Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a3438303a3a2f33322d3438203d3e2030.roa
File:                     323430323a3438303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          sOsnxPiIEV6ICYF9Emv0KDXe8wzzs/xheMDJZF9RkbQ=
Subject key identifier:   06:29:FF:E6:90:03:9D:06:DD:FB:3C:2E:D2:54:D1:5C:B0:7E:D5:28
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7DD5455734F674A427998FEFFFFFFCC4B3D579F1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a3438303a3a2f33322d3438203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:05:35 +0000
ROA not before:           Mon 31 Jan 2022 04:00:35 +0000
ROA not after:            Tue 31 Jan 2023 04:05:35 +0000
asID:                     0
IP address blocks:        2402:480::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d5:45:57:34:f6:74:a4:27:99:8f:ef:ff:ff:fc:c4:b3:d5:79:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 04:00:35 2022 GMT
            Not After : Jan 31 04:05:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:77:00:8b:5e:fb:ee:ef:4c:06:40:55:26:
                    b2:14:e6:de:49:71:92:05:17:26:aa:37:5b:7d:2d:
                    f9:0c:9c:82:e2:89:f8:3b:dc:2a:62:71:84:48:b1:
                    be:b1:9d:0d:ea:d5:87:53:5f:b1:b8:61:8a:b8:87:
                    1e:b1:ff:dd:65:a4:12:f7:3e:8c:3a:c8:68:61:31:
                    a4:b2:2d:2a:67:48:d6:f0:9b:6c:e6:4c:6a:f2:49:
                    a3:69:28:dc:44:31:79:ee:6f:2f:d8:f9:d2:73:f3:
                    b5:57:9e:c0:bc:5c:e6:ae:94:9c:a7:18:37:f1:09:
                    4f:46:e9:dc:29:87:da:04:39:f1:b5:e0:30:79:b2:
                    9e:39:7b:31:39:60:92:1c:f3:cc:99:80:26:5d:28:
                    5a:89:8e:8e:cd:70:8c:f3:33:37:32:a7:7a:5f:f7:
                    43:f4:0c:8e:9c:c6:aa:89:a3:ac:ae:4d:aa:fb:66:
                    79:0f:44:33:97:37:63:69:80:9b:67:9a:11:6e:45:
                    6d:85:a9:fa:62:58:50:a3:7e:0c:2f:1d:3c:fd:81:
                    5e:11:f9:b0:6d:4d:fe:7d:76:49:1f:fd:ac:4e:0f:
                    aa:c3:ca:c9:e9:9c:86:50:68:02:5e:c8:54:99:d0:
                    88:f9:a5:67:37:04:32:85:43:b2:4d:98:ad:7a:ad:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:29:FF:E6:90:03:9D:06:DD:FB:3C:2E:D2:54:D1:5C:B0:7E:D5:28
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a3438303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:480::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:28:e8:57:a8:ad:b0:94:65:dc:8b:21:2c:29:cd:92:22:3c:
         09:61:2d:bc:1c:d8:86:c6:f0:e3:d1:2c:3d:be:ff:b6:66:0e:
         bb:ba:d0:a0:c5:93:08:a8:c1:db:ec:83:e5:0a:87:9d:a8:7b:
         b1:ef:bd:58:ea:88:7d:b7:af:ef:5c:7b:10:88:33:18:5b:c5:
         9e:9c:87:c3:24:d4:00:64:36:f4:a7:5c:6c:6e:53:5b:3f:b1:
         e0:fa:12:4a:c3:37:aa:3a:d8:70:6b:0e:fe:92:a6:15:a6:98:
         13:fc:36:21:79:20:c7:51:fa:90:2e:3b:aa:09:5b:05:ac:d4:
         d9:37:b1:92:1c:3a:b3:2d:4a:5b:57:2b:e4:d7:35:74:61:4f:
         b4:7d:0c:27:a5:00:bb:24:b5:e1:17:e1:9d:6d:f1:90:4f:4d:
         1f:c0:db:6f:40:bc:c3:6e:fb:ab:70:9e:45:90:19:cb:e0:a6:
         30:83:9b:4b:87:53:3b:64:bf:17:99:0e:5f:e4:21:06:07:55:
         7a:df:d9:a7:42:78:66:61:2b:00:21:51:bf:5d:8e:e0:a6:68:
         31:77:26:ea:62:0d:ba:d9:65:33:24:05:9c:b7:f5:4f:23:e6:
         4d:af:90:ca:ce:d5:ae:e4:d4:93:da:76:87:a1:36:be:13:f1:
         0e:6b:0d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org