Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3232382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3232382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          4TOK5amp5llE6JcRqRoXLnA29HoQy6IYdgD7qm40yZA=
Subject key identifier:   90:4F:95:33:20:97:82:5A:C4:D3:F4:FD:1E:76:6A:AE:34:A2:9B:E2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       733B3E71B79F3D55B9E96FAFA5361C96D4047B75
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3232382e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:27 +0000
ROA not before:           Thu 03 Mar 2022 07:20:27 +0000
ROA not after:            Fri 03 Mar 2023 07:25:27 +0000
asID:                     17995
IP address blocks:        103.182.228.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3b:3e:71:b7:9f:3d:55:b9:e9:6f:af:a5:36:1c:96:d4:04:7b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:27 2022 GMT
            Not After : Mar  3 07:25:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:05:90:9c:86:81:a5:7d:05:05:da:40:3e:65:
                    2f:82:9f:2e:45:04:8e:c4:9f:8f:68:b1:3f:9c:4a:
                    d0:d0:2b:33:67:73:57:65:e5:62:ac:28:02:4c:ba:
                    21:61:90:f1:79:d5:39:aa:dd:1f:ac:92:ef:6a:5d:
                    0b:c5:96:f3:f2:42:fb:ff:0b:37:c5:b4:06:ce:ff:
                    7a:9e:88:25:a9:83:77:03:16:67:a6:70:b1:a3:fc:
                    48:bb:d9:0a:fa:a8:68:20:b0:37:04:97:9c:1a:c4:
                    d0:9d:93:0c:a2:b3:48:6a:d9:05:a7:67:bc:c2:f6:
                    cc:cc:12:5b:e9:4d:fc:7f:53:01:14:ed:48:0e:bf:
                    2a:f7:a1:b3:2b:b6:b7:62:5e:86:c7:e5:90:81:21:
                    98:ce:b7:f5:6d:47:92:32:89:ae:b4:45:64:65:42:
                    63:e8:b9:7a:32:89:7b:51:36:0c:9d:c0:9f:8f:a1:
                    52:2f:50:17:e9:90:f1:58:28:6b:dc:38:27:90:b3:
                    d7:0a:f8:17:55:9b:b4:bf:17:38:9b:8b:d4:7c:bb:
                    21:1b:2e:78:bf:c2:08:44:96:6b:00:03:82:8a:75:
                    84:be:60:20:fd:78:82:73:a4:17:bb:96:0d:45:0b:
                    06:17:80:6b:57:61:91:50:c5:22:7d:d2:59:cd:76:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4F:95:33:20:97:82:5A:C4:D3:F4:FD:1E:76:6A:AE:34:A2:9B:E2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3232382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:fe:b0:f5:c4:07:81:7b:24:e4:af:bb:e8:b9:0e:f6:64:e0:
         e5:85:21:3a:5d:53:40:f1:b1:6c:15:0a:df:ca:e7:05:d8:cc:
         1a:a0:61:86:0b:9e:2b:1f:8c:9c:3a:fd:0e:f3:95:e5:5f:9c:
         51:cd:f7:30:88:3b:16:80:a2:91:56:cd:68:6d:33:25:8d:ea:
         00:58:6f:61:db:be:e2:cb:7f:92:e8:36:3c:ed:fc:6f:7d:98:
         71:c8:5f:a2:a7:14:fa:ec:0f:25:9c:f0:4f:d9:9a:1c:0f:ab:
         87:eb:a9:fd:61:78:62:67:53:56:09:27:d0:11:a5:d4:d4:e4:
         fd:b6:4c:5a:b4:7a:6c:f9:2c:c7:4c:c4:5f:6c:b8:9f:0b:0a:
         94:36:07:3b:c0:14:b5:92:8a:a0:ca:55:7f:7a:c6:67:05:c3:
         08:d7:e8:58:cb:b8:f0:f5:27:3a:dc:b0:e5:20:4e:e6:e7:df:
         e9:32:44:ff:89:2c:b6:1d:68:f4:67:a0:f9:22:b1:ae:be:c8:
         c1:30:36:9e:c7:b0:c1:7c:ff:f7:cf:3b:4b:f6:93:ee:9b:71:
         ad:03:95:21:37:f4:ac:9f:58:db:f7:8c:5b:83:15:da:d0:70:
         dc:4a:0f:0b:96:9e:15:34:ce:6d:88:4d:fd:1b:b7:a9:db:75:
         f1:bd:12:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org