:54:42:b5:f1:dc:42:b5:26:d0:4e:8f:5c:
                    5d:03:80:75:db:4a:58:32:36:b7:dc:73:e4:71:af:
                    d3:f3:55:94:44:ce:76:c6:e4:03:eb:16:61:04:32:
                    2d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:83:04:D5:0F:FE:6A:62:FC:BE:9E:B8:81:BE:9C:FF:A4:5B:44:4B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:20:67:a3:9e:13:d4:b0:16:18:ea:a7:70:5e:22:8e:b5:53:
         45:89:81:1c:28:a3:6b:25:ed:c7:34:45:fd:ba:02:32:49:1a:
         62:d6:6d:13:8c:f4:22:a4:e7:0f:6a:c3:5b:e4:f4:bd:b3:58:
         d2:0f:14:c8:b9:ae:8d:60:d9:eb:00:07:00:ff:8d:0f:b9:eb:
         15:60:81:3f:8a:65:4f:b7:1d:a7:f5:4f:75:d1:cb:f6:17:71:
         a7:52:28:bc:f9:11:14:e8:3d:73:cf:65:81:ae:cb:97:ef:50:
         70:07:81:85:3c:91:7d:6e:35:80:fb:61:75:74:8a:12:5e:62:
         0f:f3:e0:9b:cd:8f:e5:00:31:ae:b0:2a:0e:96:0b:b3:c8:a3:
         f3:1b:e7:0f:ab:75:35:f2:c9:dd:d3:a0:bf:7b:ba:0f:50:41:
         8e:bc:8c:f3:fc:41:d3:18:19:0c:9a:71:3d:9c:f5:b2:08:fb:
         4b:8e:84:5f:7d:ce:39:b3:d8:71:7f:72:99:5a:05:0c:7f:01:
         be:3a:96:0b:90:82:df:3c:a5:dd:ed:23:e5:e6:af:19:54:e1:
         bd:70:d4:7c:3c:8c:da:34:d9:e3:16:c0:9e:df:70:a5:b2:49:
         45:ab:04:1d:de:9b:0e:5c:02:6a:eb:bf:ca:00:34:e1:db:08:
         46:7f:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org