Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3139302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3139302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          WtrSIsoKKwIpEm2OSvAlR40YL6eGPHSwub/Gqf1jiD0=
Subject key identifier:   F3:93:3D:4C:3F:6F:53:46:E5:D7:B4:38:86:68:A7:E2:97:CA:25:25
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0B3B5D12BD8D90C03E08657153A9B91DCBDF8520
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3139302e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:25 +0000
ROA not before:           Thu 03 Mar 2022 07:20:25 +0000
ROA not after:            Fri 03 Mar 2023 07:25:25 +0000
asID:                     17995
IP address blocks:        103.182.190.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3b:5d:12:bd:8d:90:c0:3e:08:65:71:53:a9:b9:1d:cb:df:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:25 2022 GMT
            Not After : Mar  3 07:25:25 2023 GMT
        Subject: CN=3082010A0282010100AB5DD9B67130B2D3EE586447F0DBCD8FFE6B580CBCCF38E6775A9B46F347CA5879984687F0FD84E76BDED28C935391F9EF7EB015921DB82641AA1781B2956DE4BE38A1808DA7535C315B6A0B68ED098EB8A5D760099878621CCE0A03316F5B3C076617C6DA1A082BB02F6AF66595219F522FF0EF676452560CC8B214B11A6CDF87EBDD83434ED228F0D247BD6DC121A981B8F560F91011ED517F1B0CAD6E1C9EB83D962839503195DF77CFD708FB2580C51C72F838EA631265867448C086B4159A2AAA5A2549E02F35FFB1C243B78F66EF4CEC60B234A077DB50C98308CAC0598A2A2C8C733C26A6A25361BDAAA2D63CD37B4F7032D0A67DE1B2DE31747ED0650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:d9:b6:71:30:b2:d3:ee:58:64:47:f0:db:
                    cd:8f:fe:6b:58:0c:bc:cf:38:e6:77:5a:9b:46:f3:
                    47:ca:58:79:98:46:87:f0:fd:84:e7:6b:de:d2:8c:
                    93:53:91:f9:ef:7e:b0:15:92:1d:b8:26:41:aa:17:
                    81:b2:95:6d:e4:be:38:a1:80:8d:a7:53:5c:31:5b:
                    6a:0b:68:ed:09:8e:b8:a5:d7:60:09:98:78:62:1c:
                    ce:0a:03:31:6f:5b:3c:07:66:17:c6:da:1a:08:2b:
                    b0:2f:6a:f6:65:95:21:9f:52:2f:f0:ef:67:64:52:
                    56:0c:c8:b2:14:b1:1a:6c:df:87:eb:dd:83:43:4e:
                    d2:28:f0:d2:47:bd:6d:c1:21:a9:81:b8:f5:60:f9:
                    10:11:ed:51:7f:1b:0c:ad:6e:1c:9e:b8:3d:96:28:
                    39:50:31:95:df:77:cf:d7:08:fb:25:80:c5:1c:72:
                    f8:38:ea:63:12:65:86:74:48:c0:86:b4:15:9a:2a:
                    aa:5a:25:49:e0:2f:35:ff:b1:c2:43:b7:8f:66:ef:
                    4c:ec:60:b2:34:a0:77:db:50:c9:83:08:ca:c0:59:
                    8a:2a:2c:8c:73:3c:26:a6:a2:53:61:bd:aa:a2:d6:
                    3c:d3:7b:4f:70:32:d0:a6:7d:e1:b2:de:31:74:7e:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:93:3D:4C:3F:6F:53:46:E5:D7:B4:38:86:68:A7:E2:97:CA:25:25
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3139302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:51:79:4e:10:bb:64:d1:b2:69:b8:5b:46:d8:14:21:d7:91:
         09:a5:f8:74:0c:f1:7c:f6:52:36:ea:ba:fd:a6:fd:a0:43:8c:
         4d:7b:1b:1b:d3:7c:16:6a:9f:e1:56:bf:e4:42:81:4f:cf:2e:
         91:46:1c:46:3a:41:9b:77:66:ee:fb:82:2c:8b:12:44:08:0c:
         98:56:df:73:7c:ae:22:05:82:98:2d:2d:3c:ec:14:67:ba:fd:
         d9:7f:2d:8a:5c:79:e2:c0:07:14:42:19:80:cd:92:45:2a:c6:
         75:70:59:f9:76:29:0d:df:f6:58:bd:f3:07:9b:58:4c:04:03:
         f8:0c:fe:ff:a7:8e:aa:f7:60:b9:21:ec:a7:73:cc:b6:57:30:
         de:d8:d1:f1:4f:6a:2f:ac:a7:6b:c4:5f:f8:9c:dc:c0:8a:78:
         e1:d2:92:12:47:97:b4:76:4a:b3:7a:cb:d3:fe:7e:11:b4:6b:
         ed:de:df:21:3b:f6:35:bf:a7:f4:66:a5:6d:f2:d1:c8:e6:d2:
         25:bc:33:14:86:8d:52:55:a2:39:e0:28:8e:9e:f3:54:32:93:
         1a:a8:dd:89:3f:03:8b:6f:dd:03:15:2b:fd:d2:d4:5b:72:9a:
         85:90:f6:12:66:83:04:63:40:37:f2:f9:62:65:25:64:7e:a4:
         62:7b:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org