Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a336630303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466373a336630303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          eINY3l+O++oLXkd11C5UaqaYoi4p3HliCh/P0gJcOYA=
Subject key identifier:   FA:7A:44:AB:C2:07:51:EF:6A:12:A6:08:7F:12:C0:C5:A5:5C:22:87
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       62257F29F7481456ECF2F47CD3748BC200D95A9C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a336630303a3a2f34382d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:33:40 +0000
ROA not before:           Wed 02 Feb 2022 06:28:40 +0000
ROA not after:            Thu 02 Feb 2023 06:33:40 +0000
asID:                     0
IP address blocks:        2001:df7:3f00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:25:7f:29:f7:48:14:56:ec:f2:f4:7c:d3:74:8b:c2:00:d9:5a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:28:40 2022 GMT
            Not After : Feb  2 06:33:40 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:c1:b4:ff:86:c7:92:1f:73:0c:aa:49:3e:
                    12:d3:61:5e:a4:cc:98:6a:05:4d:f0:8a:1a:c4:81:
                    bc:0a:c3:57:ba:56:e7:3c:21:44:f5:58:e0:9a:08:
                    a9:bc:78:2e:51:37:0c:ff:e9:36:a2:9f:8f:09:2e:
                    c8:53:2f:3a:df:08:2c:52:fa:d7:04:0d:9e:7c:9e:
                    ce:bb:15:f1:57:4b:4b:31:1f:19:bb:d5:7d:3d:6f:
                    83:b8:9a:75:36:43:00:a7:9f:57:d5:37:0f:46:30:
                    a2:e6:36:9e:b3:dc:b0:e4:26:2e:17:82:26:58:9b:
                    65:e7:51:b8:52:f3:68:eb:b0:f0:08:d5:e1:04:b4:
                    6f:f0:7e:07:5f:2d:f2:7d:74:d5:31:c0:a4:4a:83:
                    d5:cf:be:ac:29:d9:11:7a:1b:ab:ba:89:8e:06:1f:
                    eb:3d:71:62:45:e0:f2:5e:39:76:03:cc:d0:bd:b8:
                    03:62:95:19:24:55:63:d9:2f:da:2c:41:e8:de:70:
                    27:da:8c:63:35:62:72:8f:91:2e:0c:8a:10:01:1f:
                    cc:36:94:0c:ff:c1:dd:69:19:44:e5:d5:d8:94:09:
                    45:17:99:5f:00:94:7c:b2:c2:2e:c7:a6:0a:6e:00:
                    fb:f3:37:de:a9:5d:23:71:12:36:c9:e9:75:7c:cc:
                    a2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7A:44:AB:C2:07:51:EF:6A:12:A6:08:7F:12:C0:C5:A5:5C:22:87
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a336630303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:3f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:d9:aa:50:0d:52:f6:2e:78:e8:22:b1:ca:6c:7d:c3:d4:f0:
         72:42:61:50:77:d8:52:f8:b8:21:d3:ac:65:48:96:4e:65:c0:
         5c:21:47:db:f6:ba:d5:86:fd:67:2b:5d:89:ae:bb:87:9b:b6:
         e5:1e:06:c0:82:4b:f9:5a:e7:30:1e:67:5a:fe:b1:26:a0:df:
         d1:f8:9d:3d:10:f8:18:5a:1e:29:9e:45:d3:d6:5e:6c:c5:30:
         40:16:12:47:35:85:eb:c5:fb:09:eb:36:7b:f1:9a:e1:2b:bc:
         8f:7b:7e:3c:13:18:fb:46:3d:18:d3:29:9e:f4:f1:13:c3:6d:
         8b:03:df:4c:a3:5f:4c:dd:3a:b5:1f:cc:ab:f2:c9:8f:53:a6:
         ac:31:36:20:5c:22:1b:14:86:63:b9:84:31:b7:1a:af:32:89:
         2c:2c:45:0e:ad:5b:0d:66:69:dc:fb:cb:91:19:3e:37:5e:f8:
         37:60:8e:99:a4:57:fe:a8:55:3f:aa:f0:b7:05:2b:e4:fe:1f:
         cb:36:6c:48:11:c1:0d:99:c9:a6:fb:19:5b:18:37:61:b1:6d:
         86:f0:f2:e6:08:1c:d0:07:e7:96:4d:4a:37:ae:12:4e:99:7f:
         3b:9c:fc:f4:7c:2c:eb:23:70:09:f5:6a:c9:6a:12:c7:1e:87:
         74:5f:c4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org