Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e31322e302f32332d3234203d3e203538333639.roa
File:                     3130332e3136372e31322e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          uInAA69E3p+MiMFCYxha9SMVriIcBeETcOHkoqYjKgM=
Subject key identifier:   09:80:C9:49:8B:E8:B9:FA:33:2E:E0:18:3E:6A:16:06:ED:E4:90:B6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4AF66A5628145138E760EFBF173628B33975F9F7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e31322e302f32332d3234203d3e203538333639.roa
Signing time:             Fri 04 Feb 2022 07:33:12 +0000
ROA not before:           Fri 04 Feb 2022 07:28:12 +0000
ROA not after:            Sat 04 Feb 2023 07:33:12 +0000
asID:                     58369
IP address blocks:        103.167.12.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f6:6a:56:28:14:51:38:e7:60:ef:bf:17:36:28:b3:39:75:f9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  4 07:28:12 2022 GMT
            Not After : Feb  4 07:33:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:66:c3:28:03:ff:b1:29:78:fd:fa:8a:70:
                    7e:ad:8a:42:d5:e7:19:c1:9c:5c:60:be:fb:80:69:
                    a9:85:f8:8f:27:2d:ff:37:09:84:46:1c:fc:3c:72:
                    1d:44:71:26:b5:24:ff:b6:69:e8:50:57:97:a1:65:
                    79:0e:f1:6c:38:1e:ea:7f:80:46:2d:b1:1e:ad:18:
                    80:29:51:19:3f:8f:b8:82:43:28:09:b0:45:40:dd:
                    18:53:44:15:a4:4c:f3:ac:e8:71:55:57:ba:0b:88:
                    a9:a6:bd:f0:b0:4d:15:a9:a2:df:a5:e0:5b:7b:f2:
                    47:bf:4a:dc:b8:31:e5:ac:50:03:d0:87:c3:9e:ac:
                    2a:ab:17:af:d1:cd:d0:a1:ae:e1:04:ca:63:8c:8c:
                    ec:ea:3d:2a:0d:2e:c3:3d:f1:b4:58:95:49:c7:f2:
                    b3:ba:10:9d:75:6d:66:19:8d:cc:af:ed:48:82:6a:
                    21:9a:8e:b6:68:9a:23:69:9c:07:12:19:0e:86:2c:
                    05:9b:c0:f0:9d:b8:4e:e3:48:d7:bc:cb:81:8b:f3:
                    b9:22:d8:2d:0e:bd:cc:fb:c2:32:3c:3f:1c:5c:ac:
                    61:4f:32:b2:0d:55:70:00:28:8c:7a:d7:2f:76:f3:
                    8a:33:98:43:dd:7e:e3:dc:69:91:cb:8c:35:89:d0:
                    ff:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:80:C9:49:8B:E8:B9:FA:33:2E:E0:18:3E:6A:16:06:ED:E4:90:B6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e31322e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:79:9f:25:21:a5:34:34:48:91:8f:b0:ed:b9:06:ab:6c:e4:
         f4:14:dc:86:b8:ee:22:57:31:8a:2f:da:cf:33:4d:fc:a0:c2:
         65:16:1e:dc:c8:b1:62:e9:60:63:4c:64:c7:5c:a1:22:80:72:
         df:b5:52:37:1d:49:09:9a:6d:98:32:25:29:88:62:c5:9f:0d:
         c5:24:e1:14:85:6a:76:e3:a3:e3:66:9f:da:53:64:75:5f:ea:
         0b:50:47:cb:d7:0f:c1:6a:90:f9:30:e1:57:81:4e:9a:ef:11:
         58:4a:db:1a:30:16:5b:cf:78:3c:22:e9:63:bc:b3:c6:d8:19:
         78:d3:2a:04:ff:22:23:b2:7d:22:3c:f2:8c:10:26:b9:b9:24:
         0a:39:0b:19:77:39:1b:16:f6:e6:bd:75:70:3d:be:46:cc:4c:
         e5:02:fa:53:c5:09:43:39:72:9c:0a:6c:24:50:43:38:8a:a3:
         a1:4d:6e:89:d0:fd:bd:ba:47:39:c2:4c:ae:92:4c:80:a9:75:
         1f:2a:e6:2a:03:38:db:ea:a2:f5:52:22:db:ef:2c:26:2f:65:
         2d:f4:e5:cb:f1:fc:6f:9a:66:c0:2d:01:a3:8b:4d:cd:74:50:
         c5:77:80:7b:88:12:77:1a:4d:77:4e:7e:a0:d4:a6:5e:4e:b2:
         23:12:ad:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-ams.rpki-client.org