Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/9ADD6F18937811EDAE801E5AC4F9AE02.roa
File: 9ADD6F18937811EDAE801E5AC4F9AE02.roa (raw, json)
Hash identifier: HMsjk6qf6xsuuxvfx7pk2NXHu9FqfTrOoM7GkFjg6Jw=
Subject key identifier: BE:EF:47:EC:CF:F2:A7:72:B6:54:7F:1C:5B:1C:ED:C8:0E:E6:9D:AD
Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial: 05C2
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/9ADD6F18937811EDAE801E5AC4F9AE02.roa
Signing time: Fri 13 Jan 2023 19:29:32 +0000
ROA not before: Fri 13 Jan 2023 19:29:32 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 142300
IP address blocks: 103.156.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1474 (0x5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Validity
Not Before: Jan 13 19:29:32 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63c1b11c-8c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:1c:eb:ef:03:f3:85:62:ea:26:32:82:b8:
c7:be:6c:c9:cc:86:5f:58:bd:af:c6:76:4a:7f:c8:
c5:96:31:71:f5:49:9d:a2:1d:d1:10:3e:18:b4:c8:
21:fd:a3:94:b3:e8:19:88:71:b4:4c:ca:28:81:5c:
6c:96:97:7c:84:ad:76:b1:e8:2f:08:0c:68:2f:b1:
d4:ee:a5:51:d2:35:94:2d:d2:22:65:ba:8c:03:76:
11:62:38:0b:43:76:de:ca:d7:1f:fc:97:be:37:c5:
eb:5a:58:37:1b:e5:ef:b9:ab:a8:06:58:a6:90:a2:
25:d5:ca:04:15:c0:d5:09:23:f7:e4:1d:21:2a:4c:
2f:d6:6b:20:16:c4:c2:fd:db:76:14:d9:81:17:f6:
8f:c7:a3:13:1f:3c:91:26:0c:3b:6a:90:a9:69:e7:
a5:de:46:d1:7d:a7:c2:43:26:68:e0:3e:df:82:8c:
b8:3e:e5:6f:8e:5c:19:fe:1e:67:0a:ce:7f:99:d1:
c5:cb:71:fa:b2:54:71:e5:8c:f4:a6:50:ff:a2:68:
9e:a2:e5:69:5b:df:96:9d:db:e8:22:4c:43:5f:c3:
34:9e:56:8e:dc:05:b4:fd:e2:c1:66:98:74:a9:73:
bf:28:a4:dc:a0:b5:20:d2:18:66:33:a6:de:83:f4:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EF:47:EC:CF:F2:A7:72:B6:54:7F:1C:5B:1C:ED:C8:0E:E6:9D:AD
X509v3 Authority Key Identifier:
keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/9ADD6F18937811EDAE801E5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.245.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0f:d0:92:14:d5:32:52:c9:1d:d8:96:f2:87:4c:0c:ce:d5:
81:44:84:a7:22:f2:36:33:58:63:86:a2:11:81:46:a8:27:50:
c2:e1:90:cf:7d:35:95:a5:8b:c5:47:8e:a7:47:e3:26:ac:30:
d9:1d:fe:bd:c6:32:8b:6b:4b:4e:2a:9f:b0:af:e6:ee:0d:b6:
94:2a:36:77:35:44:d8:1f:2e:dc:f8:02:e5:84:82:e3:61:46:
56:0e:0c:6d:fd:fd:c1:75:22:b4:06:6e:d3:b3:7a:f8:71:83:
6b:a0:a2:08:ee:03:9f:06:16:e8:95:37:e8:e6:84:8e:eb:7e:
03:63:7b:2d:a3:66:61:54:cb:a7:b4:a0:d8:04:35:ff:3a:3b:
1c:38:0f:dc:e5:c6:89:ee:10:ab:49:68:e2:26:98:31:2d:27:
4a:27:fd:c5:59:5c:b2:17:a2:48:ff:8f:1b:5a:65:f7:35:74:
f3:9b:47:71:07:ca:4f:07:1d:24:1d:db:bd:04:8e:c2:62:d8:
f1:95:8b:3f:dd:cc:9d:52:38:84:21:d5:45:3c:17:30:eb:fe:
ee:18:39:8a:df:57:e0:55:9c:2c:f1:94:6d:a1:f9:84:1b:cb:
80:e5:36:6c:d0:5f:16:63:79:9b:78:30:95:f3:95:c4:7f:44:
bf:36:71:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org