Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34332e36362e302f32332d3234203d3e2030.roa
File:                     3130332e34332e36362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          bRTbUw0+X5IeRW0vw+0Gz1msrIT9f7b6tF5AnxjWZhc=
Subject key identifier:   04:82:B9:75:B7:65:12:73:7C:D4:F1:E3:3E:E4:98:14:06:A6:08:CC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0A86A3658055FB84EAEAA4902AC782C75C4FD608
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34332e36362e302f32332d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:18:07 +0000
ROA not before:           Wed 02 Feb 2022 06:13:07 +0000
ROA not after:            Thu 02 Feb 2023 06:18:07 +0000
asID:                     0
IP address blocks:        103.43.66.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:86:a3:65:80:55:fb:84:ea:ea:a4:90:2a:c7:82:c7:5c:4f:d6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:13:07 2022 GMT
            Not After : Feb  2 06:18:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:d5:4c:52:41:2b:d7:b2:0d:ee:56:e4:f8:
                    ce:53:b4:e0:75:3d:7f:78:c9:94:66:92:7e:42:85:
                    27:fa:9d:83:33:be:db:44:10:7a:3c:bf:b0:1c:8f:
                    aa:cf:9e:f5:63:0d:ef:79:1e:03:92:5e:28:e9:02:
                    ed:c5:bb:91:99:7f:33:e2:53:4e:0e:78:14:ec:b0:
                    b9:ac:90:a4:77:c0:76:d4:1f:4b:ad:4e:3a:ed:3e:
                    63:7e:fa:d4:b7:9a:7f:1d:fe:89:07:aa:47:b3:6f:
                    c2:42:6e:c3:91:0a:38:26:b5:e8:38:ef:33:ce:0e:
                    f9:a7:0c:5b:61:2b:75:38:97:aa:58:a9:c3:eb:0c:
                    1c:83:77:c7:b3:55:4d:14:c1:1b:c5:5c:3b:6f:b1:
                    77:5f:17:51:6d:83:46:23:03:31:a8:02:35:e1:08:
                    4d:6d:16:d2:37:06:a8:61:3c:7a:62:87:ed:7c:90:
                    fb:fd:5f:91:ed:ca:5a:68:42:bc:a8:d3:d4:78:6b:
                    59:1d:dc:cb:51:52:8f:9f:42:b3:bf:af:51:56:bc:
                    3a:95:e3:c5:2c:f0:b4:bd:aa:85:30:c0:d2:38:4c:
                    5d:21:66:71:a6:34:b2:88:5f:7b:96:16:29:a9:97:
                    00:69:4b:b5:85:67:3e:ec:95:81:b6:e5:41:9b:ec:
                    9d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:82:B9:75:B7:65:12:73:7C:D4:F1:E3:3E:E4:98:14:06:A6:08:CC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34332e36362e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:bc:21:f7:a7:64:93:2d:ce:05:0c:12:55:d2:0a:60:72:be:
         ca:4c:35:ea:1f:70:f1:26:b3:8e:76:38:63:1a:73:f1:34:ed:
         e4:31:a0:6a:d5:2d:e7:f8:68:82:1c:cc:90:92:82:17:07:7f:
         2c:5f:37:f1:f8:e9:88:28:ba:6c:4e:e3:0f:ac:91:19:f5:df:
         92:88:a2:76:ee:4c:84:01:a5:d3:51:2f:6d:58:2e:11:81:68:
         c6:17:01:26:9e:22:94:67:25:23:00:57:2f:81:7a:f7:db:d0:
         1d:9d:bd:d9:be:c6:cd:cc:d8:df:95:ef:8e:f8:27:a0:da:82:
         f8:70:fd:46:63:2f:55:a5:7f:38:39:33:58:cd:19:d8:4e:89:
         f6:6b:3d:e2:87:a7:43:fd:b5:b5:23:db:1f:6a:93:ac:71:29:
         a5:ba:09:d1:cd:70:4a:0a:0a:3f:b1:2d:65:17:9b:c4:14:f5:
         c0:36:d7:8d:c7:85:21:43:65:3e:65:b5:f5:17:40:15:34:52:
         c2:d9:1d:f1:0f:85:60:ca:ba:3a:66:47:a2:d6:bf:b4:db:3c:
         02:5c:6b:0b:fd:b2:17:3c:6b:2f:6d:29:d9:4b:a1:dd:db:76:
         98:ae:78:cd:44:70:2b:ce:03:18:35:fd:72:d8:00:f8:a7:ac:
         18:05:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org