Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3131322e302f32332d3234203d3e2039383735.roa
File:                     3130332e3136392e3131322e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          PN441UAbDRsc9DfZx4wikh5mzCP/ImPvHFJv2eYKVNg=
Subject key identifier:   53:7B:1C:CE:2B:BC:03:89:73:A4:CF:D1:35:FD:55:04:8C:6F:82:25
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       391A42F983E1ACC11C218466DDF91BD1611835A1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3131322e302f32332d3234203d3e2039383735.roa
Signing time:             Sat 02 Oct 2021 00:45:27 +0000
ROA not before:           Sat 02 Oct 2021 00:40:27 +0000
ROA not after:            Sun 02 Oct 2022 00:45:27 +0000
asID:                     9875
IP address blocks:        103.169.112.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1a:42:f9:83:e1:ac:c1:1c:21:84:66:dd:f9:1b:d1:61:18:35:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  2 00:40:27 2021 GMT
            Not After : Oct  2 00:45:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:b1:9c:5a:2a:d6:91:b3:04:ea:7f:cf:05:
                    55:7d:0e:a8:47:38:e7:4c:cc:80:95:ef:05:7b:ee:
                    93:ef:90:b2:09:2c:dd:9d:cb:80:b6:c2:16:3e:a8:
                    fc:02:d3:27:5a:c1:71:31:bc:6f:75:b6:ef:ec:f2:
                    dd:b3:30:02:9c:2a:b5:b1:b8:fb:41:35:7d:3d:ea:
                    d1:b6:3c:be:c4:c3:1b:26:07:a5:de:ce:93:e1:0b:
                    56:a9:aa:1a:49:5a:5b:9e:d5:2e:34:78:ac:d4:1d:
                    aa:65:4c:ef:47:34:b8:32:a7:54:d5:7c:cb:23:72:
                    fe:bb:8e:9d:62:5f:bb:cb:be:e3:78:f6:6c:9c:f1:
                    0d:84:f2:55:ee:e7:a1:34:b2:a4:de:b0:e4:f1:1e:
                    83:58:68:b7:9c:39:e6:27:67:66:fc:7a:00:3f:1c:
                    ad:68:22:bd:80:bf:86:d5:42:92:2f:0a:ba:de:b9:
                    76:fb:89:c5:0f:9d:94:e4:1b:47:76:f8:cb:89:ea:
                    cd:b4:19:a5:e5:8c:9b:00:ab:8a:08:d6:ac:f7:ac:
                    3c:1a:63:09:85:db:e9:62:ca:21:89:08:90:e4:48:
                    34:80:85:1b:f7:da:e3:26:4d:30:c5:3a:ff:86:4f:
                    86:c4:de:f7:73:bc:28:65:81:c8:05:05:84:b9:af:
                    f3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7B:1C:CE:2B:BC:03:89:73:A4:CF:D1:35:FD:55:04:8C:6F:82:25
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3131322e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:2c:29:29:55:df:25:35:f4:f2:f1:ad:f8:cc:4e:f3:19:a9:
         4c:d8:0f:53:e5:40:f9:40:09:21:6c:28:eb:95:02:2f:22:f3:
         49:d1:7e:a6:69:59:49:09:90:01:28:97:40:17:6b:18:cf:5d:
         71:79:41:52:ea:24:6c:2b:88:23:51:58:a2:49:66:77:5e:fb:
         75:8f:49:aa:ed:4a:78:89:23:74:5b:60:26:d6:6e:97:2b:8b:
         df:c0:fb:70:74:1f:47:1d:59:8c:06:95:77:ec:71:9d:6a:6e:
         02:64:6c:9f:2d:23:7e:44:c3:e9:d6:e0:9a:f6:f5:7a:eb:2d:
         ba:7e:eb:4d:56:74:53:ad:3f:ac:89:96:ef:0e:ab:fb:b2:f7:
         5b:a5:63:db:e0:ae:35:8b:a1:7b:cb:60:05:d5:03:6c:04:64:
         e8:cd:c8:df:a0:77:32:7e:f8:58:7c:c1:bb:2d:e4:cf:fc:d7:
         9a:c1:d8:71:6e:60:00:cc:35:f6:aa:68:2c:41:37:0c:40:ae:
         95:c9:fd:47:2c:63:68:90:d7:c8:8f:a6:a8:a6:0e:2e:73:ec:
         a1:41:f2:c8:43:13:36:fa:bd:14:36:8b:ff:ba:eb:d9:07:71:
         31:f7:f7:a1:f3:d3:b9:4b:89:05:0f:8b:04:2c:44:75:cd:fc:
         61:fc:e0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-ams.rpki-client.org