Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3232332e302f32342d3234203d3e20313437313033.roa
File:                     3130332e3137342e3232332e302f32342d3234203d3e20313437313033.roa (raw, json)
Hash identifier:          5NeXO81ZeOaafrBANWp92KiJGd4KeFzfU5vFGlkOncY=
Subject key identifier:   3B:A6:D3:E8:98:8C:59:E0:1E:26:1D:7B:3F:83:DF:58:FF:49:7E:30
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       213999F1D4C44B8EB537EBED35FEDB3E271C5E9C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3232332e302f32342d3234203d3e20313437313033.roa
Signing time:             Tue 19 Oct 2021 15:26:13 +0000
ROA not before:           Tue 19 Oct 2021 15:21:13 +0000
ROA not after:            Wed 19 Oct 2022 15:26:13 +0000
asID:                     147103
IP address blocks:        103.174.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:39:99:f1:d4:c4:4b:8e:b5:37:eb:ed:35:fe:db:3e:27:1c:5e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 19 15:21:13 2021 GMT
            Not After : Oct 19 15:26:13 2022 GMT
        Subject: CN=3082010A0282010100D6895DA83B7F8183C093E2AC21518C785B54FA0D072C53821133548EC8BF3A346E811C135D8254C2FA32FB7A6A7879080E23A5875402BCCBD410868314681DE32A6D78C4F568B599EE39816030EB7EB0A8438AA87434A67F3D23859A7520F1558C58F1FD2F79A3DB899E5E26E47D9CF35D457B2D0AC9478215CE41BEC3AF8D470C8F52033CF855866A9CC8AD9F87FCD73C69CB052967B1D5CAB597839648A6510AA91FB78918FF2C7ABF6D4F05743C3488C6955665180D34E91C1D80CCC44DDF9BA37B03A461FD1EBFA24027AC33EC3C2EE6A12715E0A057E76C62C831ADCB5D7D56B7210009B59E6D19E3FA5B49D2F092732675CD3763803BEF4BEDC341ADB10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:5d:a8:3b:7f:81:83:c0:93:e2:ac:21:51:
                    8c:78:5b:54:fa:0d:07:2c:53:82:11:33:54:8e:c8:
                    bf:3a:34:6e:81:1c:13:5d:82:54:c2:fa:32:fb:7a:
                    6a:78:79:08:0e:23:a5:87:54:02:bc:cb:d4:10:86:
                    83:14:68:1d:e3:2a:6d:78:c4:f5:68:b5:99:ee:39:
                    81:60:30:eb:7e:b0:a8:43:8a:a8:74:34:a6:7f:3d:
                    23:85:9a:75:20:f1:55:8c:58:f1:fd:2f:79:a3:db:
                    89:9e:5e:26:e4:7d:9c:f3:5d:45:7b:2d:0a:c9:47:
                    82:15:ce:41:be:c3:af:8d:47:0c:8f:52:03:3c:f8:
                    55:86:6a:9c:c8:ad:9f:87:fc:d7:3c:69:cb:05:29:
                    67:b1:d5:ca:b5:97:83:96:48:a6:51:0a:a9:1f:b7:
                    89:18:ff:2c:7a:bf:6d:4f:05:74:3c:34:88:c6:95:
                    56:65:18:0d:34:e9:1c:1d:80:cc:c4:4d:df:9b:a3:
                    7b:03:a4:61:fd:1e:bf:a2:40:27:ac:33:ec:3c:2e:
                    e6:a1:27:15:e0:a0:57:e7:6c:62:c8:31:ad:cb:5d:
                    7d:56:b7:21:00:09:b5:9e:6d:19:e3:fa:5b:49:d2:
                    f0:92:73:26:75:cd:37:63:80:3b:ef:4b:ed:c3:41:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A6:D3:E8:98:8C:59:E0:1E:26:1D:7B:3F:83:DF:58:FF:49:7E:30
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3232332e302f32342d3234203d3e20313437313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a9:48:dd:da:f1:6d:c7:00:0e:9e:29:ab:cb:d7:3d:41:60:
         c6:f2:05:c1:ad:75:16:93:8b:dc:5a:5a:54:f9:68:4c:45:4f:
         b7:ed:3f:f2:d3:e3:bc:39:6c:06:5f:18:a4:83:e8:68:85:25:
         0e:c0:1d:8f:58:39:58:4b:40:58:35:4f:d3:e8:ae:17:7d:ab:
         1b:b5:ae:0b:9f:ff:18:de:8d:4a:0f:0a:c7:c2:dc:ce:66:67:
         2c:4d:97:26:88:51:60:e2:9d:9b:8b:37:d6:06:32:3a:77:d7:
         45:ad:1b:d9:9d:cc:ea:6b:94:ef:07:61:ba:92:4a:a5:87:4f:
         c1:fa:29:c5:e1:17:79:fc:ef:35:c3:73:cc:dc:46:20:18:a8:
         ba:5f:5f:5a:20:45:51:ca:dc:be:e7:8a:9e:cd:f2:bc:12:98:
         f5:ec:ae:34:ff:6d:af:f1:36:4e:76:61:69:12:1c:a8:45:13:
         2a:55:84:d0:81:06:7a:b6:45:87:44:90:de:67:e3:d3:77:24:
         9a:db:52:1c:b9:8d:8b:ec:af:3c:36:60:77:b8:41:df:1f:6a:
         c2:43:ed:8c:96:77:02:1e:88:0b:54:ff:77:12:d3:d0:c8:3c:
         b9:8f:44:69:79:b9:4f:14:e9:e3:dd:49:f2:5d:9c:61:58:bd:
         ba:55:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org