Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139382e3131362e302f32322d3234203d3e2030.roa
File:                     3130332e3139382e3131362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          +UKyhpbx2CtC5mWFf4WGzT1wbiX6/g6esjwM79hyUao=
Subject key identifier:   9F:8F:3B:B2:15:36:55:64:3F:45:36:72:24:F4:32:5E:C4:95:B9:94
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       257361A29716A4689DDAA7DAC616507A425A8495
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139382e3131362e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:34:06 +0000
ROA not before:           Wed 02 Feb 2022 06:29:06 +0000
ROA not after:            Thu 02 Feb 2023 06:34:06 +0000
asID:                     0
IP address blocks:        103.198.116.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:73:61:a2:97:16:a4:68:9d:da:a7:da:c6:16:50:7a:42:5a:84:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:29:06 2022 GMT
            Not After : Feb  2 06:34:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:d9:4e:a3:09:f0:91:10:28:02:0a:1f:fd:
                    9b:4c:cd:e5:f4:ff:06:eb:8f:b6:35:a5:0c:70:88:
                    a5:b2:c8:58:13:46:65:d2:92:69:bb:e9:93:ae:cd:
                    a9:2c:b9:e4:ac:45:da:89:6b:63:e1:48:7d:22:14:
                    45:91:35:fb:cf:0c:3e:b6:af:c0:40:15:b8:e3:81:
                    5a:55:ea:ed:d4:5f:62:95:46:ed:b0:40:07:b1:31:
                    ba:af:5a:b0:38:ce:e1:34:3c:61:17:44:41:a2:9a:
                    1d:cf:2d:e1:5a:45:c7:09:1e:84:49:3a:48:b5:43:
                    42:8e:27:13:c1:44:67:c3:ac:b5:48:54:0d:ce:21:
                    d2:bb:79:6a:5e:fb:06:e1:6a:ee:a9:ce:81:31:bc:
                    a0:b1:d8:4d:db:fc:89:7e:e6:07:d9:8d:80:59:5d:
                    73:2c:ac:d2:16:53:42:1e:b7:05:c5:4c:36:44:04:
                    f2:ab:a8:87:89:52:25:64:06:8a:1c:2b:41:60:0f:
                    ed:12:d8:1a:fc:4f:23:f5:79:0e:87:c0:d6:cc:56:
                    49:e0:7c:d1:62:34:27:10:a9:95:a1:11:86:55:0a:
                    1f:40:d0:e4:e3:5d:c9:53:a5:88:70:58:73:94:0d:
                    54:f4:aa:73:44:82:b7:27:b2:48:34:70:ef:01:3b:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8F:3B:B2:15:36:55:64:3F:45:36:72:24:F4:32:5E:C4:95:B9:94
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3139382e3131362e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:36:50:77:f6:5a:30:85:69:8a:98:c8:21:ef:bf:4c:c3:b5:
         97:ac:72:3c:bb:f8:bc:d7:75:c6:ec:53:55:6a:31:ca:ef:1c:
         62:97:78:84:b3:c5:69:71:d3:75:2a:0f:44:73:ed:4d:b1:fa:
         a8:a9:67:3f:35:d2:6c:df:ca:f6:9f:f4:2f:69:b7:43:e7:38:
         4c:d2:22:83:d0:b1:69:8d:33:ec:5c:73:56:bd:07:f1:b2:41:
         18:01:a4:5e:ad:dd:8e:86:12:e7:99:8c:b5:30:af:5a:b8:a4:
         0f:4e:7c:64:b1:fc:47:c8:34:cb:4b:1d:e6:95:90:7b:8a:d1:
         8c:b8:ec:f5:54:1d:08:aa:36:f2:a1:13:3c:50:16:7d:1d:0a:
         f6:3a:64:20:07:9f:77:69:f1:3d:6d:12:23:ac:cd:f5:d8:25:
         de:9d:7f:78:d5:87:69:db:15:0f:7d:ce:14:ff:e2:df:5b:6d:
         97:c2:e1:06:61:02:68:a4:9c:99:b1:f3:5f:31:a4:be:52:75:
         2a:88:b7:85:bd:fa:3f:12:29:7b:c7:f8:b7:34:94:98:82:46:
         12:08:c8:09:15:a3:f2:ab:ac:78:76:d5:65:f8:2e:e4:00:59:
         f5:9b:83:9b:81:a9:de:5e:31:db:e9:8c:df:f8:8b:a4:13:c9:
         9c:e4:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org