Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e382e3132322e302f32342d3234203d3e2030.roa
File:                     3130332e382e3132322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          sMPu2m4BUzNGCoGlIzVCrNiPXwRmHWzyeYm+w7H979c=
Subject key identifier:   70:A0:F4:44:96:BA:45:2E:A8:A6:26:BD:83:CA:38:A6:77:58:44:96
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7A4B5A3C8161717A7B572EC31B99E0DD30CE899C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e382e3132322e302f32342d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:04:12 +0000
ROA not before:           Mon 31 Jan 2022 03:59:12 +0000
ROA not after:            Tue 31 Jan 2023 04:04:12 +0000
asID:                     0
IP address blocks:        103.8.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4b:5a:3c:81:61:71:7a:7b:57:2e:c3:1b:99:e0:dd:30:ce:89:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 03:59:12 2022 GMT
            Not After : Jan 31 04:04:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:ab:10:8b:53:f6:c4:0f:f0:08:f8:8e:94:
                    43:db:f6:b7:86:d1:a7:99:a2:38:3a:f4:b0:8c:83:
                    e4:8e:0a:5c:72:a8:07:dc:bf:7b:1c:a1:df:ab:e9:
                    b9:79:f8:4a:76:8e:48:f4:60:e0:33:1c:d2:80:0c:
                    f5:ce:bb:c4:ea:77:9c:b4:09:a8:c7:1b:a8:5c:20:
                    c7:7d:35:17:bf:3a:59:35:6b:4d:6a:f6:17:af:b7:
                    df:2c:78:6e:f8:82:24:9b:e9:3b:62:17:68:37:23:
                    c9:21:bb:87:be:86:08:cf:2b:1a:09:12:5e:a8:d5:
                    cb:d6:00:69:ec:f1:0f:8b:c5:e6:a9:52:4f:ed:54:
                    2e:17:29:e2:80:4e:d2:b8:a3:fb:df:51:72:dc:8c:
                    c6:fa:0d:24:95:30:6f:23:53:93:b5:db:89:32:6f:
                    a6:dc:09:7d:9e:2f:0b:bd:47:d3:1c:5f:2c:dc:8f:
                    4e:38:49:9c:10:b5:a6:ae:2a:af:9e:0f:30:0a:fc:
                    a8:5c:c2:cf:89:9c:53:73:05:90:26:76:81:38:46:
                    7b:21:29:c2:6c:15:36:a6:7b:c0:7e:47:92:53:d7:
                    57:68:de:3d:47:e5:10:8e:19:ac:9b:04:87:50:65:
                    62:f5:de:a2:30:68:71:88:73:ef:43:1d:27:b8:1b:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A0:F4:44:96:BA:45:2E:A8:A6:26:BD:83:CA:38:A6:77:58:44:96
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e382e3132322e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:9f:cf:7e:19:58:10:c5:fb:20:ec:e7:04:06:a0:cc:8a:52:
         a9:50:da:db:17:84:30:22:65:cf:95:93:91:ea:20:11:63:c6:
         56:a2:90:7f:85:f7:be:bf:bc:0d:18:a0:cc:ce:ce:96:83:a6:
         c2:16:3f:69:82:be:11:93:6f:da:77:9c:62:67:a4:b1:84:34:
         e1:fe:9e:c2:11:2e:04:c0:a4:7b:2c:6a:d7:b0:fc:39:a4:d2:
         b2:42:04:6e:29:43:cd:7b:54:8c:97:40:0b:f5:66:0e:c2:3f:
         e1:38:42:31:01:28:26:23:b5:c0:0d:9e:d7:94:36:98:76:d1:
         b5:30:62:dd:6f:fa:19:3b:88:cd:02:73:aa:4b:da:3f:96:92:
         aa:1a:6b:22:eb:88:b6:ac:55:e7:00:9b:90:2c:07:9c:d3:12:
         e3:16:ff:62:95:4d:26:6d:0c:a8:c5:01:2b:ce:81:17:61:15:
         d7:fd:90:d9:d3:3d:a3:0a:52:d5:02:e2:fe:c8:ed:85:55:93:
         24:27:62:e7:85:6a:46:7c:dd:d0:cf:41:33:9e:99:f1:ac:3d:
         96:fe:98:0e:6c:1a:49:48:3e:f0:a9:99:9a:4c:e8:ee:21:db:
         9a:ff:9a:52:f0:7b:0f:64:73:85:ab:be:ac:73:31:31:1b:31:
         3c:ff:f4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org