Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e39342e302f32342d3234203d3e20313437313431.roa
File:                     3130332e3137362e39342e302f32342d3234203d3e20313437313431.roa (raw, json)
Hash identifier:          v42/wgmYNeYoH3VTZRgTe4AUllbAp4cyTsUVkW+QwQU=
Subject key identifier:   AB:FC:19:6F:FF:15:38:A8:73:14:EE:E3:C8:5C:3B:D8:A8:AF:A7:F0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       417BDF6A03570BC6B70350C23D7660C2CCE9EF09
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e39342e302f32342d3234203d3e20313437313431.roa
Signing time:             Thu 09 Dec 2021 03:44:30 +0000
ROA not before:           Thu 09 Dec 2021 03:39:30 +0000
ROA not after:            Fri 09 Dec 2022 03:44:30 +0000
asID:                     147141
IP address blocks:        103.176.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7b:df:6a:03:57:0b:c6:b7:03:50:c2:3d:76:60:c2:cc:e9:ef:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  9 03:39:30 2021 GMT
            Not After : Dec  9 03:44:30 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:9d:6b:e5:8d:96:27:02:d6:67:88:ec:9d:
                    3c:3a:5c:55:b6:a6:17:38:59:43:8e:66:a8:2b:9c:
                    bc:24:20:5a:b2:d8:85:d3:28:b1:05:f4:46:89:59:
                    9e:5e:7f:46:71:2c:2e:ff:38:a7:99:9b:7f:24:b5:
                    af:46:4d:b1:17:6c:f6:f0:f0:ad:d7:8b:ca:3e:d3:
                    0d:64:7d:72:cf:9c:8d:e9:4a:b7:8f:ca:8a:8c:31:
                    50:7b:56:ba:38:76:d9:30:64:e8:7a:31:3d:98:7b:
                    f9:54:9f:46:0e:9d:7a:70:a5:5e:09:d4:64:af:40:
                    5a:42:4d:58:b6:4e:08:90:e2:ec:99:2f:19:4f:ac:
                    9e:9f:8c:7c:29:22:b7:99:36:dd:3d:d5:2c:0c:10:
                    04:60:cb:69:69:4e:c7:60:aa:93:46:35:3c:4e:69:
                    27:e6:6b:a2:b5:39:79:cd:ef:99:1e:6e:d5:8b:14:
                    1c:7b:eb:e7:61:84:11:65:5f:78:f1:43:7a:00:a2:
                    c6:f4:63:3e:cb:60:c6:1a:46:65:d6:6c:ef:2d:6c:
                    00:04:b9:ab:54:bb:c1:f4:98:a7:23:fb:f3:1e:20:
                    2b:97:b3:e5:7e:44:8b:f7:68:88:47:da:ed:c1:81:
                    e8:b9:8d:ab:cf:fb:76:27:f9:8a:6a:8e:5a:85:b5:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FC:19:6F:FF:15:38:A8:73:14:EE:E3:C8:5C:3B:D8:A8:AF:A7:F0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e39342e302f32342d3234203d3e20313437313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:bf:0a:b5:58:02:24:7d:f3:a3:11:09:4b:26:c6:79:a1:94:
         cd:a4:5c:63:a0:ff:6d:e9:fb:60:f0:ba:07:a6:ca:57:c6:9e:
         b1:16:36:99:bf:12:6d:da:96:68:55:2a:20:53:e2:aa:fb:82:
         aa:47:d9:70:e4:65:fa:e2:0a:5a:ab:bd:e6:ae:f0:04:00:e6:
         26:62:bd:43:36:48:6e:47:e1:5d:72:84:96:61:b6:38:46:05:
         5c:6e:ea:b9:dd:3d:aa:7a:0c:7c:a1:9b:e6:3c:ea:d8:d7:b2:
         3d:a2:52:ae:c5:3b:62:2d:16:a2:ff:72:16:a7:1d:68:40:36:
         a7:d3:62:cd:0b:34:10:22:0d:cb:35:20:d5:57:af:7e:55:e6:
         84:8c:e0:8b:2c:5f:05:d0:1c:b0:06:36:42:9e:12:86:3b:74:
         a8:0b:21:25:21:be:67:a4:99:da:d8:ff:a6:9b:fc:95:23:5e:
         d8:a9:db:8c:3a:a4:15:f0:99:2d:b3:12:74:57:db:d8:ae:53:
         b2:b2:b9:3e:3f:aa:1b:75:8f:2d:a9:2e:d5:2f:76:58:62:57:
         dc:96:d1:1c:b6:3b:10:fe:b8:2f:3d:29:b3:96:f3:6d:e9:bb:
         6a:65:40:db:11:05:07:0b:4c:59:bd:bc:d9:8c:4e:fb:b7:81:
         01:30:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org