Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3235322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3235322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          Q/GokZeLVIfm3s1fxpYbeFf6XjP7l7Dfr1EfTYvrb3I=
Subject key identifier:   A5:5F:EA:BD:30:B4:CF:58:39:36:D0:FB:00:85:B3:F9:2C:5F:E5:FD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6D614ABF267D0716BE66BC2C31C668523D464950
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3235322e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:28 +0000
ROA not before:           Thu 03 Mar 2022 07:20:28 +0000
ROA not after:            Fri 03 Mar 2023 07:25:28 +0000
asID:                     17995
IP address blocks:        103.182.252.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:61:4a:bf:26:7d:07:16:be:66:bc:2c:31:c6:68:52:3d:46:49:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:28 2022 GMT
            Not After : Mar  3 07:25:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:14:4c:bd:fb:ae:ad:94:72:1e:5e:78:77:
                    ea:d3:49:7d:cd:bc:34:c7:8a:53:46:d0:d0:39:6f:
                    81:05:97:2d:81:66:17:8f:e0:69:c2:0b:39:9b:49:
                    e4:9c:bc:d8:b8:42:77:ba:ed:6f:00:94:dd:c7:7e:
                    8d:0f:3b:35:bf:c2:d1:35:4d:d4:13:94:ed:77:98:
                    10:fb:86:d6:e0:1b:f9:db:da:73:21:27:40:b3:fa:
                    4c:be:ab:1d:50:2e:fb:26:68:1c:40:ff:c9:88:e8:
                    d4:63:c9:80:85:47:35:e1:95:f7:dc:28:f0:10:27:
                    16:21:35:0c:98:cd:c6:94:2e:ca:70:7b:e1:9c:ee:
                    bf:e3:3a:91:30:8a:48:22:75:12:08:d6:0b:54:88:
                    32:33:41:d2:64:47:85:a0:5e:ba:06:99:81:71:0b:
                    64:eb:73:00:55:be:9d:fc:32:10:96:6a:f7:38:f8:
                    27:1e:9f:01:0c:06:41:18:1f:1b:0e:27:11:d8:04:
                    64:d9:c3:e0:ac:81:46:5c:a1:ff:09:90:f2:2c:c7:
                    0f:77:d1:f3:89:10:84:fd:11:c7:91:12:1d:98:b8:
                    c1:71:97:ac:84:06:ed:5f:36:7d:fa:a1:d2:9c:d0:
                    36:35:ad:a0:ca:b1:26:62:8e:69:eb:d7:07:02:4a:
                    95:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5F:EA:BD:30:B4:CF:58:39:36:D0:FB:00:85:B3:F9:2C:5F:E5:FD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3235322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:8a:19:37:09:93:b5:88:b7:55:3d:33:68:6d:ac:2a:59:af:
         22:9a:68:ec:69:44:32:3d:31:4b:2b:ed:5d:d6:8f:89:65:b2:
         0e:92:64:d2:c8:ae:e8:6e:e8:7b:df:e7:27:fb:fd:84:aa:47:
         88:eb:af:36:5b:0c:b4:fe:2f:80:35:3d:a8:18:9a:88:43:89:
         1a:62:7d:3f:46:d9:77:4d:1e:00:27:b1:88:be:04:6a:54:7b:
         de:7e:28:fa:2f:ca:98:fa:07:56:fe:f2:98:a3:02:6e:3c:e8:
         18:f0:59:32:db:3f:9a:f9:bd:79:6a:9c:66:ae:23:3a:0b:b2:
         a1:d6:5f:83:0b:33:4e:2b:4d:f4:45:ad:8b:63:b3:30:28:be:
         75:70:5c:7e:42:3c:1a:fe:a0:52:ad:37:bf:95:3e:a5:86:be:
         53:e9:9e:6c:d9:fc:a1:18:cd:21:3c:f2:cd:3c:d4:b4:f3:5c:
         22:eb:2f:b4:fc:72:3e:9f:28:62:a1:b9:b1:55:cd:da:bf:a2:
         d3:8a:78:ce:08:3d:24:56:df:11:32:1d:77:3e:60:61:a8:3d:
         84:22:1c:10:a0:5b:2a:08:74:1d:57:94:af:59:13:4b:be:3a:
         52:ad:68:fe:c6:84:51:f8:85:fe:71:aa:b5:d7:ca:2f:c9:57:
         27:01:94:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org