Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e35312e302f32342d3234203d3e203536323533.roa
File:                     3130332e37352e35312e302f32342d3234203d3e203536323533.roa (raw, json)
Hash identifier:          SBi9oMGAn9szbtbbjmR53CdLvtzuEfrJkG3QI0a2Eb8=
Subject key identifier:   9F:71:24:D5:05:61:A5:89:57:7B:45:A0:88:4E:E3:DC:CE:8F:38:A5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       584AB4510092D215F27C8CBE820FA7FB664C9FBC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e35312e302f32342d3234203d3e203536323533.roa
Signing time:             Wed 02 Jun 2021 03:08:39 +0000
ROA not before:           Wed 02 Jun 2021 03:03:39 +0000
ROA not after:            Thu 02 Jun 2022 03:08:39 +0000
asID:                     56253
IP address blocks:        103.75.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4a:b4:51:00:92:d2:15:f2:7c:8c:be:82:0f:a7:fb:66:4c:9f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  2 03:03:39 2021 GMT
            Not After : Jun  2 03:08:39 2022 GMT
        Subject: CN=3082010A0282010100BC2859EA5D0EEA80D20CC3C7A6B89EE21C502B7101915495A6574E27BC7924555D9DB721C21A47488D2BAC8A98BAC6DD296CDDD792FCC202A1296C2D7A1DC2D6AB50006C006498F003F31CAC10264240294EFCEFFF9695F66A8A2BD6E67B6E6E4AFFC9D6B5CC90885F4D730B4B623092EC24B2F80B0AD69710E013F38073E4AD1812114492A3E897B3D5ECB9B57A21A69090F244D2E00EED1E6CF8CC46D377B9436890DC0DEDE5AD6CE177ECC87F3344E7ABB454B3BD4275A0039F8DE9F5B6C3A0859B9841523A0E96296073944EC10E72B7D92440335EA69CEBEBFFFD13EC3CFAC967086840FAFD038679CF6902EDA987BA14B48C840065DE723FD35766A24D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:59:ea:5d:0e:ea:80:d2:0c:c3:c7:a6:b8:
                    9e:e2:1c:50:2b:71:01:91:54:95:a6:57:4e:27:bc:
                    79:24:55:5d:9d:b7:21:c2:1a:47:48:8d:2b:ac:8a:
                    98:ba:c6:dd:29:6c:dd:d7:92:fc:c2:02:a1:29:6c:
                    2d:7a:1d:c2:d6:ab:50:00:6c:00:64:98:f0:03:f3:
                    1c:ac:10:26:42:40:29:4e:fc:ef:ff:96:95:f6:6a:
                    8a:2b:d6:e6:7b:6e:6e:4a:ff:c9:d6:b5:cc:90:88:
                    5f:4d:73:0b:4b:62:30:92:ec:24:b2:f8:0b:0a:d6:
                    97:10:e0:13:f3:80:73:e4:ad:18:12:11:44:92:a3:
                    e8:97:b3:d5:ec:b9:b5:7a:21:a6:90:90:f2:44:d2:
                    e0:0e:ed:1e:6c:f8:cc:46:d3:77:b9:43:68:90:dc:
                    0d:ed:e5:ad:6c:e1:77:ec:c8:7f:33:44:e7:ab:b4:
                    54:b3:bd:42:75:a0:03:9f:8d:e9:f5:b6:c3:a0:85:
                    9b:98:41:52:3a:0e:96:29:60:73:94:4e:c1:0e:72:
                    b7:d9:24:40:33:5e:a6:9c:eb:eb:ff:fd:13:ec:3c:
                    fa:c9:67:08:68:40:fa:fd:03:86:79:cf:69:02:ed:
                    a9:87:ba:14:b4:8c:84:00:65:de:72:3f:d3:57:66:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:71:24:D5:05:61:A5:89:57:7B:45:A0:88:4E:E3:DC:CE:8F:38:A5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e35312e302f32342d3234203d3e203536323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:1b:3d:a8:c6:2c:16:41:f2:36:fb:08:a9:40:b7:a4:e8:db:
         9b:55:af:50:4c:5a:b1:54:39:cb:dc:50:36:58:9a:f9:b7:77:
         b2:8d:68:43:c6:61:69:88:f6:91:f0:1c:dc:44:ba:2e:d6:58:
         e6:a5:95:1c:36:66:1f:46:ac:d2:d4:b3:56:3c:a5:a6:57:cd:
         1e:07:ac:b1:33:91:ed:99:02:6d:1a:2c:29:35:0b:c4:8d:65:
         96:5c:66:ab:a2:59:01:16:44:f2:e7:f1:81:54:09:6b:1e:b2:
         70:05:a0:1c:d8:84:b9:60:75:81:c2:9d:03:57:9c:ad:97:d6:
         da:0f:cf:89:57:22:76:af:e3:5e:50:15:1f:c8:e9:7b:e4:ad:
         66:f0:a4:db:37:40:f8:55:03:7a:f2:1f:db:d6:03:0e:84:e1:
         df:62:f7:04:6a:41:da:a8:3b:fd:a7:70:fa:82:f5:d2:74:8d:
         d0:56:ee:a3:35:9f:a3:5d:4d:fc:58:d2:70:6f:f5:11:fe:68:
         13:4a:92:06:4a:f2:af:23:7a:2c:92:1c:9c:8c:c9:2f:f6:b6:
         00:7c:c9:51:5c:4e:66:14:b5:b4:23:78:ce:fc:f4:6a:71:64:
         00:c2:7a:95:ed:67:19:a6:c1:93:59:1d:31:2b:d3:62:4f:17:
         1e:de:e7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org