Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e39352e302f32342d3234203d3e20313430343031.roa
File:                     3130332e3137362e39352e302f32342d3234203d3e20313430343031.roa (raw, json)
Hash identifier:          jgVUQ0FwcpPjLcFtHjj3309yIVoyA7wYn9smUoc7vgg=
Subject key identifier:   42:FC:0D:D0:08:25:8B:7A:6B:9E:E2:AC:0B:85:F3:E9:D5:C2:85:B4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7CF3B1DED97A74AA6889C1259E91937F4ED469D0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e39352e302f32342d3234203d3e20313430343031.roa
Signing time:             Thu 09 Dec 2021 03:45:01 +0000
ROA not before:           Thu 09 Dec 2021 03:40:01 +0000
ROA not after:            Fri 09 Dec 2022 03:45:01 +0000
asID:                     140401
IP address blocks:        103.176.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f3:b1:de:d9:7a:74:aa:68:89:c1:25:9e:91:93:7f:4e:d4:69:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  9 03:40:01 2021 GMT
            Not After : Dec  9 03:45:01 2022 GMT
        Subject: CN=3082010A0282010100BE07E8A594F556142F2941F30B64C705D0D11A7E2DD72ECF0CF369EE9787F98E33B8E5BA21140897A532C860FC413030691C0FE68B299F015B2F541441FECC81CE11116457660B3C93DC4D1320A21C644A28A5011239C60BCEFE82E392F4464D45E3913D69071F304058CBE3C49754594EDE04FBB686332C0640360E974944AD5657284E38B737D07EF57F9349BDB2C082147E9A56A95E3A298FB51B2D87FE86C76A1B94C964C831B0AD76561AF9C9701270D16C3C24B2E27984B573E99F084846DAE8B65A8322606E168EC7910E6F20D8B3B0F6D4976EC78BE49D9DCE74D62F4D7CA4EA7E11928136A0AB171C0F710FEA561EDFF409E49B7731939D3299E4170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:e8:a5:94:f5:56:14:2f:29:41:f3:0b:64:
                    c7:05:d0:d1:1a:7e:2d:d7:2e:cf:0c:f3:69:ee:97:
                    87:f9:8e:33:b8:e5:ba:21:14:08:97:a5:32:c8:60:
                    fc:41:30:30:69:1c:0f:e6:8b:29:9f:01:5b:2f:54:
                    14:41:fe:cc:81:ce:11:11:64:57:66:0b:3c:93:dc:
                    4d:13:20:a2:1c:64:4a:28:a5:01:12:39:c6:0b:ce:
                    fe:82:e3:92:f4:46:4d:45:e3:91:3d:69:07:1f:30:
                    40:58:cb:e3:c4:97:54:59:4e:de:04:fb:b6:86:33:
                    2c:06:40:36:0e:97:49:44:ad:56:57:28:4e:38:b7:
                    37:d0:7e:f5:7f:93:49:bd:b2:c0:82:14:7e:9a:56:
                    a9:5e:3a:29:8f:b5:1b:2d:87:fe:86:c7:6a:1b:94:
                    c9:64:c8:31:b0:ad:76:56:1a:f9:c9:70:12:70:d1:
                    6c:3c:24:b2:e2:79:84:b5:73:e9:9f:08:48:46:da:
                    e8:b6:5a:83:22:60:6e:16:8e:c7:91:0e:6f:20:d8:
                    b3:b0:f6:d4:97:6e:c7:8b:e4:9d:9d:ce:74:d6:2f:
                    4d:7c:a4:ea:7e:11:92:81:36:a0:ab:17:1c:0f:71:
                    0f:ea:56:1e:df:f4:09:e4:9b:77:31:93:9d:32:99:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FC:0D:D0:08:25:8B:7A:6B:9E:E2:AC:0B:85:F3:E9:D5:C2:85:B4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e39352e302f32342d3234203d3e20313430343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:de:52:7e:03:98:e1:66:29:42:cc:25:1f:4f:c3:c2:ce:5e:
         5c:6e:d8:a9:a1:8e:43:5e:54:df:cd:30:01:5d:02:90:1c:5c:
         aa:54:70:81:1d:f6:8f:7a:c6:82:2c:14:14:cf:5e:fc:75:8e:
         96:da:57:a5:64:d3:65:3b:42:7d:fc:13:dd:19:e6:1b:56:7a:
         c0:d9:2c:10:69:c1:72:88:f0:32:c5:71:e3:d5:54:fe:11:f9:
         70:0b:30:15:f1:a2:2e:c7:d1:f8:5b:1c:c8:ef:ac:b2:68:ae:
         31:76:3f:7c:d7:c8:2e:1d:66:c5:2e:43:a2:03:f2:9d:8e:c6:
         89:5f:f5:44:21:03:1c:fa:89:f8:8c:ba:ee:93:0c:f3:b4:6a:
         df:4e:2a:f4:1d:99:54:4a:67:7d:f9:84:c0:de:bd:9e:99:b1:
         dd:8c:02:c1:b8:da:b7:f6:ef:6c:9a:99:ff:01:4c:df:06:13:
         d6:da:94:dc:1e:83:96:3d:f2:24:ca:f8:d5:3c:f5:bb:93:f6:
         04:7d:14:26:38:10:f5:84:36:f0:0c:ba:c0:ad:8b:ca:f3:30:
         8f:30:40:38:ca:87:67:7e:3b:59:d9:25:fb:05:e3:3b:19:42:
         2b:43:3b:a4:4e:c3:f7:b6:a4:60:14:88:4f:82:6b:bd:5f:ee:
         ac:79:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org