Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/C452CE40859211ED8A338011C4F9AE02.roa
File: C452CE40859211ED8A338011C4F9AE02.roa (raw, json)
Hash identifier: 0zEjdG8TuhMCQXUjlXZYgs9zXANXM1UbyAf43sbzcto=
Subject key identifier: 15:F8:0C:47:96:D7:28:E8:33:63:60:3D:9A:0F:21:22:52:33:58:E2
Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial: 0444
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/C452CE40859211ED8A338011C4F9AE02.roa
Signing time: Tue 27 Dec 2022 03:01:32 +0000
ROA not before: Tue 27 Dec 2022 03:01:32 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 133886
IP address blocks: 103.45.252.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Validity
Not Before: Dec 27 03:01:32 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63aa600c-8bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:4e:d1:72:d6:90:75:2d:bd:0a:5c:83:60:
51:e8:61:04:8b:0d:39:86:ea:8e:a5:bc:04:82:09:
38:ba:67:08:6e:44:4c:56:dd:ba:a3:49:72:c8:5c:
cc:02:f3:1a:2c:4d:c5:24:bc:c6:de:64:a1:43:a7:
77:e5:04:86:01:09:83:c9:28:a2:43:2d:8c:62:c1:
eb:0a:de:65:f7:e9:6b:c0:41:c7:29:78:db:10:8e:
e4:66:8e:42:19:97:34:31:89:4e:0c:48:c4:cd:11:
1b:e0:7e:14:73:1f:79:42:81:c9:d0:8e:17:3b:d0:
f2:7d:90:f1:40:5d:a4:25:0a:4f:85:2a:d2:57:34:
da:b6:7e:8c:55:f6:15:df:c8:48:7d:fb:1e:d8:5c:
9f:55:9c:7a:95:8a:63:d7:88:cc:0d:0b:da:94:42:
75:15:29:2d:d0:bf:ee:07:2f:d5:df:2a:6d:e6:9d:
7e:bf:fb:84:57:88:0c:1c:ad:86:d8:7e:e6:5f:fd:
8b:62:a8:c7:39:41:7d:ac:5f:f0:b0:5b:1c:b5:a3:
52:1f:25:2e:02:4a:14:88:9f:d7:91:6b:2b:ed:62:
43:5d:a7:c0:82:f5:d1:79:f2:db:65:7c:7f:ac:6e:
08:e5:ba:6c:56:a2:75:44:ab:0a:d1:46:26:d2:d8:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F8:0C:47:96:D7:28:E8:33:63:60:3D:9A:0F:21:22:52:33:58:E2
X509v3 Authority Key Identifier:
keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/C452CE40859211ED8A338011C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.45.252.0/23
Signature Algorithm: sha256WithRSAEncryption
91:d0:41:a6:f4:65:9a:24:fa:16:21:42:9c:ff:97:c5:a7:59:
03:c0:65:d8:e6:b5:40:ea:50:ee:10:22:65:ef:fd:d1:cd:0d:
e9:d0:cd:3a:56:57:fe:cb:f7:80:f5:bc:a4:71:12:13:28:7a:
a8:14:4d:ef:71:4e:13:69:7b:72:09:5a:c6:59:59:c3:ae:2d:
e1:c2:3b:c9:d7:bc:7e:3a:82:c3:e2:d2:21:38:08:fe:e5:76:
46:34:eb:d6:4c:b9:86:2f:40:1c:f5:54:33:33:a2:92:25:81:
a9:88:68:5c:d5:b7:b0:21:7f:64:4d:20:db:ea:15:58:69:9b:
30:29:d4:b2:5b:7d:bc:ee:b5:25:f1:95:8c:c4:75:b9:41:d3:
a2:d6:9f:3c:25:39:f3:5a:b2:b5:34:22:e9:41:05:17:b3:2b:
99:8d:6d:25:c4:85:81:53:de:8b:c4:b2:a3:2b:aa:ef:70:9b:
97:26:f0:a5:a8:7e:11:a6:a9:05:00:db:d0:6a:e4:20:dc:6a:
12:e7:7a:e4:ef:c6:c2:44:a2:32:5d:02:f2:89:9d:29:9a:44:
cf:f5:c0:dd:44:5e:ed:61:77:32:7f:26:76:9d:ba:b5:16:7a:
f3:3a:c9:11:e5:ab:0f:34:3b:74:e7:a0:34:b8:a3:55:04:59:
40:77:8a:d4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC
MUQ1ODgzNjkwHhcNMjIxMjI3MDMwMTMyWhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2FhNjAwYy04YmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjNO0XLWkHUtvQpcg2BR6GEEiw05huqOpbwEggk4umcIbkRMVt26o0lyyFzM
AvMaLE3FJLzG3mShQ6d35QSGAQmDySiiQy2MYsHrCt5l9+lrwEHHKXjbEI7kZo5C
GZc0MYlODEjEzREb4H4Ucx95QoHJ0I4XO9DyfZDxQF2kJQpPhSrSVzTatn6MVfYV
38hIffse2FyfVZx6lYpj14jMDQvalEJ1FSkt0L/uBy/V3ypt5p1+v/uEV4gMHK2G
2H7mX/2LYqjHOUF9rF/wsFsctaNSHyUuAkoUiJ/XkWsr7WJDXafAgvXRefLbZXx/
rG4I5bpsVqJ1RKsK0UYm0tj/2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBX4DEeW
1yjoM2NgPZoPISJSM1jiMB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2
MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODBERjUvRjRGRDIyN0FBNjMyMTFFQkIzRTE3OTY5QzRGOUFFMDIvQzQ1MkNFNDA4
NTkyMTFFRDhBMzM4MDExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnLfwwDQYJKoZIhvcNAQELBQADggEBAJHQQab0ZZok+hYh
Qpz/l8WnWQPAZdjmtUDqUO4QImXv/dHNDenQzTpWV/7L94D1vKRxEhMoeqgUTe9x
ThNpe3IJWsZZWcOuLeHCO8nXvH46gsPi0iE4CP7ldkY069ZMuYYvQBz1VDMzopIl
gamIaFzVt7Ahf2RNINvqFVhpmzAp1LJbfbzutSXxlYzEdblB06LWnzwlOfNasrU0
IulBBRezK5mNbSXEhYFT3ovEsqMrqu9wm5cm8KWofhGmqQUA29Bq5CDcahLneuTv
xsJEojJdAvKJnSmaRM/1wN1EXu1hdzJ/JnadurUWevM6yRHlqw80O3TnoDS4o1UE
WUB3itQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org