Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e34362e302f32342d3234203d3e20313431393336.roa
File:                     3130332e3136362e34362e302f32342d3234203d3e20313431393336.roa (raw, json)
Hash identifier:          Dofiryr1WIuiTQU69i4GPpw4p2iHYsCQdoZphRR3eNA=
Subject key identifier:   60:3F:E9:1A:D2:98:2C:B7:11:9B:1C:88:86:AE:57:35:C5:40:6E:5F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4B7831CC7BB3F56DE8F244F9EB4AB1B431C498AB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e34362e302f32342d3234203d3e20313431393336.roa
Signing time:             Fri 07 May 2021 02:39:26 +0000
ROA not before:           Fri 07 May 2021 02:34:26 +0000
ROA not after:            Sat 07 May 2022 02:39:26 +0000
asID:                     141936
IP address blocks:        103.166.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:78:31:cc:7b:b3:f5:6d:e8:f2:44:f9:eb:4a:b1:b4:31:c4:98:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  7 02:34:26 2021 GMT
            Not After : May  7 02:39:26 2022 GMT
        Subject: CN=3082010A0282010100B306DC64E43900226C57E4F9F1170EE5CE010C63194DBE21ECC991D067614BAE9E623E0FFFDCABC380AFE4E26ACA4A688A3CA86EA61D4FC99289A0784878AF64A103BC602B58511F04DCAD789414B81857FAA3CF604BE4A630315B072B3973986FF53632D8D67C1A865850FB7192E4FF2C16876B7DB0920A12A96B747009E26B3541AE429993BD1F8CC3C4FCDA860384FF0B79A30BE9B2C2D9C9528C8EB0E6C0220E9859967D85C407DA7720ADE22D0AB914BC1EF56AB371BF3A8F20A8CF4BF24AEF9A4E279EDCCC61F5CD9423DFF5B4B737FD944A34D467ACE31FDEABDDBD6982C23E93DDB352E0FCCA3791F396726ED78BADD78B9AE83BD2A169CA95935D090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:dc:64:e4:39:00:22:6c:57:e4:f9:f1:17:
                    0e:e5:ce:01:0c:63:19:4d:be:21:ec:c9:91:d0:67:
                    61:4b:ae:9e:62:3e:0f:ff:dc:ab:c3:80:af:e4:e2:
                    6a:ca:4a:68:8a:3c:a8:6e:a6:1d:4f:c9:92:89:a0:
                    78:48:78:af:64:a1:03:bc:60:2b:58:51:1f:04:dc:
                    ad:78:94:14:b8:18:57:fa:a3:cf:60:4b:e4:a6:30:
                    31:5b:07:2b:39:73:98:6f:f5:36:32:d8:d6:7c:1a:
                    86:58:50:fb:71:92:e4:ff:2c:16:87:6b:7d:b0:92:
                    0a:12:a9:6b:74:70:09:e2:6b:35:41:ae:42:99:93:
                    bd:1f:8c:c3:c4:fc:da:86:03:84:ff:0b:79:a3:0b:
                    e9:b2:c2:d9:c9:52:8c:8e:b0:e6:c0:22:0e:98:59:
                    96:7d:85:c4:07:da:77:20:ad:e2:2d:0a:b9:14:bc:
                    1e:f5:6a:b3:71:bf:3a:8f:20:a8:cf:4b:f2:4a:ef:
                    9a:4e:27:9e:dc:cc:61:f5:cd:94:23:df:f5:b4:b7:
                    37:fd:94:4a:34:d4:67:ac:e3:1f:de:ab:dd:bd:69:
                    82:c2:3e:93:dd:b3:52:e0:fc:ca:37:91:f3:96:72:
                    6e:d7:8b:ad:d7:8b:9a:e8:3b:d2:a1:69:ca:95:93:
                    5d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3F:E9:1A:D2:98:2C:B7:11:9B:1C:88:86:AE:57:35:C5:40:6E:5F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e34362e302f32342d3234203d3e20313431393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:73:6e:c3:d7:f9:0c:ff:3b:d6:14:07:3b:41:65:3c:cb:7e:
         8c:59:e2:c6:58:1f:01:69:8a:a7:2d:32:ea:23:d3:5f:71:1f:
         ed:08:a2:1a:7c:6d:c0:56:b1:15:6f:dc:40:53:64:97:de:4f:
         92:42:69:d7:b0:3e:0e:7a:03:f1:bf:6d:7f:41:ea:38:2f:d2:
         72:9f:7a:79:f2:12:6b:3e:86:83:cb:42:a8:dc:b4:88:21:68:
         5f:d0:a9:b7:eb:65:be:ab:67:7d:ee:94:5d:77:ad:83:6c:23:
         46:83:5d:bb:d8:36:89:14:65:11:15:25:f5:f9:02:59:2d:2b:
         12:3e:1f:1b:23:7b:53:49:79:38:30:c4:3e:f5:0b:91:7b:23:
         d2:b0:e8:02:72:01:62:68:3b:4b:44:d6:c0:64:09:65:a2:1c:
         77:aa:8d:7a:e9:e9:53:dc:59:56:d3:50:d7:f4:9a:b7:f3:dc:
         73:c2:b4:17:8f:89:0f:d5:8e:03:14:8c:ca:10:43:98:ed:7f:
         15:cb:96:ab:47:9d:40:a6:86:ba:5c:96:90:af:f7:58:b5:b2:
         ec:16:2c:32:f4:ae:52:dc:44:ba:19:d5:e7:16:2e:d6:23:eb:
         9c:73:4c:c4:fe:6c:5e:b4:a5:6d:1e:f3:3d:a0:63:cb:58:1e:
         3b:07:b4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org