Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3230302e302f32332d3234203d3e203338373538.roa
File:                     3130332e3136362e3230302e302f32332d3234203d3e203338373538.roa (raw, json)
Hash identifier:          P5dfi/muXR35IL5edhDmbAIWNcv44NEfn2v9s6+9mH8=
Subject key identifier:   0A:E9:1E:E2:4A:FB:0A:2F:D2:C9:1B:99:4D:B2:29:A8:CF:32:BB:A4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       65CDAAE79FE629773ECD717DD849D410627B36A9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3230302e302f32332d3234203d3e203338373538.roa
Signing time:             Tue 04 May 2021 08:49:51 +0000
ROA not before:           Tue 04 May 2021 08:44:51 +0000
ROA not after:            Wed 04 May 2022 08:49:51 +0000
asID:                     38758
IP address blocks:        103.166.200.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cd:aa:e7:9f:e6:29:77:3e:cd:71:7d:d8:49:d4:10:62:7b:36:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  4 08:44:51 2021 GMT
            Not After : May  4 08:49:51 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:8e:93:1c:1e:bf:0f:ef:8c:9a:dd:a1:a5:
                    21:57:7d:70:26:68:3b:8c:e3:d6:71:0b:ff:7a:f3:
                    77:39:5f:48:b6:88:7d:35:21:c5:34:69:fe:98:cb:
                    a5:14:1d:bb:85:b0:2c:9f:13:5e:e5:7f:2b:aa:9c:
                    e7:df:2e:89:79:2c:9b:4c:82:a9:b7:2f:11:25:b7:
                    80:36:2c:00:29:be:86:37:8c:14:52:ad:5e:93:46:
                    db:23:7f:a3:df:fb:21:2f:31:d5:35:77:35:f9:0a:
                    68:f9:a4:4c:83:9a:c5:99:04:c0:c5:63:a2:13:4f:
                    f0:e8:cc:7c:fc:c1:3d:8d:77:57:0f:93:42:70:d3:
                    0e:38:42:2e:7c:8f:4d:24:fc:6f:60:cd:60:ed:d4:
                    07:e6:19:fb:da:7a:68:26:96:43:1f:50:d2:8b:78:
                    33:30:b6:6f:ac:b2:3a:ae:46:95:2b:73:44:35:03:
                    43:d2:67:9e:69:7c:93:0f:99:1f:e5:e8:b3:1c:7f:
                    81:8e:b6:2d:48:18:45:f6:c5:6e:57:bb:65:2d:81:
                    98:55:14:82:8f:20:45:75:17:ff:da:fa:42:1b:bc:
                    77:d8:3c:3e:64:06:cc:3e:17:96:50:4f:a2:4d:35:
                    93:1e:98:f4:c3:8e:d9:bb:f6:ff:ba:e6:7c:7d:64:
                    41:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E9:1E:E2:4A:FB:0A:2F:D2:C9:1B:99:4D:B2:29:A8:CF:32:BB:A4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3230302e302f32332d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:73:7f:97:cf:4f:a3:8a:9f:15:ae:50:97:ac:be:ef:7b:ef:
         d6:1f:be:c6:2e:63:49:d1:08:79:d0:3e:0f:f2:53:76:ed:1d:
         64:08:49:27:01:86:23:f9:c1:77:7d:4f:87:ad:9b:3d:5a:ac:
         12:c8:33:94:a0:d6:92:61:31:b0:d7:a1:a0:16:e8:76:cc:bb:
         0a:5e:11:72:a2:9b:9b:16:4b:9e:a0:91:46:81:e0:b9:4c:c4:
         73:e8:6a:5b:62:da:d0:f6:a1:62:04:53:10:ce:d1:7d:be:15:
         12:63:ec:c4:78:59:1f:fb:03:07:82:c9:b5:48:19:0e:6b:ba:
         7a:4b:39:db:96:c3:91:37:6d:f2:dc:0a:51:2b:69:01:50:94:
         a6:d4:ec:18:2d:34:8b:a6:ba:cf:04:b9:21:86:98:6d:21:0a:
         a4:f3:2d:f9:d6:c3:76:04:1a:2e:3d:86:af:85:63:82:f3:85:
         b9:0c:0e:38:eb:6c:56:60:0d:f5:84:99:b6:94:08:a6:01:85:
         6f:78:13:88:4a:b9:21:d0:7c:6b:f7:b7:cd:97:9f:ed:25:33:
         7a:0c:51:38:ce:07:6b:7f:46:cb:a3:90:87:e4:f9:c6:0c:d3:
         55:21:1e:b4:20:09:c6:21:01:f2:75:37:21:d9:a9:59:8a:a6:
         f2:95:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-ams.rpki-client.org