Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3133322e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136382e3133322e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          nC/POCnIW1NyhDJNArk6pJtf4t31a3lOems+XWNmk3w=
Subject key identifier:   80:05:A9:6A:AE:7B:EB:13:3E:C8:B2:65:73:28:CD:A0:06:05:C3:72
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6E434E37FC4E6C8DCCFF86FC7726CC860632A24C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3133322e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:14 +0000
ROA not before:           Mon 28 Jun 2021 16:47:14 +0000
ROA not after:            Tue 28 Jun 2022 16:52:14 +0000
asID:                     4800
IP address blocks:        103.168.132.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:43:4e:37:fc:4e:6c:8d:cc:ff:86:fc:77:26:cc:86:06:32:a2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:14 2021 GMT
            Not After : Jun 28 16:52:14 2022 GMT
        Subject: CN=3082010A0282010100D3EE68037B91CAD6A6A151D7836D97452452AC5419B2A0F02F989D98E234CE32871C3D11DD17529D5FC08CC9AA0B05964016FFB36CF57C81626891413395D29A357B06ABE03C5DF46FD1B1DB5B9152DB84CD82A6ED47612C4882254E86BE2D7863DE347C1C7DD5C198C187AE6FF0DD7FAB260C8678CB26E623FAC58C569A5DCE90FD28D88C50A5A0B2C3CD6630D5E95F18944708C869E010516BB847765FFD6B88DF3388D9FC2C2CE090A236EE8094FD3B028D0B4F36D2B14205AC2C1AA9C64147C7BE454F478EDC7FE6F6ABCF355925CE89FEB580719FBB32701AD9926EDBF8202CD1AC830F167DBCE0D01CBE5924947C40C36B5544E769D4EF155AC13AEBA50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ee:68:03:7b:91:ca:d6:a6:a1:51:d7:83:6d:
                    97:45:24:52:ac:54:19:b2:a0:f0:2f:98:9d:98:e2:
                    34:ce:32:87:1c:3d:11:dd:17:52:9d:5f:c0:8c:c9:
                    aa:0b:05:96:40:16:ff:b3:6c:f5:7c:81:62:68:91:
                    41:33:95:d2:9a:35:7b:06:ab:e0:3c:5d:f4:6f:d1:
                    b1:db:5b:91:52:db:84:cd:82:a6:ed:47:61:2c:48:
                    82:25:4e:86:be:2d:78:63:de:34:7c:1c:7d:d5:c1:
                    98:c1:87:ae:6f:f0:dd:7f:ab:26:0c:86:78:cb:26:
                    e6:23:fa:c5:8c:56:9a:5d:ce:90:fd:28:d8:8c:50:
                    a5:a0:b2:c3:cd:66:30:d5:e9:5f:18:94:47:08:c8:
                    69:e0:10:51:6b:b8:47:76:5f:fd:6b:88:df:33:88:
                    d9:fc:2c:2c:e0:90:a2:36:ee:80:94:fd:3b:02:8d:
                    0b:4f:36:d2:b1:42:05:ac:2c:1a:a9:c6:41:47:c7:
                    be:45:4f:47:8e:dc:7f:e6:f6:ab:cf:35:59:25:ce:
                    89:fe:b5:80:71:9f:bb:32:70:1a:d9:92:6e:db:f8:
                    20:2c:d1:ac:83:0f:16:7d:bc:e0:d0:1c:be:59:24:
                    94:7c:40:c3:6b:55:44:e7:69:d4:ef:15:5a:c1:3a:
                    eb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:05:A9:6A:AE:7B:EB:13:3E:C8:B2:65:73:28:CD:A0:06:05:C3:72
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3133322e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:89:06:a9:dd:2e:c5:b4:48:04:61:be:71:ff:e9:97:14:
         6d:5f:0f:a2:f9:0f:69:15:82:d0:dd:49:bb:87:4d:00:cf:3e:
         b1:50:44:6a:5a:61:63:9a:d8:11:42:ef:62:b5:e3:cf:25:a9:
         be:69:0d:f8:ec:5c:36:0d:2c:0e:a0:b2:3d:10:1f:fe:16:a1:
         a3:07:f3:ed:ce:61:7f:b9:19:19:af:fb:eb:36:dc:08:a6:cb:
         25:0b:30:2f:b9:21:bd:34:05:9e:90:ef:23:43:e9:ac:ba:65:
         7c:05:ed:23:03:47:57:e4:5a:57:3b:d9:08:1d:fd:49:8b:c5:
         a1:de:63:36:98:db:64:6b:fc:81:9b:91:58:e4:06:76:b5:e4:
         6c:a8:87:01:46:f0:0a:6b:51:dd:d5:e6:c8:12:d7:34:33:31:
         ee:7b:15:c5:92:06:8e:43:27:2d:c6:28:a0:64:cd:b6:a9:0f:
         ae:5a:ba:5a:8b:30:3b:07:96:62:9a:39:c5:88:af:c5:3d:42:
         30:49:44:38:91:44:3e:8a:7b:48:4c:a9:2e:7a:f9:e7:b1:37:
         97:35:19:79:35:a3:af:21:a0:a1:7f:73:0a:be:1a:39:6e:af:
         4a:19:8e:83:b0:a6:33:a0:0d:26:c1:72:11:77:c2:e5:4c:63:
         19:ba:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org