Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/9972DED8CA9711ECB18CEB3DC4F9AE02.roa
File: 9972DED8CA9711ECB18CEB3DC4F9AE02.roa (raw, json)
Hash identifier: GLjgBr0VSWEdOUjA0cAD3w6iB/3S3gOqMke2w5jssBk=
Subject key identifier: 4F:86:D0:2C:7F:1B:ED:03:7A:67:6F:45:AA:0C:2E:28:51:36:5E:E4
Certificate issuer: /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial: 06
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/9972DED8CA9711ECB18CEB3DC4F9AE02.roa
Signing time: Tue 03 May 2022 04:15:01 +0000
ROA not before: Tue 03 May 2022 04:15:01 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 136059
IP address blocks: 103.180.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Validity
Not Before: May 3 04:15:01 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=6270ac44-2218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:16:b7:6b:cb:d2:c8:15:70:60:4b:69:ca:
df:6a:39:80:d6:3c:80:26:7a:38:fd:b8:87:81:89:
b9:a1:7f:11:d3:0b:60:b9:80:7d:04:41:be:2b:c0:
81:f5:cc:b0:91:d7:ac:99:8c:93:2b:2d:1e:85:26:
64:6e:ce:57:43:5d:92:b2:aa:f5:5a:86:96:08:87:
ac:b2:20:ac:05:27:52:bd:35:e8:26:bb:6c:75:5b:
9a:ca:10:25:b0:f1:e7:d4:63:50:37:ce:b4:12:c1:
a4:00:44:a4:51:fb:7c:bc:15:4b:11:03:b3:9b:75:
82:7b:5f:03:18:ec:b6:c1:ad:1b:ba:55:e9:a7:99:
72:47:de:a7:4d:38:76:65:7f:38:40:37:16:10:3f:
f3:9e:38:bb:0c:a1:aa:98:aa:91:b6:2e:f5:38:fe:
e9:64:de:bf:57:a0:01:0a:23:33:2d:6c:51:3a:fa:
4e:7a:f6:71:5a:e9:fc:f2:c5:b2:f1:85:01:de:d5:
98:66:8c:e9:b6:db:18:b6:60:70:fc:51:a9:e0:44:
32:0b:dc:ce:41:be:1b:18:4b:cb:8c:eb:4a:b7:15:
c6:2b:ec:66:44:20:d8:c7:c9:5f:e2:82:79:10:0e:
f2:b4:a1:21:29:5d:b6:8c:b8:02:78:a6:63:7e:6d:
c0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:D0:2C:7F:1B:ED:03:7A:67:6F:45:AA:0C:2E:28:51:36:5E:E4
X509v3 Authority Key Identifier:
keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/9972DED8CA9711ECB18CEB3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.25.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:3c:51:bb:c7:ec:24:6e:47:fc:68:51:1d:ac:00:15:67:9d:
27:0b:bc:84:de:af:ab:aa:5d:b6:c8:a4:5b:2a:aa:61:43:ac:
30:56:80:4a:31:c9:fc:86:b0:fc:fa:78:59:91:5c:09:c8:f8:
c7:45:c1:46:ca:a0:8f:4f:d2:2b:dd:b1:a2:ca:93:1d:65:c9:
b7:3b:c7:39:a1:65:97:d5:b5:79:7b:f8:9c:66:ae:ce:c3:51:
17:06:a8:65:43:59:b9:0f:c3:d3:e2:86:5b:97:56:3c:fd:51:
33:74:bf:fd:ad:a3:e0:91:3e:f2:55:be:e3:7d:07:a2:51:ba:
bd:07:6a:5a:27:31:6d:bb:2e:88:14:2e:f7:b7:d9:ab:ec:9e:
d6:d0:dd:ae:95:38:45:c5:db:3c:64:b8:38:93:49:39:b2:c4:
2b:4f:53:c0:44:24:dd:1f:97:5b:9c:51:5c:c7:df:fe:b7:10:
ff:63:cb:15:fc:a1:ff:b9:e0:75:c8:df:e8:da:85:4d:91:b3:
80:8b:63:80:82:06:8c:bb:59:b1:cf:ec:06:6c:bc:ed:6e:1a:
9f:f0:df:14:d1:97:5a:5a:30:3c:59:30:67:32:39:df:97:e5:
67:54:dc:a0:49:bd:c3:92:1b:67:40:2d:ff:46:d1:42:af:d6:
a3:58:79:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org