Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa
File:                     3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (raw, json)
Hash identifier:          khJnqEmawonjPnRA/SSUYuf1NCetgvNqY2tFCV55rK8=
Subject key identifier:   F9:DD:A7:29:17:2E:D5:C0:7C:F8:F8:09:57:C3:27:59:02:2F:17:0E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5996E437CCF1AF92A8B4F69DB307FCECD0BE9887
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa
Signing time:             Fri 03 Sep 2021 08:01:12 +0000
ROA not before:           Fri 03 Sep 2021 07:56:12 +0000
ROA not after:            Sat 03 Sep 2022 08:01:12 +0000
asID:                     136111
IP address blocks:        103.94.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:96:e4:37:cc:f1:af:92:a8:b4:f6:9d:b3:07:fc:ec:d0:be:98:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  3 07:56:12 2021 GMT
            Not After : Sep  3 08:01:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:74:13:5d:2d:51:86:a9:9e:bc:20:be:0d:
                    1d:c4:ac:f2:df:23:4d:31:94:1f:3c:0e:f2:e0:02:
                    ed:ea:b9:7a:5a:d0:38:89:3c:47:0b:7c:16:56:cc:
                    60:29:42:4b:3b:9e:54:d7:93:a0:8e:90:4f:72:d9:
                    0e:d2:3f:ac:e9:cf:5c:10:bb:b2:a1:1e:65:4d:f2:
                    81:e4:fe:bc:db:7a:24:43:69:46:47:53:fd:f4:b6:
                    b7:d3:c7:cd:39:e3:fd:3e:2b:93:3f:e8:c9:3c:1d:
                    1d:61:1d:4d:54:44:77:bf:06:ce:0c:9d:6a:88:3f:
                    7e:50:e1:8a:12:10:0e:ac:f1:81:c9:92:e2:1f:0f:
                    de:92:91:54:b4:31:93:b8:c2:0e:25:6f:97:82:65:
                    9a:56:05:44:86:9f:e3:83:3d:23:e7:86:ab:e7:e9:
                    19:21:9b:29:3c:11:ab:70:04:8c:04:04:73:d7:a3:
                    a7:e8:14:40:98:63:22:98:f4:d3:e0:79:0c:65:d4:
                    fd:fd:10:c0:82:36:b9:63:89:c4:cc:28:c7:98:05:
                    85:c8:9d:c1:90:71:30:4a:5b:5d:a8:5c:3f:0d:53:
                    ee:73:16:ab:cf:20:bc:d9:23:95:5a:1d:bc:94:cb:
                    29:99:f7:03:27:40:48:41:23:66:9c:7e:01:7b:cd:
                    4f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DD:A7:29:17:2E:D5:C0:7C:F8:F8:09:57:C3:27:59:02:2F:17:0E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:a7:3c:b1:96:41:f7:e7:dd:b9:a8:c0:da:37:56:e7:cd:2f:
         b0:d0:4a:53:31:56:69:a6:ec:ce:6f:cc:7a:78:2c:72:75:5a:
         50:de:43:d6:ec:4e:c5:d2:da:01:6a:4d:32:8e:ea:c8:68:e9:
         7c:8f:20:88:f6:10:45:16:f5:83:a4:29:92:fc:ad:92:f6:45:
         33:5b:aa:b9:ed:c6:b4:93:5c:94:11:41:60:c4:d8:3b:8d:79:
         56:e5:ef:92:77:73:fd:98:2e:d7:db:5d:e0:ca:ec:bd:29:18:
         58:be:b6:6e:ad:63:ff:7d:e0:6a:6a:3d:12:4f:c2:b5:92:c6:
         d7:84:dd:1f:74:c8:1c:40:96:5e:14:8d:a0:63:01:43:a1:52:
         6a:fd:ab:c6:9c:fa:09:0c:5b:c8:62:43:1c:6e:fe:d9:70:c7:
         f4:f3:c2:c6:4d:c3:09:62:51:a6:48:2e:cc:6f:4a:d9:2a:6e:
         14:d4:d0:59:75:05:ec:bf:6b:ec:36:c2:25:dd:83:09:29:1e:
         19:99:01:ad:c6:9d:fa:89:b6:40:39:da:48:ac:70:2d:fd:18:
         19:3c:a4:ce:29:cc:22:7c:c5:71:c5:9b:a1:ff:c5:02:95:f7:
         8a:39:cb:d7:7d:3c:a9:16:97:5d:70:6d:9f:7c:0c:b2:4a:c3:
         0d:6d:9d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org