Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e33382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          xJRV7JbaehvFCEf6T5hTyiFhLMvKmRXZmh6Ob1aXbho=
Subject key identifier:   5C:8D:04:72:1F:2B:2B:C5:B6:F0:07:6D:74:D1:95:AB:F5:9E:91:AE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       03EF1F8B3B5A6D62C26137B8A333FA6C68E68C70
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33382e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:16 +0000
ROA not before:           Tue 02 Nov 2021 00:38:16 +0000
ROA not after:            Wed 02 Nov 2022 00:43:16 +0000
asID:                     17995
IP address blocks:        103.165.38.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ef:1f:8b:3b:5a:6d:62:c2:61:37:b8:a3:33:fa:6c:68:e6:8c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:16 2021 GMT
            Not After : Nov  2 00:43:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:97:d9:2e:ab:95:8d:48:5a:03:df:91:ca:
                    01:ac:1f:5b:9c:c5:fa:9d:51:4c:71:03:bc:b9:ee:
                    da:38:2a:40:d5:88:f0:5e:f6:29:64:49:1b:73:04:
                    f4:93:84:69:59:4f:a5:bc:76:4d:ef:6f:64:c2:0a:
                    d1:8c:cf:e0:a3:e2:29:86:30:27:38:75:a8:5b:8c:
                    4e:2d:7a:d6:ca:2e:97:b8:5e:0f:a4:a0:86:16:01:
                    62:07:66:87:6b:ec:b7:f8:ce:75:0b:09:b4:55:40:
                    dd:d7:34:c7:98:c6:92:27:fa:79:4e:05:71:7d:8a:
                    d8:5d:e6:64:42:a9:bf:b8:08:68:b0:8e:e9:b3:7e:
                    72:cd:df:85:af:48:e2:86:f8:a8:62:0b:13:e6:e8:
                    17:a1:4c:74:7e:16:0b:f7:8c:7f:25:ee:ff:5c:0a:
                    e4:c0:7f:7b:f3:1f:d2:7e:71:30:7a:7d:55:32:d6:
                    e4:fa:e7:2c:46:d4:2f:37:f7:25:76:f2:6b:4c:2c:
                    67:79:71:56:b2:0c:db:ea:4c:d9:a6:17:6a:34:1a:
                    f6:ee:c3:be:fb:c8:23:fb:53:a1:5c:66:94:2c:03:
                    e7:46:1e:be:a7:33:a8:32:1c:67:1e:f1:17:3b:1c:
                    4c:ac:b6:b9:da:a1:21:1e:ba:39:8f:b7:90:e0:91:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8D:04:72:1F:2B:2B:C5:B6:F0:07:6D:74:D1:95:AB:F5:9E:91:AE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:26:a7:ec:a3:4b:e8:52:da:4b:65:e2:da:da:83:01:54:5f:
         e8:41:39:4b:51:14:72:23:60:d3:0e:96:49:a4:a4:ad:05:98:
         f6:6f:9d:45:18:93:03:45:12:ee:65:3b:9d:38:48:d4:1e:e3:
         bd:39:10:e1:85:15:91:c4:ed:9d:76:ee:9c:42:50:9f:38:3b:
         4a:48:df:98:c1:59:aa:b7:dc:8a:1c:d2:4b:13:fe:0f:e9:3a:
         8c:a5:05:93:47:61:8f:f1:93:43:06:4f:60:28:b7:a4:28:ea:
         c4:79:20:50:51:7a:1f:d8:21:9d:a4:d7:2a:d3:ff:41:55:40:
         2b:23:e4:c7:a5:4c:c6:d4:6e:60:57:d7:2e:8c:8f:e4:cc:2b:
         51:7c:93:1e:50:66:25:d8:0e:f5:9e:00:9d:b9:3a:9b:3b:8c:
         6c:50:25:47:03:bf:60:2b:d5:39:7d:8b:a2:cd:cb:27:f5:f1:
         61:53:ab:4b:17:d0:4d:77:b6:94:42:34:d9:31:7e:b0:d2:72:
         5c:d5:6c:b2:aa:c7:4f:0d:cf:e7:f2:91:b7:b4:6e:c9:06:3a:
         71:26:4a:53:30:f2:f7:20:fb:45:9c:44:2d:3c:48:42:6d:ef:
         58:a4:46:4f:a3:5b:5f:06:3f:b5:4c:32:dc:8b:ed:14:3f:c2:
         2d:21:d6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org