Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa
File:                     3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (raw, json)
Hash identifier:          Exf6VBwBW7Yok6w6aYOFPghSGZTT3PaIggRH+Il+mrI=
Subject key identifier:   4E:79:12:D0:B0:25:C7:9A:02:BA:F4:3E:9C:81:1E:68:99:EF:4E:E4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       40832E384687BE53B1ABFDD227239364EEF10715
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa
Signing time:             Wed 09 Feb 2022 10:05:42 +0000
ROA not before:           Wed 09 Feb 2022 10:00:42 +0000
ROA not after:            Thu 09 Feb 2023 10:05:42 +0000
asID:                     133816
IP address blocks:        103.52.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:83:2e:38:46:87:be:53:b1:ab:fd:d2:27:23:93:64:ee:f1:07:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  9 10:00:42 2022 GMT
            Not After : Feb  9 10:05:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:a7:c9:33:96:ee:26:e7:06:48:c1:8a:2b:
                    5a:bb:32:09:a9:a9:eb:38:ed:b9:4d:e1:c1:aa:85:
                    a7:28:0f:09:b3:73:f5:2b:a0:97:97:4d:21:a3:79:
                    95:96:2e:8d:45:dc:c5:7d:81:6e:fa:2e:72:65:86:
                    12:43:77:8c:8b:98:6f:db:61:13:b2:e4:5f:9d:84:
                    40:88:9c:34:21:36:57:8c:e8:d3:54:58:60:2c:d6:
                    fe:e7:e9:d4:4c:5c:2b:22:69:86:11:17:f4:e7:cf:
                    af:17:56:7b:fe:e8:69:14:e7:87:75:1a:10:e2:2a:
                    d8:e8:d1:23:37:43:00:56:01:96:14:41:ee:ff:c5:
                    3c:52:ea:84:81:4b:a7:73:bd:f0:20:17:32:4a:91:
                    d5:88:66:f1:ee:11:d8:ef:17:31:99:44:7b:29:ca:
                    69:a5:42:28:12:72:9f:0c:4d:6c:38:bc:2e:d3:f0:
                    f9:a6:f6:f5:fe:dd:65:50:fd:1c:93:ee:46:b7:0e:
                    52:41:91:e2:86:8d:40:00:8e:67:4f:ca:db:b3:34:
                    05:2a:bb:8e:aa:db:9b:d1:2b:90:f4:83:27:ae:9f:
                    a4:3c:53:3e:dd:f2:f7:87:94:4c:78:db:9b:96:5f:
                    d3:25:a7:06:f6:c9:39:58:00:41:d9:7a:0b:81:f9:
                    f4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:79:12:D0:B0:25:C7:9A:02:BA:F4:3E:9C:81:1E:68:99:EF:4E:E4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:0c:db:14:60:92:ec:7d:bd:3d:9e:e1:9f:4e:a6:2d:94:60:
         1d:77:56:7e:27:57:e7:12:2f:16:c7:28:57:27:75:28:5a:db:
         b5:2f:61:96:c7:1a:30:38:a2:dd:4b:9a:51:2a:78:2d:60:12:
         38:22:d4:f0:93:ce:4a:19:6a:8c:bc:cc:59:f6:7c:d3:f0:1f:
         59:13:31:40:33:40:dd:f9:a8:43:70:76:90:9d:17:6b:de:1d:
         05:39:40:2b:b5:47:5f:24:5f:16:6e:f4:40:a2:be:42:3b:85:
         0a:9a:72:82:e9:43:8a:65:2c:e9:aa:04:e9:fc:42:af:c2:18:
         6f:bb:54:2d:3a:48:1a:26:54:5f:d3:30:a2:e9:7b:33:e4:6c:
         b6:82:19:f8:6a:bd:de:1d:79:25:0b:59:6b:96:ee:fa:c4:38:
         37:a2:27:46:d5:88:75:3f:7c:59:0c:a6:a4:ca:5e:97:c1:4a:
         97:ba:65:e4:82:ea:a4:89:20:9d:87:3f:5e:e1:3c:60:89:91:
         71:b8:2a:27:69:1e:57:34:0f:5c:1e:64:f9:c4:ea:a6:01:a8:
         6c:d7:4b:aa:80:8b:ba:f7:3c:2c:be:48:f3:ef:12:48:28:8f:
         44:30:8b:56:2e:b5:ae:1a:e4:20:31:b9:21:df:ff:b3:ce:38:
         2d:ce:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org