Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e36362e34342e302f32322d3234203d3e2030.roa
File:                     3130332e36362e34342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          kMsH+S1gyio0aC8F1hZkAIymJyvUOUe8W/Eetq1kXlg=
Subject key identifier:   4D:60:7A:BE:AF:2B:20:9C:0B:86:73:81:D6:C0:33:AC:47:86:B9:36
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2510D0569A6F810E700B4A4A892D3DF43A40FCE3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e36362e34342e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:31:59 +0000
ROA not before:           Wed 02 Feb 2022 06:26:59 +0000
ROA not after:            Thu 02 Feb 2023 06:31:59 +0000
asID:                     0
IP address blocks:        103.66.44.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:10:d0:56:9a:6f:81:0e:70:0b:4a:4a:89:2d:3d:f4:3a:40:fc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:26:59 2022 GMT
            Not After : Feb  2 06:31:59 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:38:a2:2d:db:3d:da:97:a2:13:ea:3d:81:
                    10:e1:76:af:49:d8:d4:0e:ab:7e:c7:df:49:b5:f0:
                    33:df:97:39:e3:f7:42:59:63:33:c0:26:59:fa:5a:
                    42:58:15:c3:bb:c6:c8:5f:88:30:33:26:90:a4:1e:
                    43:d1:00:cf:21:de:e1:8f:08:ce:6f:73:fb:9f:b0:
                    a0:b9:0d:b1:de:6d:28:9d:06:a6:95:e7:75:b0:97:
                    5b:71:33:77:21:10:a6:8d:c3:4d:3d:cc:cd:6d:64:
                    df:62:a9:f5:00:90:88:38:e5:88:04:77:f5:2b:bb:
                    bb:83:64:23:56:f3:c3:ef:47:70:dc:b7:37:94:d0:
                    2b:c3:b1:0a:73:c7:c5:09:24:2b:ca:27:da:77:03:
                    01:6c:6c:5a:e3:b9:0d:2a:4f:98:1a:6f:ae:04:69:
                    15:4b:80:a5:db:bf:4f:cc:e2:ef:ce:af:7a:88:28:
                    fe:20:59:ad:6e:54:a5:d1:2d:df:07:56:d0:5e:55:
                    41:c7:c2:3a:90:f1:be:a2:08:98:73:84:42:e0:15:
                    df:7d:0d:cf:f8:1c:f5:1d:60:9a:1d:68:f3:f6:de:
                    2d:ee:a9:53:71:62:ff:59:75:d1:8a:24:a9:da:16:
                    d9:5b:e8:86:8b:ba:80:93:1c:b2:cd:c1:7d:a4:7b:
                    48:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:60:7A:BE:AF:2B:20:9C:0B:86:73:81:D6:C0:33:AC:47:86:B9:36
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e36362e34342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:e0:04:4f:0e:7a:05:37:26:21:01:85:9b:f5:33:3f:b5:ea:
         d0:ee:88:ce:44:3c:aa:29:59:17:90:6f:39:58:97:06:82:eb:
         16:f7:23:c1:f4:2c:d8:eb:f6:ee:d3:90:90:11:61:17:8e:04:
         f0:12:ed:f5:d7:f7:99:9d:17:20:74:e7:4c:06:8b:15:07:8f:
         a5:46:fc:89:1c:30:f9:72:6d:58:9b:8d:0e:3e:5a:8c:e6:3d:
         eb:3d:1b:07:f5:c1:0b:0e:b3:c1:81:08:20:70:31:a2:57:f4:
         f0:e1:60:c2:ba:37:ad:c3:c3:a1:9b:99:2b:dc:1d:1d:a1:20:
         0e:77:f0:a2:3e:61:85:23:ec:fa:09:62:2e:e0:a4:cc:21:9f:
         06:72:dc:e7:31:e5:88:81:f4:70:7d:95:c8:36:f7:31:15:c8:
         8d:b8:5e:bf:66:ae:75:3f:85:20:25:2c:8f:01:6d:de:8c:e0:
         40:66:9a:07:cb:1b:87:a4:a3:7f:f6:62:e0:9c:64:9b:b1:3b:
         89:3d:84:7b:8d:7d:bb:7f:d0:62:e8:a5:b5:0e:e6:79:f3:1f:
         c2:68:33:43:08:21:b3:bb:17:0f:e9:51:81:83:a5:04:61:1f:
         18:a7:4d:41:44:78:da:93:e4:9e:f8:5a:c7:4e:6a:3b:60:60:
         8f:1a:6a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org