Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38322e3234342e302f32332d3234203d3e2030.roa
File:                     3130332e38322e3234342e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          5KxvkY5AeOqwb61dkSkDivo3VAYHhaAfJsWXnItqbgY=
Subject key identifier:   D7:AF:19:10:6A:AF:B0:A5:BA:91:07:80:7C:4B:2A:66:2F:2D:56:C1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7A22539458037CD93110C874C9BC7D46B9142ADF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38322e3234342e302f32332d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:32:24 +0000
ROA not before:           Wed 02 Feb 2022 06:27:24 +0000
ROA not after:            Thu 02 Feb 2023 06:32:24 +0000
asID:                     0
IP address blocks:        103.82.244.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:22:53:94:58:03:7c:d9:31:10:c8:74:c9:bc:7d:46:b9:14:2a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:27:24 2022 GMT
            Not After : Feb  2 06:32:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:fc:13:d1:0f:d6:bd:59:e8:1f:2a:e8:06:
                    f3:c2:22:00:e3:56:cc:2c:82:3e:75:1b:bd:5c:1c:
                    18:47:6d:2b:6e:78:ba:99:f6:52:2f:0d:57:88:89:
                    6b:4e:3c:30:d8:b1:6a:6c:62:ca:24:4e:fa:6d:ef:
                    4b:e7:e4:e1:4e:04:a7:9e:8a:4d:39:08:cf:4d:df:
                    d0:2d:7e:bc:e1:ed:47:e2:16:da:e1:13:70:ad:58:
                    8c:73:4d:b1:68:71:74:a3:72:59:15:42:f2:a5:e7:
                    40:eb:9a:d6:d1:e1:bf:39:7d:4b:c1:5c:e1:80:e0:
                    d8:71:01:16:4b:2d:af:10:a0:06:b2:93:9f:1c:00:
                    f7:50:a1:e0:2b:68:52:62:40:da:e6:e4:c6:24:41:
                    e7:11:85:d5:90:a1:a1:87:59:e9:8f:79:7e:d1:6c:
                    03:56:0a:5a:9d:c9:d2:d5:f6:a8:a5:f4:8c:dd:ab:
                    be:7a:d4:78:99:ef:f8:4c:b0:2b:53:16:c1:50:d1:
                    51:ec:8d:c1:0a:7d:02:f6:db:d3:07:c1:67:1e:c9:
                    68:92:7b:57:69:10:f3:a6:a0:0b:46:c3:ed:6d:5d:
                    cd:2c:b4:ce:77:52:3c:fb:12:38:f2:42:a2:0e:46:
                    2c:a4:c1:78:c4:c4:2b:c9:09:de:63:ff:29:20:7f:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AF:19:10:6A:AF:B0:A5:BA:91:07:80:7C:4B:2A:66:2F:2D:56:C1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38322e3234342e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:0e:14:25:be:48:bb:bf:43:09:09:47:29:20:01:4c:af:54:
         4c:52:2e:56:a8:22:5f:ba:18:86:c6:bf:30:50:11:03:c3:83:
         97:03:ee:19:eb:11:ee:f7:34:68:82:b4:1f:ec:84:23:61:ec:
         ec:a2:df:f6:06:14:ea:fc:82:71:41:b4:a7:43:14:50:d7:29:
         a5:3d:af:a9:74:2a:9b:f1:74:be:2c:42:f8:81:fa:3f:87:64:
         85:62:32:4c:c6:71:ba:1e:3d:e1:30:9f:03:94:ea:2f:cd:98:
         b1:d6:4c:c0:b9:fd:8a:1e:53:d7:30:32:03:a9:1a:c2:df:86:
         4b:f7:5e:85:d7:d4:43:9a:e2:49:46:22:93:8b:d9:d4:74:71:
         ce:7d:df:14:17:95:5f:74:90:ae:d7:95:a9:86:ff:49:b5:ab:
         0f:35:3d:cc:e2:6b:28:fe:ae:1b:d7:06:35:cc:4f:ac:8e:2b:
         d1:fe:2c:22:e3:85:fc:a0:0a:50:a9:d7:01:6f:e3:d9:03:21:
         03:2e:0c:7f:f4:90:d9:fd:b0:07:84:1c:34:8f:05:cb:8c:3e:
         07:2f:22:67:32:c6:7b:3a:b5:61:39:84:f5:30:37:78:5d:eb:
         e6:d2:7b:9d:ce:e9:32:78:37:65:21:0b:47:ad:7d:d9:f8:a8:
         ab:a6:e2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org