Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139302e302f32332d3234203d3e203338373538.roa
File:                     3130332e3136362e3139302e302f32332d3234203d3e203338373538.roa (raw, json)
Hash identifier:          PudYmkT0LZo1L9D2JdXN43l6I27GYhKoAm2nkzrzouU=
Subject key identifier:   2F:49:67:0C:45:47:7E:CD:8F:00:03:B6:6C:20:EF:3F:AD:A2:99:0E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       54CD4B6630CFB38804AF9BD98257746D073A6849
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139302e302f32332d3234203d3e203338373538.roa
Signing time:             Tue 04 May 2021 08:46:18 +0000
ROA not before:           Tue 04 May 2021 08:41:18 +0000
ROA not after:            Wed 04 May 2022 08:46:18 +0000
asID:                     38758
IP address blocks:        103.166.190.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cd:4b:66:30:cf:b3:88:04:af:9b:d9:82:57:74:6d:07:3a:68:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  4 08:41:18 2021 GMT
            Not After : May  4 08:46:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:ac:79:36:bf:9f:2f:53:11:71:34:69:b3:
                    47:60:61:36:8f:a7:6d:de:81:88:1d:28:f8:2d:e0:
                    e3:f4:2d:7b:38:38:69:a8:15:4b:27:f2:0b:80:ea:
                    06:9f:d5:fa:ce:5f:d8:4f:15:c1:06:74:d9:a4:aa:
                    bf:75:c5:16:c2:39:ad:9c:57:d0:a2:b3:5c:8b:53:
                    ae:ab:56:e1:b9:d6:06:4b:7d:c6:9b:cf:bd:a5:85:
                    c8:04:6b:74:54:f5:88:b5:6a:48:09:bf:ac:9e:8b:
                    28:72:6f:59:bf:10:76:5f:72:e0:56:13:be:51:8b:
                    32:03:d3:e9:25:65:df:26:0b:c0:18:bd:29:f4:ec:
                    d0:19:64:e1:33:c8:9b:41:81:eb:3a:cd:6f:14:de:
                    7b:58:ac:95:e2:70:25:ac:b6:b3:a9:03:cb:71:b9:
                    39:e9:17:4a:90:eb:8a:52:8c:a0:7a:a1:66:87:cd:
                    74:b4:c1:a8:49:ea:a2:4b:58:b3:29:6d:1b:f5:0a:
                    8f:ed:34:f4:20:fd:6d:9d:21:26:60:72:c1:87:5e:
                    f8:89:a3:de:bb:cb:da:be:71:6c:7b:ab:53:64:8d:
                    21:0d:fa:85:25:4f:5e:83:0c:69:79:0a:b7:7f:92:
                    5f:52:3c:1e:cc:a3:e3:f1:ce:69:89:18:da:e5:ae:
                    d4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:49:67:0C:45:47:7E:CD:8F:00:03:B6:6C:20:EF:3F:AD:A2:99:0E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139302e302f32332d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:ca:c7:a8:0a:70:53:e2:c6:e9:d2:40:a8:b3:e0:07:26:cb:
         4d:ce:c0:4f:42:84:22:d1:94:ee:9a:a4:fc:1d:27:63:d0:17:
         a1:e1:ff:13:ef:e1:aa:5a:0d:42:eb:30:28:f4:9c:f2:14:cf:
         15:88:1b:27:6d:d9:ae:cc:ed:78:ab:0f:47:98:97:2c:9b:52:
         90:2f:3b:4a:92:28:15:6d:a0:b1:ff:d7:b3:d5:75:81:ab:e6:
         f1:95:e1:9f:1b:fd:25:cb:d9:a0:95:01:70:1f:50:7a:ac:20:
         5f:7e:ed:c2:26:93:2a:0e:01:11:c6:e5:6c:6d:4e:81:79:f5:
         3f:12:ab:d5:f6:7b:84:e9:dc:fe:f2:f3:a7:1a:b6:35:b7:14:
         be:9b:e6:92:ab:08:db:67:7d:ae:73:64:5c:ec:2f:bb:83:2f:
         8b:e7:65:b3:0e:59:d7:c5:d3:01:e2:38:7f:14:27:82:a4:0a:
         9f:76:08:e8:d1:ac:c6:c2:61:e1:f1:f6:58:93:22:40:72:49:
         61:4d:19:c7:24:f0:bc:e0:f6:1a:15:13:41:22:5e:50:14:dc:
         36:88:4f:0e:95:6e:07:d4:a8:5d:57:75:49:7e:e7:be:d0:b0:
         b2:91:ab:fa:6a:a2:3e:66:72:08:2d:c2:31:eb:38:fa:15:86:
         f6:02:49:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-ams.rpki-client.org