Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3232322e302f32342d3234203d3e20313432333233.roa
File:                     3130332e3136372e3232322e302f32342d3234203d3e20313432333233.roa (raw, json)
Hash identifier:          1aF6dUA+AX/avKZcVLXwp6LCPRZ1WDLMmdTHNUbO+Ew=
Subject key identifier:   0D:68:EB:B3:E7:B3:61:E5:29:DE:D8:63:9F:E6:AA:7D:DA:5F:10:9B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       74984C2788E479BCF9FBE909401F6AD09E43AB2C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3232322e302f32342d3234203d3e20313432333233.roa
Signing time:             Mon 15 Nov 2021 03:57:37 +0000
ROA not before:           Mon 15 Nov 2021 03:52:37 +0000
ROA not after:            Tue 15 Nov 2022 03:57:37 +0000
asID:                     142323
IP address blocks:        103.167.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:98:4c:27:88:e4:79:bc:f9:fb:e9:09:40:1f:6a:d0:9e:43:ab:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 15 03:52:37 2021 GMT
            Not After : Nov 15 03:57:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ec:7c:b1:cd:31:f5:ed:4e:d7:d5:de:91:90:
                    19:e0:61:58:d7:9f:5f:9d:ef:86:51:50:b9:04:b3:
                    c3:d7:64:3e:87:1f:1a:9e:af:fc:d8:6c:0f:c7:f3:
                    59:0b:2f:6f:c6:a1:e9:2a:c0:97:76:fe:c3:7d:68:
                    0b:b3:8f:90:c2:f5:f8:df:43:89:ae:ab:27:2c:03:
                    9e:bc:2e:95:53:79:70:63:62:97:b6:8d:f1:b9:0a:
                    41:e4:ff:c5:cc:5e:e6:4b:b2:b6:ba:d0:38:2e:f7:
                    27:1a:11:f5:19:7c:fa:d3:ec:8b:4a:ca:31:ea:59:
                    46:1b:8b:f7:6b:81:18:ba:98:70:4c:c1:81:b2:35:
                    51:11:46:39:22:51:d8:ed:be:63:f7:e2:cb:37:20:
                    a7:83:af:6d:21:dd:5f:4b:28:36:c1:ef:c0:d1:1d:
                    80:82:ff:b3:25:56:e5:72:a7:0f:14:4f:9d:dc:a9:
                    7c:b9:62:67:bb:7e:af:20:1e:03:91:87:90:af:4c:
                    45:2a:81:cc:66:d8:eb:cd:dd:19:6a:59:d5:6e:6b:
                    10:28:0f:5a:31:21:94:ce:d4:85:94:20:8b:f3:0e:
                    08:29:6f:93:9a:5f:39:8c:4e:f4:a4:32:8f:4c:f0:
                    43:2c:5d:79:9e:8f:58:46:45:64:f0:22:d0:3b:d4:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:68:EB:B3:E7:B3:61:E5:29:DE:D8:63:9F:E6:AA:7D:DA:5F:10:9B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3232322e302f32342d3234203d3e20313432333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:75:6e:e9:a0:2a:43:58:f1:07:7a:18:45:88:2b:a1:ac:0c:
         cc:8d:a0:c1:52:7a:40:9e:73:e1:e0:fa:f4:28:60:7c:9e:75:
         f2:b6:99:56:ae:98:43:6c:ed:33:7c:97:ca:0d:c5:15:59:52:
         c3:f7:cf:44:2d:06:61:0c:99:17:51:ed:1f:6e:a3:5d:ab:24:
         bd:9e:bd:84:c5:ad:96:7e:fc:8b:49:e5:90:ea:6a:be:bd:8e:
         38:0d:64:9e:5c:45:2e:68:26:2e:6b:08:c0:fb:da:d3:6f:3f:
         24:a7:5c:73:c5:8a:fb:af:9e:af:31:31:59:c2:02:46:af:73:
         6b:49:d3:f3:53:81:15:93:94:c0:4f:9a:7f:0c:eb:4f:c1:12:
         6d:4a:a6:58:9b:26:58:35:7d:38:11:80:be:4d:42:ed:d7:01:
         e8:ae:82:23:45:eb:0e:01:e3:19:1d:92:1d:26:d4:a0:fa:46:
         49:6a:65:d2:c6:8c:db:43:92:89:c0:85:c0:9f:a1:03:e3:a1:
         3a:76:34:b0:bd:80:d5:9f:e2:fc:53:19:a6:73:2e:d2:e0:23:
         78:11:81:4f:37:cc:5d:97:5a:7c:2a:07:25:d8:c7:37:a7:5d:
         5a:26:e5:04:ea:4b:c7:ad:9e:2b:74:54:59:24:3f:ca:2d:54:
         05:41:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org