Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232372e3134342e302f32322d3234203d3e2030.roa
File:                     3130332e3232372e3134342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          pOzofPWUC42Kp6zv1NxWTxuoPfkeI/XiVewaRqXe0wE=
Subject key identifier:   15:8E:26:A1:3D:27:AC:B4:5E:DF:CF:6B:AD:21:DF:06:8E:B1:42:BB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       11943D3F981966BE2DCD9AAB70F49B6B3C850EAA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232372e3134342e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:31:34 +0000
ROA not before:           Wed 02 Feb 2022 06:26:34 +0000
ROA not after:            Thu 02 Feb 2023 06:31:34 +0000
asID:                     0
IP address blocks:        103.227.144.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:94:3d:3f:98:19:66:be:2d:cd:9a:ab:70:f4:9b:6b:3c:85:0e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:26:34 2022 GMT
            Not After : Feb  2 06:31:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:42:c2:e8:b8:f4:25:c5:a4:59:e4:9f:78:
                    09:0d:8a:b8:21:89:71:b5:e2:d9:ec:78:96:16:4c:
                    64:76:62:b9:e1:72:91:50:b2:ab:93:7a:93:96:19:
                    d4:09:c7:b6:5c:12:78:7a:19:23:0a:ce:16:d6:84:
                    91:43:41:b3:d7:d2:51:fd:b0:80:83:78:b8:41:94:
                    c3:6c:f1:9b:48:6c:83:2e:f0:a3:8c:96:06:27:a6:
                    9a:ee:c2:5a:ee:aa:8a:ea:7b:26:c8:d2:91:55:43:
                    f6:b7:9b:66:81:d0:6a:93:15:9f:75:fd:74:bb:a0:
                    41:ba:46:f3:4f:f6:f2:e7:61:4f:28:ab:46:f6:af:
                    20:bb:a3:10:91:aa:0f:94:35:c2:73:1e:f5:94:83:
                    51:d8:5f:b8:e0:48:59:bf:e9:72:75:74:3a:0a:8e:
                    bd:20:69:33:08:01:cf:d4:a8:9a:22:43:5b:e0:54:
                    99:c5:96:07:52:99:a4:c0:f0:55:d0:fb:d0:24:3f:
                    32:98:9c:0a:b4:84:71:fe:87:82:58:24:a6:7f:40:
                    8e:f8:f2:4e:68:80:45:ab:21:09:a1:05:e7:19:05:
                    75:fe:ee:8a:7b:84:68:7e:81:95:98:e0:71:8f:e1:
                    e7:24:69:08:a9:2a:6c:50:b5:41:b6:d2:47:aa:8a:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8E:26:A1:3D:27:AC:B4:5E:DF:CF:6B:AD:21:DF:06:8E:B1:42:BB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232372e3134342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:68:66:e3:e5:50:20:f1:46:f3:8c:5a:09:3f:b2:fe:24:5e:
         c2:74:34:48:2c:f7:fe:bc:26:0e:d1:f2:48:be:8d:14:c2:c4:
         8c:0a:8f:13:c9:98:0b:ae:dc:1d:c5:5c:2d:2e:96:1e:a5:93:
         72:8c:11:0a:c4:ce:51:d0:39:30:60:f8:82:28:cb:13:78:00:
         10:93:04:9e:48:2e:c8:2d:11:f6:df:7c:c9:4b:ad:e8:3b:1d:
         8d:88:64:7f:0a:1f:8e:ae:23:3a:8b:29:88:52:e8:5f:56:cf:
         47:5d:04:03:21:fa:68:30:4d:4b:53:8d:c0:b5:51:6d:7a:7f:
         2e:c4:29:5b:be:ed:cb:00:a2:e8:ce:76:37:fc:be:96:43:9b:
         70:44:34:36:67:39:a4:6e:73:2e:69:65:b2:4f:78:94:78:e4:
         97:f8:9b:9c:6f:bd:e0:9d:9a:8b:85:a4:b1:6e:55:f9:75:6b:
         6d:8f:ac:af:67:69:17:5d:ed:51:d2:1f:84:cf:07:d2:56:22:
         32:dc:25:c9:11:be:52:ac:96:5a:2b:54:0c:44:35:97:75:d1:
         f5:ac:ed:97:ab:e2:6d:85:66:3b:d7:6f:77:3f:d9:7f:c6:4f:
         90:fd:d1:e8:d3:49:6b:8a:ef:b7:7e:d7:fd:13:fd:0e:12:d6:
         9d:be:16:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org