Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139362e302f32332d3234203d3e203338373538.roa
File:                     3130332e3136362e3139362e302f32332d3234203d3e203338373538.roa (raw, json)
Hash identifier:          ggwkAM3jn2tf5sxEsgPUT/BbFRpXyUyHTCZXp2g/XaQ=
Subject key identifier:   A4:29:93:5B:90:BE:36:7A:B1:A3:FA:B4:DD:18:7B:C9:A9:E0:2C:08
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1A60A70E179B637EB1E8E96D5DABD2D607F67E62
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139362e302f32332d3234203d3e203338373538.roa
Signing time:             Tue 04 May 2021 08:49:39 +0000
ROA not before:           Tue 04 May 2021 08:44:39 +0000
ROA not after:            Wed 04 May 2022 08:49:39 +0000
asID:                     38758
IP address blocks:        103.166.196.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:60:a7:0e:17:9b:63:7e:b1:e8:e9:6d:5d:ab:d2:d6:07:f6:7e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  4 08:44:39 2021 GMT
            Not After : May  4 08:49:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:4d:93:69:ba:eb:6d:92:c4:2b:6d:6c:92:
                    5c:d8:26:e8:9e:ad:80:b0:82:d8:14:03:80:22:51:
                    d1:bc:e7:f8:36:3d:80:23:ca:75:ce:10:e3:31:6b:
                    72:15:f4:f4:07:32:a8:00:5e:40:bb:02:a3:a9:1e:
                    9a:bb:39:f8:53:ce:73:0d:70:fb:71:46:28:4a:df:
                    b1:db:84:d0:0c:51:e7:a7:64:b8:1a:f2:6f:4b:42:
                    c4:c4:85:2f:73:56:d4:46:e1:f8:a0:09:c9:bf:93:
                    e2:3b:da:ae:bf:69:49:8a:42:95:13:1b:95:7a:fe:
                    19:6a:9f:58:25:47:70:ad:e4:01:92:9e:8d:de:3e:
                    c1:35:27:bf:89:ba:d8:68:e5:57:57:ca:d3:ae:7a:
                    c6:d0:ea:31:55:d2:f8:00:4a:98:c5:d5:cb:08:be:
                    38:a6:ac:6b:f3:5a:1c:d1:8b:20:0c:b3:f0:dd:8c:
                    c7:7c:39:76:4b:a7:65:46:17:65:71:96:28:0e:28:
                    98:d1:53:80:76:14:c7:0f:47:1a:63:f8:4e:a4:0f:
                    29:0d:a4:59:d8:39:1e:63:3b:b5:fa:dd:c4:69:31:
                    88:6d:22:c0:76:99:e1:5c:93:15:1b:0f:cc:66:0b:
                    c7:f1:fc:25:f3:0c:61:0c:4d:d4:85:5f:dd:84:51:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:29:93:5B:90:BE:36:7A:B1:A3:FA:B4:DD:18:7B:C9:A9:E0:2C:08
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139362e302f32332d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:dd:f2:97:58:0f:17:79:e0:85:df:39:ff:41:18:2d:d4:e0:
         12:ce:44:2d:f6:b6:6a:5d:66:6e:cb:a9:ec:85:4c:b0:9f:47:
         c3:e0:06:40:0b:90:7d:78:d5:24:58:cb:b4:42:0c:e8:e7:95:
         fb:c2:37:15:23:f8:c1:09:b5:36:50:51:12:c3:bb:c9:47:5f:
         83:e7:1e:db:20:41:94:ae:33:8f:8e:9c:31:07:12:07:a3:68:
         48:ca:7f:ed:d0:b4:ae:a9:1b:a6:55:82:93:07:63:0c:45:41:
         98:c7:f6:33:df:a7:22:c5:97:b7:70:e6:d9:eb:10:70:9e:2b:
         3c:d6:aa:3a:9d:0a:31:a3:c7:91:f0:2a:7b:9b:7d:1b:4a:76:
         69:a4:70:a1:c6:8a:a6:26:06:a8:dd:1a:ff:57:9d:02:09:90:
         19:2f:91:f9:8b:f3:a4:8e:ea:c6:9c:3f:f7:72:e7:42:80:73:
         95:0f:05:53:2f:b3:1c:bf:b7:c4:f3:d1:00:f0:7f:0d:36:46:
         31:7e:6b:1f:e6:6d:93:27:79:75:49:af:6a:fe:70:7c:f2:45:
         d3:10:cf:a9:d6:55:0b:dc:8a:ef:5d:0d:44:11:9e:d4:15:8b:
         1f:eb:a4:b8:73:8b:b3:e9:dc:2c:f0:d5:2e:c2:a0:81:85:09:
         b2:93:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org