Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34342e32362e302f32332d3234203d3e20313333383030.roa
File: 3130332e34342e32362e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: xVUaJr5KeWiDVhemA0RAUwXJV6viJhcuQ9rt900O4uY=
Subject key identifier: 4B:46:D3:28:AE:DE:66:D1:83:28:E4:DB:EB:15:A2:DF:CC:42:5B:EB
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 720DA64F87464948B2AC4E45F1AEA4E0281DB705
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34342e32362e302f32332d3234203d3e20313333383030.roa
Signing time: Sat 09 Oct 2021 07:00:01 +0000
ROA not before: Sat 09 Oct 2021 06:55:01 +0000
ROA not after: Sun 09 Oct 2022 07:00:01 +0000
asID: 133800
IP address blocks: 103.44.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:0d:a6:4f:87:46:49:48:b2:ac:4e:45:f1:ae:a4:e0:28:1d:b7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 9 06:55:01 2021 GMT
Not After : Oct 9 07:00:01 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:82:3f:65:6d:71:ea:2c:78:f8:ca:44:8e:
f8:38:93:a3:b4:9d:03:18:ed:fe:d1:63:1d:94:dd:
5a:53:e9:3f:f6:f5:05:f9:c8:3b:d6:32:cb:f2:f0:
5b:b9:10:a5:71:4f:95:1b:6d:8c:bc:eb:de:5d:1c:
ce:7e:92:a9:ca:d9:14:f3:14:59:77:d8:0a:4b:f7:
4d:f8:ee:b4:73:50:94:8b:72:19:34:09:db:4d:08:
b1:46:e0:e2:3c:7e:46:7e:e9:4c:68:58:15:d1:13:
bf:d5:f1:7a:a0:17:f6:f2:b9:91:01:f0:ca:74:10:
3b:79:c9:6d:b5:cd:6c:29:c3:fd:70:13:8d:2c:b6:
aa:25:2d:e4:51:fd:f9:0d:db:bc:30:ef:5c:ce:84:
c3:46:28:b7:b5:d0:ae:16:e5:16:df:92:23:8d:36:
a4:6e:80:f8:33:18:98:4f:14:06:32:1f:e7:26:41:
36:29:d5:2e:cc:f8:94:b7:00:1e:de:4c:75:39:51:
ee:7f:88:29:2e:b6:ff:80:60:75:e1:3d:1d:2e:d3:
a6:8d:2c:2a:59:6f:31:20:26:93:2f:b5:95:33:7d:
82:4d:0d:7e:a9:71:4d:48:18:71:f1:2f:a1:5a:0b:
b7:fd:23:19:4c:3f:6b:87:a4:11:46:29:a5:5b:fc:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:46:D3:28:AE:DE:66:D1:83:28:E4:DB:EB:15:A2:DF:CC:42:5B:EB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34342e32362e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.26.0/23
Signature Algorithm: sha256WithRSAEncryption
72:4e:fd:79:7b:05:7a:a0:7a:0f:5f:43:8e:a0:9c:fc:77:dd:
d5:ed:72:d7:12:31:e9:84:f5:62:e1:11:0c:da:3b:10:55:67:
2c:41:6f:5a:a8:36:40:c8:b0:5e:06:ba:40:1a:f4:82:b0:50:
86:f1:af:af:25:cb:79:3f:10:d4:6d:56:64:91:84:0f:50:2e:
74:88:78:f4:be:64:6f:95:86:87:d6:0f:1c:29:fe:6c:b4:ab:
51:2d:fd:05:04:b6:91:c4:9b:78:a8:2f:cb:ad:28:a9:81:c2:
7f:2a:c3:2f:de:2f:5c:bc:ae:b9:29:30:82:d9:36:db:df:b1:
