Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/05D578BE92D211EBAE186A77C4F9AE02.roa
File: 05D578BE92D211EBAE186A77C4F9AE02.roa (raw, json)
Hash identifier: yVocmsaLGkGtvWiWSpoBxIMt8hndxyxSjhBWqn+WNu4=
Subject key identifier: 7E:54:D2:26:C5:FF:9F:2D:00:5A:EF:6F:30:75:AD:CE:C1:1D:BA:9C
Certificate issuer: /CN=A9180FC2/serialNumber=062E3716DCC626C4924FF5347EF73928B80D73C4
Certificate serial: 04AD
Authority key identifier: 06:2E:37:16:DC:C6:26:C4:92:4F:F5:34:7E:F7:39:28:B8:0D:73:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/05D578BE92D211EBAE186A77C4F9AE02.roa
Signing time: Fri 27 Aug 2021 10:39:21 +0000
ROA not before: Fri 27 Aug 2021 10:39:21 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 49981
IP address blocks: 103.147.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197 (0x4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180FC2/serialNumber=062E3716DCC626C4924FF5347EF73928B80D73C4
Validity
Not Before: Aug 27 10:39:21 2021 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=6128c0d9-daf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:51:30:bb:c1:66:04:66:cb:1e:31:19:73:a9:
05:c5:87:e9:30:48:10:65:d9:ff:e5:59:af:59:81:
c8:bc:14:cd:79:41:ab:d6:78:23:33:79:17:cf:d9:
12:34:96:96:59:c4:58:c4:99:c4:13:4a:72:c1:83:
21:df:be:76:36:11:ef:a9:cb:8a:48:b3:43:d5:12:
35:ce:b7:9a:1e:9b:5d:93:60:4b:a4:f8:e9:60:e8:
37:0c:be:90:c2:f3:58:eb:99:0e:b2:2a:d5:88:6a:
7c:57:5a:02:09:d4:be:c2:82:09:96:49:13:2e:11:
b8:1d:2d:d4:be:34:20:97:79:38:da:91:3d:02:71:
75:c3:d3:23:a6:ed:12:ee:31:90:41:86:49:29:b1:
3d:df:71:cf:8f:4f:a5:6d:84:e9:69:ab:79:45:e3:
55:ca:b9:b7:e3:93:c8:f8:3c:74:3e:09:b6:d7:82:
9a:9a:86:7e:2b:1f:f8:6d:42:08:d3:c6:34:c6:0a:
2e:ae:57:1f:fe:b7:8a:fd:d8:83:b0:a9:82:dc:c6:
8e:8e:5c:cd:08:44:bd:46:bc:e2:27:d9:1b:ee:f5:
3d:9c:b7:0c:a6:38:5d:ae:c7:7b:69:75:07:e4:7f:
dc:e9:84:de:38:19:ec:3f:8b:01:9c:c6:c1:6a:c1:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:D2:26:C5:FF:9F:2D:00:5A:EF:6F:30:75:AD:CE:C1:1D:BA:9C
X509v3 Authority Key Identifier:
keyid:06:2E:37:16:DC:C6:26:C4:92:4F:F5:34:7E:F7:39:28:B8:0D:73:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/05D578BE92D211EBAE186A77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.152.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ba:af:1e:f5:6a:45:86:2f:28:c6:14:ba:9c:1b:6f:e5:72:
a8:51:80:56:b8:d1:e8:24:67:8f:48:3f:5f:7f:f2:25:41:1e:
fb:c1:e9:d9:32:b8:9b:77:a0:7d:c4:3a:7c:29:1f:06:0e:77:
e7:99:ee:bc:c7:1c:4d:72:ae:e9:03:34:02:be:e8:16:76:12:
6f:a0:4c:ec:79:75:9d:47:cf:bc:d8:0e:dc:5c:f0:06:07:aa:
9d:d1:4f:5d:0a:4e:ff:e7:fb:59:93:6f:17:f7:40:d6:b7:04:
5d:07:a7:93:8a:c4:b6:18:67:63:ba:46:20:8f:2c:2f:ea:f0:
45:eb:43:37:b5:b8:68:f1:4b:d8:51:fc:55:57:ef:c6:09:eb:
fb:ea:8d:a2:7c:5e:43:70:f0:99:93:4a:28:ec:47:98:d1:33:
63:f2:48:74:92:5e:dc:a6:7e:53:b3:24:97:24:ba:21:82:94:
f6:42:0c:5a:6e:23:c4:ac:e9:51:9b:98:c0:44:63:1f:22:f1:
78:09:0a:35:4b:8d:15:db:31:9e:60:26:e5:2c:a2:d5:af:96:
34:ca:33:67:16:e6:19:f8:b1:33:5d:24:af:54:64:5e:e8:3d:
20:fa:73:58:b4:a5:b2:04:0e:a7:25:60:d1:f5:63:81:27:7c:
9f:0c:2d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-fra.rpki-client.org