Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e33312e33322e302f32332d3234203d3e2030.roa
File:                     3130332e33312e33322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          UztPe3ExGbc2jQdP4AUqIrwD5y+h1ZEHnbPM3ppidbI=
Subject key identifier:   F0:99:E9:8F:8D:B5:41:30:A1:66:F5:15:64:C9:AB:EC:67:D0:A2:E3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6C550E4A8A1AC5384DE2C137CEA8AE54B98068B3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e33312e33322e302f32332d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:27:48 +0000
ROA not before:           Wed 02 Feb 2022 06:22:48 +0000
ROA not after:            Thu 02 Feb 2023 06:27:48 +0000
asID:                     0
IP address blocks:        103.31.32.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:55:0e:4a:8a:1a:c5:38:4d:e2:c1:37:ce:a8:ae:54:b9:80:68:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:22:48 2022 GMT
            Not After : Feb  2 06:27:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:d7:77:84:83:4b:ab:7f:5b:58:db:3d:ce:
                    1f:58:46:b1:45:84:70:6b:23:98:e1:9b:8a:9e:50:
                    2b:e1:19:8c:1a:2e:08:56:ee:05:59:67:dd:4c:b2:
                    60:cd:10:d6:af:9e:58:9d:c8:c3:e4:9a:15:c2:0b:
                    16:e3:d7:10:08:ef:45:da:98:dc:3a:71:4a:92:b1:
                    ef:9b:21:bb:83:70:ab:8e:ca:41:cc:2e:8b:ea:f0:
                    a3:bd:18:7b:c0:d4:9a:e6:13:28:e9:3c:0d:29:7a:
                    b3:12:05:10:27:ea:4d:0d:80:8f:2f:15:56:9f:b1:
                    f7:53:db:c2:05:8e:d2:38:22:06:3b:fc:24:51:a0:
                    04:01:30:30:a1:1e:75:7d:1c:3c:3c:64:9f:f6:ac:
                    6b:be:bc:86:f2:01:77:49:44:98:35:cd:43:e8:33:
                    4f:32:9c:0e:fa:e6:fb:4c:03:38:b2:e0:d4:3e:f4:
                    e6:2a:28:0e:f5:27:8d:a5:ce:57:98:a0:ca:71:1a:
                    b9:c1:f4:3a:41:42:47:7f:df:20:ea:5d:7e:23:69:
                    7b:19:f0:e8:54:d2:de:57:10:e9:60:6f:cf:38:bf:
                    08:28:98:91:3e:d9:a5:b3:55:94:21:6c:10:ce:9e:
                    af:f4:59:3e:13:11:eb:a5:2d:e5:fa:43:df:0f:3d:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:99:E9:8F:8D:B5:41:30:A1:66:F5:15:64:C9:AB:EC:67:D0:A2:E3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e33312e33322e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:08:5f:9d:7d:91:21:5b:a7:f8:de:f6:ca:3d:29:c2:2f:bb:
         e3:08:f5:66:4c:63:7e:0e:ed:73:69:13:ba:d9:9f:83:4e:2b:
         b7:18:bd:67:27:4b:45:15:fd:79:fe:e6:93:7b:5e:66:41:0d:
         d6:e3:fb:c4:43:b2:72:cd:4f:17:48:16:d0:4e:5b:da:6c:dc:
         bd:90:cd:f2:2f:ee:4c:71:c9:a6:c5:90:dc:6d:81:9f:22:e8:
         8f:48:43:61:fe:f3:38:fc:a0:fc:44:72:4f:c7:da:db:f7:bb:
         f5:03:ee:9c:5d:1b:7a:16:e4:2f:3b:c1:94:0f:cb:91:29:76:
         60:20:53:7e:7b:17:07:be:2d:d9:e0:a3:67:ef:67:34:c2:4e:
         78:2f:d6:9a:87:74:81:3e:94:5a:69:af:fb:36:d9:be:30:ee:
         f5:2c:0e:36:a9:4c:e5:6c:65:57:43:e6:32:37:60:d7:97:17:
         b6:ad:c7:4d:03:18:e2:1a:39:f1:bf:92:d2:87:45:c6:ca:35:
         91:91:38:49:64:1c:e7:2a:d7:ec:a6:e7:72:2f:e2:16:ab:19:
         d9:2f:36:69:ae:0a:1c:bf:ec:e2:2b:dc:8b:fe:d9:da:bb:a1:
         63:40:12:db:17:d1:de:a6:2d:72:a9:31:ea:c7:4e:52:5a:24:
         1c:ca:ce:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org