Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e31342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138332e31342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          aN6SrNLe2eas8FYHZhIf/JaruceL+p9rj3RSViRuaKA=
Subject key identifier:   BB:C7:3B:CC:CD:B0:E7:6C:8D:35:A3:82:67:42:F6:F9:40:83:DA:06
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       79DF7B2C92F2846924CDAEE1DCA9ECCCCC8B4947
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e31342e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:28 +0000
ROA not before:           Thu 03 Mar 2022 07:20:28 +0000
ROA not after:            Fri 03 Mar 2023 07:25:28 +0000
asID:                     17995
IP address blocks:        103.183.14.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:df:7b:2c:92:f2:84:69:24:cd:ae:e1:dc:a9:ec:cc:cc:8b:49:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:28 2022 GMT
            Not After : Mar  3 07:25:28 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:30:0e:c1:d7:ef:ab:46:48:ff:ea:a9:41:
                    bc:52:da:92:02:6c:68:63:93:1f:45:08:5e:ca:91:
                    7a:eb:d0:1a:7b:2e:c5:e9:a2:f3:44:44:03:f0:ad:
                    62:12:6d:6a:8f:8b:24:f9:c2:78:8e:3a:38:ac:63:
                    8c:82:47:b6:be:98:d6:a9:2e:7c:b3:c7:9c:21:dc:
                    a2:57:46:23:83:3c:17:ba:6f:ac:66:79:2d:39:d0:
                    2d:ea:52:40:84:48:9b:b5:a0:73:09:64:27:e0:c2:
                    ee:d0:fa:7b:c6:2f:54:ff:92:c9:4b:48:82:04:c9:
                    ad:35:26:9a:fb:c7:86:85:f5:81:6d:aa:5a:56:fe:
                    5e:69:cf:77:bb:e3:f9:14:f6:95:95:30:9f:ca:51:
                    e9:10:6e:5d:d8:dd:cb:c5:3a:7c:1c:b4:e9:bb:c3:
                    27:bc:6a:df:67:c5:d9:47:57:ca:84:d2:25:97:e0:
                    da:c3:62:b6:38:9c:d9:bf:bb:f9:56:e1:e0:24:3b:
                    80:ab:91:9b:2b:1d:c8:1d:62:db:32:34:42:d1:be:
                    c0:23:ec:9c:ea:53:5c:af:21:fc:a0:c6:22:2b:be:
                    b5:97:b6:23:42:9f:88:2c:32:cf:1c:00:da:61:e2:
                    ee:85:da:bb:23:47:17:dd:79:fa:4b:5d:d5:3e:5d:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C7:3B:CC:CD:B0:E7:6C:8D:35:A3:82:67:42:F6:F9:40:83:DA:06
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e31342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:02:2f:76:68:ad:98:89:e6:9d:83:5f:44:98:b4:32:e4:8f:
         1f:d1:ba:a3:93:2f:8e:fb:15:f4:e1:d9:07:a4:30:02:ea:ae:
         09:79:ab:76:d3:23:13:97:07:ee:55:07:ff:f5:4f:22:be:e4:
         0e:ff:e3:ec:59:fd:ea:ce:49:91:5d:0b:d5:51:b3:da:96:73:
         ec:5e:4c:6f:5f:5e:4e:99:0f:83:76:ce:77:77:11:65:26:b0:
         86:c8:71:ef:c0:5e:a5:a1:2c:6e:4b:60:f7:d1:a2:1f:1f:ae:
         db:87:2b:a1:01:5a:a8:c6:94:04:50:9d:84:6d:0b:62:88:9d:
         39:14:b2:33:36:5d:25:33:4b:39:1e:81:ff:4c:20:fb:4e:55:
         cc:3b:45:0d:7d:54:46:6e:11:9a:cb:50:94:fc:22:c3:5c:cf:
         f6:1c:04:7e:ea:2f:7a:36:08:f6:bf:39:cf:69:cf:1f:99:15:
         a1:7c:4d:94:2b:29:38:b4:c2:83:00:dd:22:80:9a:38:5b:bf:
         1c:a4:a8:33:c5:62:21:ea:f5:78:60:ee:53:75:6d:20:98:f6:
         9e:aa:39:31:b2:51:eb:f7:52:da:a1:de:20:13:6e:59:0d:96:
         56:87:fe:b6:fb:09:22:94:9c:ad:7f:57:e9:10:c0:71:43:73:
         87:fe:f3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org