Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/60CC4AB2265C11EDB262273EC4F9AE02.roa
File: 60CC4AB2265C11EDB262273EC4F9AE02.roa (raw, json)
Hash identifier: CWIBmqH9gsrAPoBxiFSA4avF+VYQFMZV99Yg6YwUwgc=
Subject key identifier: D7:E2:28:9E:F4:84:1C:D7:DE:2C:19:44:85:2D:91:8A:CB:41:56:E5
Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Certificate serial: 01B0
Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/60CC4AB2265C11EDB262273EC4F9AE02.roa
Signing time: Sat 27 Aug 2022 23:02:53 +0000
ROA not before: Sat 27 Aug 2022 23:02:53 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 149483
IP address blocks: 103.180.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Validity
Not Before: Aug 27 23:02:53 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=630aa29c-fc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:af:f7:f0:0f:65:e0:ea:5d:c3:e9:f0:42:
ba:dd:64:2b:78:ae:ed:34:c7:97:65:bf:0b:ea:bd:
7a:2a:7c:40:52:e0:a1:42:00:4c:d4:47:73:5c:dd:
f8:0b:2d:7f:17:55:39:d3:d1:c9:91:0c:3c:6f:27:
d5:0e:69:24:1b:10:ab:62:12:7f:4d:f4:76:26:f2:
5b:5f:a4:25:3d:1f:24:03:98:3f:40:c8:4c:e4:8b:
6b:de:1f:cb:5f:d2:e8:4c:5a:56:b8:d4:c5:ab:59:
9c:39:18:47:85:d3:a0:9e:98:eb:b3:de:cc:b4:49:
1f:ad:75:a2:71:28:0c:20:c1:87:0e:ec:a6:07:53:
ad:79:a8:7d:2c:56:3d:a2:b0:bf:a1:63:4d:2d:0a:
b9:d5:63:77:8a:b6:0c:81:ed:77:db:9b:18:cc:92:
5a:6d:85:83:f3:39:ea:45:0b:14:d8:01:d6:ee:84:
20:5a:77:e6:b9:09:f2:27:3b:86:8a:d5:c7:fe:d9:
9c:45:a9:9a:e3:8c:b8:15:f6:dc:77:1a:8b:ed:08:
a9:66:8a:cd:5a:6a:33:8c:55:33:82:9c:81:72:ed:
24:8f:c6:ba:13:06:dd:3f:8e:d2:33:dd:53:1e:69:
c5:62:cb:36:e9:f6:20:4e:cb:24:ee:3d:92:ec:1c:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E2:28:9E:F4:84:1C:D7:DE:2C:19:44:85:2D:91:8A:CB:41:56:E5
X509v3 Authority Key Identifier:
keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/60CC4AB2265C11EDB262273EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4b:23:6f:ac:97:67:19:29:8a:c5:3d:28:56:8b:4d:6d:42:
31:08:19:ff:2a:7a:99:be:b7:fa:4a:4a:e8:59:5a:0a:84:7b:
25:3f:09:43:2c:80:5c:af:cd:fa:c1:28:93:4e:d2:40:80:e9:
ad:d5:93:e9:0b:b1:0d:52:e3:37:35:63:91:af:9c:75:f9:dd:
38:0b:65:57:84:53:f6:0e:f6:74:8f:93:7c:69:dc:5d:18:bb:
4e:0d:ed:ef:ba:c8:4c:fb:06:98:b9:d1:a7:2e:fc:36:9d:24:
76:71:87:c5:ae:be:ab:f9:10:03:77:0f:7e:45:66:8f:08:b6:
c5:53:b0:ef:ac:40:2b:e2:8f:6a:ad:5a:09:99:76:77:65:00:
fb:4b:cc:13:bc:db:16:f4:15:ef:a0:86:83:ed:cf:6b:0b:af:
d8:30:12:d5:f9:e3:23:87:13:9f:27:12:b1:3f:e7:ac:9d:6e:
46:69:f8:14:d0:67:a3:bb:a5:f8:13:18:10:ba:09:66:31:85:
e2:06:66:7e:7d:50:ce:50:ea:6e:81:53:c8:3f:a2:3c:ce:99:
04:d8:6d:2a:52:ca:53:e6:0c:d2:b3:43:65:66:0f:33:33:a9:
99:8e:ad:d5:08:e9:d2:83:a1:5d:20:7e:33:13:ce:c7:a7:cc:
bd:6c:d1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-ams.rpki-client.org