Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3139322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3139322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          CM60D1dK1o3hKPMYMczg3m3IL2Ql+JVs19WoEAHwLJ8=
Subject key identifier:   F0:CF:FD:1C:40:30:0A:7D:06:F3:1E:48:88:F8:95:DB:5B:59:8C:00
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4AE436706AABDA9BEBE1F43D96D9721930F81DE5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3139322e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:28 +0000
ROA not before:           Thu 03 Mar 2022 07:20:28 +0000
ROA not after:            Fri 03 Mar 2023 07:25:28 +0000
asID:                     17995
IP address blocks:        103.182.192.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e4:36:70:6a:ab:da:9b:eb:e1:f4:3d:96:d9:72:19:30:f8:1d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:28 2022 GMT
            Not After : Mar  3 07:25:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:36:2f:24:9c:49:d5:ca:f0:a1:65:8e:69:
                    21:e0:60:25:06:34:82:26:65:ac:e4:15:ff:37:82:
                    51:e9:e2:9a:73:2b:41:85:01:38:2f:16:e6:b6:f6:
                    1a:2e:10:07:d5:13:bd:b8:d5:30:86:7f:d5:79:1b:
                    e2:ca:f9:07:38:16:56:36:c3:07:18:f5:58:29:8d:
                    b0:ea:07:ce:f7:4a:07:94:b9:7d:ec:f7:8c:c8:f7:
                    39:11:43:05:7c:ab:47:e0:77:07:09:21:a1:b8:1c:
                    71:04:af:35:56:05:ca:d9:2c:73:a9:d0:98:69:0d:
                    b0:b0:60:01:57:dc:1b:ae:ca:a8:8b:00:05:3a:88:
                    06:bd:49:5f:33:d2:13:f2:29:53:03:cf:15:53:4b:
                    5e:0e:b5:4d:1b:50:ba:91:4c:ff:59:9e:c7:4c:28:
                    8c:86:cb:7e:81:94:b5:ad:ef:68:af:c6:9e:25:f8:
                    85:ff:f4:a8:32:0c:59:02:39:3f:16:38:90:7a:9f:
                    72:54:da:f1:e6:00:12:4f:d5:5b:07:55:02:fe:d0:
                    07:ff:51:25:0d:1b:92:1d:62:d8:14:b4:77:17:b7:
                    03:a7:3b:f4:04:fb:cb:65:5b:8f:42:2b:0c:43:f3:
                    18:a1:30:1b:f7:3a:77:9f:b6:37:32:58:db:cc:8d:
                    60:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CF:FD:1C:40:30:0A:7D:06:F3:1E:48:88:F8:95:DB:5B:59:8C:00
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3139322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:4b:cc:5a:ae:2e:b9:83:6a:6f:b7:17:98:b7:b1:1d:f5:7f:
         94:db:2a:81:4b:7a:88:09:2a:d6:a2:58:c5:33:93:5a:39:e5:
         71:2c:ac:f9:02:6c:44:1c:6e:6d:0b:b9:76:ab:95:0c:15:3d:
         ab:c5:1b:2b:85:37:81:ba:b7:c7:3f:7e:02:b6:4d:db:38:4f:
         e7:d1:72:1c:d0:43:59:24:ec:94:1e:88:87:b5:60:c8:29:c3:
         4f:38:5a:ed:eb:31:5b:d7:12:d8:1f:bc:b7:53:69:69:59:bc:
         c7:04:bf:89:41:73:4a:5e:36:5f:0f:27:9d:84:20:d7:f3:ef:
         41:dc:5e:8f:8e:cd:94:3b:bf:00:7a:9e:c2:ca:19:1e:c8:75:
         7c:23:ab:7c:bf:8d:c9:ff:61:15:ef:14:f0:5c:67:61:a6:88:
         c2:a5:8e:4b:12:8e:52:e6:a5:fa:22:ef:a1:5a:f2:bc:fa:3c:
         41:67:c0:a6:89:bc:73:78:b8:7e:9b:97:28:b5:8f:3c:32:0f:
         ae:7a:70:91:5f:20:b5:d7:45:c1:d4:bd:b0:0e:af:91:64:0a:
         83:04:28:25:7f:9a:0d:02:42:8e:71:11:c8:5b:3d:8b:d9:95:
         4a:fe:11:b6:3d:aa:7f:86:d4:fe:bd:be:61:29:ef:eb:da:05:
         0c:be:06:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org