Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e32302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138332e32302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          XaeBBywzF33S+ablPHpHdBB4LmVku8oWoZmuY8RMeSI=
Subject key identifier:   E7:5D:B5:AF:26:F8:61:BE:B7:33:5C:3F:8E:8B:97:C6:9D:81:16:DE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       771A1F99CE28DEE8099EB5CE7DA3B357888F34AE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e32302e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:25 +0000
ROA not before:           Thu 03 Mar 2022 07:20:25 +0000
ROA not after:            Fri 03 Mar 2023 07:25:25 +0000
asID:                     17995
IP address blocks:        103.183.20.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1a:1f:99:ce:28:de:e8:09:9e:b5:ce:7d:a3:b3:57:88:8f:34:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:25 2022 GMT
            Not After : Mar  3 07:25:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:de:d4:1e:4c:a6:1e:a6:a5:ed:8c:d8:ba:83:
                    99:86:33:74:7d:c2:d1:2e:04:69:48:65:d6:7e:13:
                    fa:49:fb:91:26:5f:4d:6b:90:96:15:c8:17:c4:69:
                    bb:d9:b6:3d:f5:1a:c3:4f:05:c9:3a:1c:9e:c7:f2:
                    46:dd:8b:bf:04:34:64:54:a9:8b:b4:67:2b:08:62:
                    27:f6:3b:dc:39:ab:7c:0a:24:f4:ea:cb:49:20:c6:
                    19:93:92:67:ee:48:fe:1e:bf:2c:64:f7:b5:5d:59:
                    eb:14:90:87:e1:8a:79:83:d3:71:8e:c8:81:26:e2:
                    e4:4b:13:ec:c4:57:6a:ba:2b:ee:89:b7:ed:04:8d:
                    ad:b1:2f:85:71:f1:bd:47:48:32:cd:b4:40:d1:65:
                    34:84:bb:82:44:f3:64:e9:88:3b:42:3b:97:e1:cb:
                    4a:35:ea:1d:db:90:fe:35:0b:57:c5:58:a3:b6:ae:
                    71:1a:2b:91:9a:43:16:4a:87:53:e6:72:06:4c:db:
                    9e:93:1d:46:36:39:62:ea:90:7b:98:ba:c9:1c:d0:
                    5f:dd:4d:e3:8e:80:97:d9:db:31:66:20:c2:8a:04:
                    d8:39:b4:f0:d0:4b:41:03:c1:70:8b:7e:50:ee:40:
                    ed:38:3f:0c:b3:dc:60:3c:9f:46:7d:79:4f:a9:2d:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5D:B5:AF:26:F8:61:BE:B7:33:5C:3F:8E:8B:97:C6:9D:81:16:DE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e32302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:a9:36:1f:21:7d:60:90:30:fe:11:0e:14:d0:88:cf:ec:
         91:1d:b4:e3:a4:18:a5:57:b7:e3:af:a3:e9:15:0c:27:40:31:
         d4:02:b9:e3:c1:75:32:c5:aa:5f:a8:44:0d:a0:10:f5:67:5c:
         ae:dc:c4:79:73:ba:97:f6:9f:6e:0a:b4:ae:c7:61:8f:ba:e3:
         1e:08:83:eb:a3:f0:0e:a1:28:fc:43:c1:1e:03:0b:d4:07:94:
         96:d2:98:64:a3:b2:77:cd:01:10:6f:36:61:f1:a2:b5:9f:f4:
         23:f4:d8:e8:d0:d1:83:16:da:ef:5b:0d:0e:2f:41:fc:1e:13:
         91:bc:0a:c2:c2:5c:3f:df:d9:e4:68:9c:e7:f7:99:a9:b3:75:
         48:62:e9:42:1c:7a:e5:f9:81:5d:d1:4c:fa:be:7d:67:aa:ed:
         e9:9a:e5:2c:d0:b5:91:77:10:74:ea:71:44:1b:6a:15:0f:1d:
         7d:97:c3:7c:8b:95:d9:4e:a5:87:1f:a9:4b:6d:ac:00:8a:d8:
         35:95:69:b1:13:ae:fa:86:61:77:45:d5:b8:b9:f3:00:7d:a1:
         84:a9:7b:dd:d9:9d:61:21:7f:1a:d4:f8:27:c1:ea:ce:44:d2:
         c9:59:a9:8c:7e:a1:0f:b4:6c:a5:2a:8d:10:cc:16:f2:50:8e:
         b3:60:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org