Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e32322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138332e32322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          yfRCtDNYT3NGaC6JWBaQfrdyA9bGBx1K+BQwUdvJebQ=
Subject key identifier:   3C:A7:E2:6B:AD:C1:7B:F0:B3:05:2B:64:55:E2:69:E0:C3:4A:50:5F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       161CFB08DE548057BCF3AF096ADD21450C142D49
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e32322e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:25 +0000
ROA not before:           Thu 03 Mar 2022 07:20:25 +0000
ROA not after:            Fri 03 Mar 2023 07:25:25 +0000
asID:                     17995
IP address blocks:        103.183.22.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1c:fb:08:de:54:80:57:bc:f3:af:09:6a:dd:21:45:0c:14:2d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:25 2022 GMT
            Not After : Mar  3 07:25:25 2023 GMT
        Subject: CN=3082010A0282010100B17F07395EC73EBBA686945BFA60E030A2CD1066F7EFB6EBB24FDAB67FEFC856761BBCDD8561031B9D0E6DB486F7D20A3AD260593B4A3C19D03A22EE9E9A2B60C63D3C7989C254DFBE1DD192610CCA40FFF87F887D6505D9F8F77DA9AD843794984F5FC33AE6B7ED9EEDBDE812880713F020336C1399FFD0E81108E315F94AB6B38FBCC50FE6A53FAA6E885F51E5BF55102497E58450A000AF98F6D4C4EFA240D62BCFDA936F2802403E50F23787F9BFD13682A5413314E82EB6CF11F26C1C57B9628BA0997419103DB54068B7D97376A178CC606AB8E8757B561AC583CFF5CC13A78722E1FC936A5F09FF1075E12EF345631975CE24AE0C7190FB5D37D715FD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:07:39:5e:c7:3e:bb:a6:86:94:5b:fa:60:
                    e0:30:a2:cd:10:66:f7:ef:b6:eb:b2:4f:da:b6:7f:
                    ef:c8:56:76:1b:bc:dd:85:61:03:1b:9d:0e:6d:b4:
                    86:f7:d2:0a:3a:d2:60:59:3b:4a:3c:19:d0:3a:22:
                    ee:9e:9a:2b:60:c6:3d:3c:79:89:c2:54:df:be:1d:
                    d1:92:61:0c:ca:40:ff:f8:7f:88:7d:65:05:d9:f8:
                    f7:7d:a9:ad:84:37:94:98:4f:5f:c3:3a:e6:b7:ed:
                    9e:ed:bd:e8:12:88:07:13:f0:20:33:6c:13:99:ff:
                    d0:e8:11:08:e3:15:f9:4a:b6:b3:8f:bc:c5:0f:e6:
                    a5:3f:aa:6e:88:5f:51:e5:bf:55:10:24:97:e5:84:
                    50:a0:00:af:98:f6:d4:c4:ef:a2:40:d6:2b:cf:da:
                    93:6f:28:02:40:3e:50:f2:37:87:f9:bf:d1:36:82:
                    a5:41:33:14:e8:2e:b6:cf:11:f2:6c:1c:57:b9:62:
                    8b:a0:99:74:19:10:3d:b5:40:68:b7:d9:73:76:a1:
                    78:cc:60:6a:b8:e8:75:7b:56:1a:c5:83:cf:f5:cc:
                    13:a7:87:22:e1:fc:93:6a:5f:09:ff:10:75:e1:2e:
                    f3:45:63:19:75:ce:24:ae:0c:71:90:fb:5d:37:d7:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A7:E2:6B:AD:C1:7B:F0:B3:05:2B:64:55:E2:69:E0:C3:4A:50:5F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e32322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:3b:93:77:67:ef:db:5c:e9:82:00:ee:a6:80:93:7f:f8:fd:
         30:4a:11:8b:18:81:cf:04:b4:d8:e2:d8:51:5a:47:16:8f:37:
         be:9e:fb:e2:72:62:d9:62:5b:9c:32:d2:c0:d0:1d:a9:95:0e:
         c3:bc:83:09:38:87:c3:ed:d5:43:56:cd:a9:7a:37:b0:c4:7d:
         00:6b:2a:71:30:33:9d:64:fd:54:77:2f:85:6d:49:6a:58:7f:
         48:8b:15:20:e0:6a:bb:19:80:b3:34:6b:2b:d2:1c:4d:33:d0:
         9e:8d:b2:58:61:54:57:2a:a6:f8:04:54:ee:9c:b1:68:aa:e9:
         fc:a7:3f:9a:d2:dc:e6:18:23:77:3b:69:ac:c2:6d:82:de:59:
         b2:65:ae:ee:5e:45:93:c3:74:cb:9c:5c:0e:e1:99:10:09:b7:
         43:48:92:6d:30:25:05:18:eb:a2:3a:c4:25:65:e1:b2:d1:cb:
         7c:dd:49:0a:17:96:1a:49:8b:07:c8:ca:e7:bd:a1:32:96:fb:
         b2:30:df:ae:23:ed:f4:7d:3c:65:58:25:e3:10:b0:ee:da:02:
         51:c1:d4:3c:01:8e:8e:2c:b7:f3:69:01:5b:da:a1:e1:ba:b4:
         f2:08:0a:90:61:bf:96:af:78:ff:51:a5:00:40:df:99:3c:a8:
         24:24:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org