Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a396434303a3a2f33322d3438203d3e2030.roa
File:                     323430323a396434303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          dNt7eewZwYB2dQgCjBZJV8mslGKo7oxDC31cOochIO8=
Subject key identifier:   DE:19:2B:8F:FA:D9:AF:4F:AF:31:52:B9:9C:90:5C:20:53:A3:E3:53
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       56A80B6AFEEE55B3D1969A0C8A34ED1A97701550
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a396434303a3a2f33322d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:34:47 +0000
ROA not before:           Wed 02 Feb 2022 06:29:47 +0000
ROA not after:            Thu 02 Feb 2023 06:34:47 +0000
asID:                     0
IP address blocks:        2402:9d40::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a8:0b:6a:fe:ee:55:b3:d1:96:9a:0c:8a:34:ed:1a:97:70:15:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:29:47 2022 GMT
            Not After : Feb  2 06:34:47 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:b3:04:83:90:40:08:e7:81:2e:26:73:4c:
                    10:7b:cc:da:61:9d:8c:86:c1:35:11:f2:bd:ae:7b:
                    9b:82:fd:96:fe:5b:db:77:55:6e:a9:7c:4c:dc:dc:
                    75:2d:45:54:80:88:6b:e0:41:86:c1:0d:03:aa:05:
                    79:6c:cd:5b:75:9f:ad:30:07:bf:76:e2:8c:f4:4d:
                    3e:62:f4:b6:70:22:2b:8e:fd:c5:1f:a7:82:dc:16:
                    32:a1:9a:bd:3c:ef:ea:7b:1c:2b:8f:81:23:68:81:
                    02:f9:86:36:26:d6:59:32:7f:d6:48:5d:e4:51:e0:
                    13:21:e2:32:76:e3:1e:aa:1c:0a:6f:10:5d:ec:59:
                    64:19:74:0b:54:76:4e:ec:a4:ad:cb:85:70:e6:c1:
                    a7:0d:9e:f5:8d:20:26:0c:a5:48:75:8b:aa:89:4a:
                    79:25:b6:6a:98:d2:56:f6:49:24:28:61:72:fd:10:
                    83:40:8f:6a:8f:f5:4d:4e:c9:c8:ac:a6:19:9a:d0:
                    cf:5a:7d:56:5f:93:11:89:c8:f7:5a:a2:fc:a8:0f:
                    65:e3:8e:12:29:4f:fb:85:64:75:ce:51:06:55:e6:
                    e3:f8:d2:be:da:f8:58:77:b1:5a:ca:89:aa:67:7f:
                    9f:2c:94:1e:e2:63:a8:12:e9:56:f7:95:d8:2f:db:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:19:2B:8F:FA:D9:AF:4F:AF:31:52:B9:9C:90:5C:20:53:A3:E3:53
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a396434303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:69:29:8e:6f:53:45:ec:9b:fc:b0:5a:b9:6f:4d:e4:2d:bb:
         17:ae:de:88:e0:2e:5c:df:86:6b:a7:f8:07:76:9b:aa:3d:fd:
         c7:4b:a8:6a:3c:6e:8d:c6:1c:f6:d3:9f:0d:e4:fe:ba:b4:d1:
         0e:bb:17:7b:79:ca:39:9d:c2:ed:2e:ec:f0:59:40:11:a0:90:
         ae:3e:0f:a9:c0:ad:b6:fd:64:22:f3:0b:da:73:2d:08:fe:8c:
         4b:7e:b5:99:6d:6f:dc:f3:28:7f:f0:fd:4c:1a:5e:5b:31:12:
         ff:56:33:b7:eb:b0:0c:da:87:fb:02:72:41:be:ba:2e:c8:96:
         de:48:a8:f9:33:63:68:af:47:d0:90:35:8e:dc:af:5f:3a:60:
         a4:9d:e7:0a:22:0c:5a:ac:87:75:30:d9:5b:57:14:15:2c:41:
         7b:9c:68:63:26:53:84:7e:a8:a8:ae:75:c6:84:f1:ee:db:67:
         48:b1:f2:fe:66:a9:07:95:e4:6a:4d:87:9f:3b:11:d8:2e:50:
         a2:d0:f6:a5:7e:1d:8b:10:49:b2:75:6d:ca:25:c6:4a:d6:08:
         42:03:69:c5:e0:e7:67:52:8d:e4:93:ca:be:78:f3:94:71:f6:
         05:31:a2:23:8f:d4:e2:82:e9:54:f5:12:e7:12:05:73:57:c4:
         05:0a:46:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org