Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3131312e302f32342d3234203d3e2039383735.roa
File:                     3130332e3136392e3131312e302f32342d3234203d3e2039383735.roa (raw, json)
Hash identifier:          F9pKGUNmTzlq5YWyYmoYcRVrDsytT2IQg7ZD0FB2i2Y=
Subject key identifier:   1A:CA:3B:E8:11:5C:B6:58:7C:7E:F8:DB:78:42:F5:A3:13:B3:3F:24
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5CE2CA5EC802E2AC8CAB8506A70847A00A800B48
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3131312e302f32342d3234203d3e2039383735.roa
Signing time:             Sat 02 Oct 2021 00:45:18 +0000
ROA not before:           Sat 02 Oct 2021 00:40:18 +0000
ROA not after:            Sun 02 Oct 2022 00:45:18 +0000
asID:                     9875
IP address blocks:        103.169.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e2:ca:5e:c8:02:e2:ac:8c:ab:85:06:a7:08:47:a0:0a:80:0b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  2 00:40:18 2021 GMT
            Not After : Oct  2 00:45:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:b4:0d:1a:b2:d0:54:e1:52:03:fd:da:ef:
                    79:1c:2a:52:f0:2a:b6:6f:a0:53:e6:1a:ed:39:67:
                    86:2a:a7:f5:2e:2a:43:92:84:78:80:8f:dc:ae:ab:
                    d8:aa:43:d1:a1:a8:12:8d:c8:b1:c6:b2:df:e2:fd:
                    28:a2:c7:6b:c9:6d:4a:12:06:c6:b1:43:8a:75:a9:
                    c3:19:b2:ca:57:94:20:d6:a4:5b:97:7f:1d:44:94:
                    df:9e:8d:3d:9f:b3:57:10:04:0b:77:77:95:86:ba:
                    b7:f6:2e:20:0c:0d:ca:bf:e5:f4:22:44:24:73:b1:
                    2e:ea:60:b7:c1:1a:95:7c:a0:fd:18:e2:ef:27:f0:
                    8b:12:8f:36:93:55:89:1a:05:de:02:15:4e:76:c4:
                    58:2c:90:3c:80:e2:19:73:81:34:34:da:f0:4a:65:
                    4d:4f:fb:24:ee:ae:a7:db:ab:86:6c:b7:27:3a:2e:
                    88:c0:40:fa:85:24:5f:5b:40:d5:a7:fe:46:19:5e:
                    2f:ce:2d:70:9b:c5:bf:5a:5c:2d:24:42:ce:d5:65:
                    38:b6:0c:d7:43:38:f8:3c:40:27:31:f4:1e:7d:d1:
                    61:3a:33:a8:6c:75:f8:b1:fd:11:d4:71:a6:84:79:
                    88:15:0d:5d:f1:43:e3:cf:64:3b:ff:a3:9b:69:a5:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CA:3B:E8:11:5C:B6:58:7C:7E:F8:DB:78:42:F5:A3:13:B3:3F:24
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3131312e302f32342d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:19:0c:ea:36:4e:12:e7:1c:f4:db:4a:c3:53:78:c2:9a:68:
         03:dd:d9:34:b3:bd:62:21:f1:81:63:34:c0:88:94:9c:66:70:
         d6:2c:ee:87:26:a3:61:c8:2b:65:0c:cf:34:2a:23:3f:15:ef:
         76:7a:f2:15:e1:f9:c9:f8:41:32:5a:1e:29:b6:99:fc:ab:e7:
         a4:b5:a5:8a:cf:7c:39:cf:b2:f2:bb:10:12:d6:d1:4c:e7:6b:
         f1:3a:39:ff:2b:9b:2e:34:05:20:0d:82:72:06:60:61:a9:d0:
         2c:bf:8a:64:54:64:c3:79:cb:ae:99:0d:f6:4e:85:78:d4:90:
         f2:55:8e:32:5d:5e:85:13:65:aa:aa:e5:e8:ee:98:4e:89:de:
         c1:19:85:0a:95:c2:df:4a:f2:05:c1:57:2d:a2:de:d0:12:1f:
         5d:10:ad:f3:a2:77:74:fc:86:0a:5a:74:95:08:30:e9:af:43:
         3c:70:ff:65:85:7b:86:f9:49:16:09:b3:5a:30:c6:71:17:ae:
         8c:9a:6e:5f:2b:5c:18:05:7d:1e:66:22:8e:b8:3c:ef:ab:3b:
         9b:3d:7e:11:96:8c:28:67:f7:d7:6f:97:c4:24:09:a6:5b:49:
         83:99:63:a6:2c:43:9d:9d:28:f3:c9:94:17:2e:85:8b:25:62:
         47:11:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org