a3:3e:d3:c7:d9:a5:b0:8c:c5:35:a6:85:d8:5c:5a:ad:b2:d8:
be:f8:52:4b:44:26:35:af:2b:ef:93:b8:06:8e:f3:87:eb:3d:
ef:fd:89:b1:1f:c6:43:7d:4e:9d:af:a6:56:08:6e:36:14:4c:
4f:f9:31:38:cb:22:14:6d:e1:38:30:eb:d5:18:fe:37:00:46:
a0:86:c9:e2:48:03:18:99:24:30:72:73:77:68:fe:2f:5e:01:
4b:d1:d3:b9:f2:db:22:b9:f1:31:d9:27:cf:46:8f:b3:19:39:
22:dd:48:59:f1:8d:3f:ee:6f:28:f1:76:ae:7c:7b:25:dc:de:
29:56:58:b2
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUcg2mT4dGSUiyrE5F8a6k4CgdtwUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAwOTA2NTUwMVoX
DTIyMTAwOTA3MDAwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMkZFODIzRjY1NkQ3MUVBMkM3OEY4Q0E0NDhFRjgzODkzQTNCNDlEMDMx
OEVERkVEMTYzMUQ5NERENUE1M0U5M0ZGNkY1MDVGOUM4M0JENjMyQ0JGMkYwNUJC
OTEwQTU3MTRGOTUxQjZEOENCQ0VCREU1RDFDQ0U3RTkyQTlDQUQ5MTRGMzE0NTk3
N0Q4MEE0QkY3NERGOEVFQjQ3MzUwOTQ4QjcyMTkzNDA5REI0RDA4QjE0NkUwRTIz
QzdFNDY3RUU5NEM2ODU4MTVEMTEzQkZENUYxN0FBMDE3RjZGMkI5OTEwMUYwQ0E3
NDEwM0I3OUM5NkRCNUNENkMyOUMzRkQ3MDEzOEQyQ0I2QUEyNTJERTQ1MUZERjkw
RERCQkMzMEVGNUNDRTg0QzM0NjI4QjdCNUQwQUUxNkU1MTZERjkyMjM4RDM2QTQ2
RTgwRjgzMzE4OTg0RjE0MDYzMjFGRTcyNjQxMzYyOUQ1MkVDQ0Y4OTRCNzAwMUVE
RTRDNzUzOTUxRUU3Rjg4MjkyRUI2RkY4MDYwNzVFMTNEMUQyRUQzQTY4RDJDMkE1
OTZGMzEyMDI2OTMyRkI1OTUzMzdEODI0RDBEN0VBOTcxNEQ0ODE4NzFGMTJGQTE1
QTBCQjdGRDIzMTk0QzNGNkI4N0E0MTE0NjI5QTU1QkZDMUU0NzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/oI/ZW1x6ix4+MpEjvg4
k6O0nQMY7f7RYx2U3VpT6T/29QX5yDvWMsvy8Fu5EKVxT5UbbYy8695dHM5+kqnK
2RTzFFl32ApL90347rRzUJSLchk0CdtNCLFG4OI8fkZ+6UxoWBXRE7/V8XqgF/by
uZEB8Mp0EDt5yW21zWwpw/1wE40stqolLeRR/fkN27ww71zOhMNGKLe10K4W5Rbf
kiONNqRugPgzGJhPFAYyH+cmQTYp1S7M+JS3AB7eTHU5Ue5/iCkutv+AYHXhPR0u
06aNLCpZbzEgJpMvtZUzfYJNDX6pcU1IGHHxL6FaC7f9IxlMP2uHpBFGKaVb/B5H
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUS0bTKK7eZtGDKOTb6xWi38xCW+swHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzQzNDJlMzIzNjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzMzMzM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcsGjANBgkqhkiG
9w0BAQsFAAOCAQEAck79eXsFeqB6D19DjqCc/Hfd1e1y1xIx6YT1YuERDNo7EFVn
LEFvWqg2QMiwXga6QBr0grBQhvGvryXLeT8Q1G1WZJGED1AudIh49L5kb5WGh9YP
HCn+bLSrUS39BQS2kcSbeKgvy60oqYHCfyrDL94vXLyuuSkwgtk229+xoz7Tx9ml
sIzFNaaF2FxarbLYvvhSS0QmNa8r75O4Bo7zh+s97/2JsR/GQ31Ona+mVghuNhRM
T/kxOMsiFG3hODDr1Rj+NwBGoIbJ4kgDGJkkMHJzd2j+L14BS9HTufLbIrnxMdkn
z0aPsxk5It1IWfGNP+5vKPF2rnx7JdzeKVZYsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org