Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e36302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e36302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          tFgDSrZfoeqCptOfEZ609yX+3IApgy3YgT4Z+ZfkwPk=
Subject key identifier:   E2:8F:2F:84:D2:ED:2A:92:54:41:E8:0E:7E:B7:50:84:44:E4:70:E2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       67A34983A9D44EEF57D8CB56B76BCC2804B4FB88
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e36302e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:16 +0000
ROA not before:           Tue 02 Nov 2021 00:38:16 +0000
ROA not after:            Wed 02 Nov 2022 00:43:16 +0000
asID:                     17995
IP address blocks:        103.165.60.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a3:49:83:a9:d4:4e:ef:57:d8:cb:56:b7:6b:cc:28:04:b4:fb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:16 2021 GMT
            Not After : Nov  2 00:43:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:ba:04:9d:dd:b8:47:8f:38:4d:a0:1d:ee:
                    56:44:6c:29:50:9e:41:96:06:6d:10:a9:bd:64:1b:
                    92:d2:38:47:d2:58:92:37:47:ef:e9:a3:b8:75:29:
                    c4:f4:3b:6c:86:dc:89:86:d7:ce:ec:7d:7c:da:5a:
                    2e:93:15:aa:5b:9f:1a:52:8a:df:4a:c1:d6:eb:cf:
                    18:ac:a4:62:98:4a:b9:a6:e5:c3:6b:72:bb:9f:f8:
                    fa:56:2c:6d:eb:ef:a3:8d:d9:3a:7b:54:fb:3f:87:
                    44:99:a3:30:79:44:af:46:7f:09:53:40:4f:3a:21:
                    aa:3b:23:13:b4:87:81:67:19:3c:cf:28:a7:88:b7:
                    e8:42:84:d4:5a:32:45:7e:6c:3f:1b:cf:28:17:97:
                    c9:41:4a:aa:55:50:72:46:e4:1c:aa:d8:bf:3f:37:
                    f6:70:cc:06:4b:fa:66:99:83:dc:bb:58:b4:e5:4e:
                    de:7b:a1:f3:c3:ef:c2:60:5b:35:58:05:06:b5:31:
                    9a:c1:38:12:d8:e3:bd:f7:e5:b4:58:bf:bd:33:96:
                    b3:51:73:d3:03:9f:e3:25:64:bc:6d:12:8c:a6:98:
                    80:7c:4a:5e:dc:6d:c9:7a:e0:3f:1f:d2:b6:ff:8d:
                    7c:bf:ed:68:e6:01:60:00:b8:6d:ef:09:9e:bb:32:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8F:2F:84:D2:ED:2A:92:54:41:E8:0E:7E:B7:50:84:44:E4:70:E2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e36302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:21:6e:a1:8a:02:60:db:d1:d7:75:3c:58:91:24:10:84:
         5e:26:af:8e:c7:16:4d:bb:d9:85:5c:e8:9d:dc:bc:d5:08:46:
         7c:03:a6:54:94:04:44:08:a8:c5:f2:c9:8e:d3:b2:55:ce:2b:
         55:b9:c0:c9:c6:bd:0d:38:8e:9a:ef:6e:cf:21:41:a0:04:42:
         46:de:21:f6:73:35:12:27:6d:6d:03:c3:e1:68:ae:91:c7:9a:
         1f:4d:d8:22:8d:cd:28:c3:af:f2:8d:27:9b:0d:a6:71:cc:b4:
         48:f8:c6:89:a8:dc:7c:1e:55:8c:9b:de:b5:85:e4:7e:6d:2a:
         8e:81:2f:66:80:cc:b0:ba:74:c7:37:5d:a6:b2:3a:31:a6:fd:
         48:80:a6:a5:38:e1:67:68:4b:99:d0:c7:c5:e3:ff:74:d8:22:
         48:2e:22:c9:bf:93:06:ea:b6:1c:79:77:2c:dd:52:f7:b0:68:
         53:bf:11:44:81:5d:1f:df:e9:d7:d1:31:5d:e1:05:38:00:77:
         d9:90:6c:87:c0:c4:35:cb:29:62:ef:85:49:59:75:cb:6f:76:
         b9:ef:47:04:3d:85:78:13:88:8e:0f:fa:01:07:1e:a8:f9:ca:
         c5:58:a9:20:9d:d5:fb:e5:c2:c3:fc:f0:fd:c7:68:3a:d0:d3:
         3a:01:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org