Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/6C99BDF883C211EC8AC47780C4F9AE02.roa
File: 6C99BDF883C211EC8AC47780C4F9AE02.roa (raw, json)
Hash identifier: I/jDSL89Mi41eBQgEtIlbPGQ70/nOXGICKeaQMaVBf8=
Subject key identifier: BB:92:41:61:EE:18:98:59:C1:D9:5D:E7:B3:26:61:49:04:78:00:FB
Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial: 02
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/6C99BDF883C211EC8AC47780C4F9AE02.roa
Signing time: Wed 02 Feb 2022 00:52:41 +0000
ROA not before: Wed 02 Feb 2022 00:52:41 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 51847
IP address blocks: 103.181.12.0/24 maxlen: 24
103.181.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Validity
Not Before: Feb 2 00:52:41 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=61f9d5d9-b80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:96:6a:fa:cd:f0:cb:89:79:85:50:cd:37:
60:5a:16:10:bd:e1:b7:32:23:59:48:b4:20:ee:c6:
17:69:14:e7:40:5d:10:58:f5:a6:63:06:9b:13:a3:
46:89:4c:f2:70:65:0c:4c:30:24:c8:63:9f:fc:bb:
0e:d9:a5:9b:36:6c:ba:5e:cb:16:d0:b1:ec:5d:3e:
c8:23:95:10:d3:79:c0:a9:5f:6d:9c:b1:1e:b1:d4:
45:c3:b5:59:25:04:09:42:5b:14:05:9e:48:22:5f:
8c:c7:14:18:47:46:a4:df:45:e9:ed:69:0d:ff:cb:
23:39:b6:67:6f:b4:5c:58:b1:61:a3:51:fd:87:e4:
8f:e9:b4:8f:1a:54:3e:c4:7d:59:e0:07:1a:f5:b4:
27:db:e5:f3:20:5a:5c:64:dd:af:8f:b0:ce:9a:f8:
c8:8e:ed:1b:77:f8:a2:62:31:45:bb:df:69:87:4f:
59:ec:20:a5:cc:c5:54:41:dd:24:93:28:57:b5:43:
89:f1:e5:ec:9a:00:b9:6b:57:ad:52:f9:4a:db:6e:
60:8c:87:94:ac:e7:c6:2d:c4:a2:f6:06:86:68:9d:
f7:1d:ae:d6:25:9c:64:eb:1b:78:74:2e:1a:58:14:
e1:9a:15:8d:ab:8c:18:d6:89:29:2e:52:33:1d:62:
75:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:92:41:61:EE:18:98:59:C1:D9:5D:E7:B3:26:61:49:04:78:00:FB
X509v3 Authority Key Identifier:
keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/6C99BDF883C211EC8AC47780C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.12.0/23
Signature Algorithm: sha256WithRSAEncryption
27:23:0e:ba:43:14:37:22:fb:3f:32:12:eb:0a:57:b1:36:09:
cd:d6:ad:d4:e0:64:eb:2d:8e:e5:ea:7b:49:c6:b1:eb:05:24:
f6:4b:ee:36:99:1d:7a:71:82:b7:06:34:90:ed:4b:6d:75:74:
8c:15:54:13:e4:fe:33:8f:3e:92:ad:6f:a8:90:72:9a:15:28:
45:24:7e:ab:89:ed:96:a2:42:0f:fb:50:dd:ca:67:f7:67:c1:
88:f3:40:2d:b0:3c:82:35:de:25:af:41:d1:f8:a9:c2:3b:2c:
f9:6d:0c:89:9b:2e:0f:52:32:21:a2:74:59:da:ed:48:31:d5:
ec:67:a1:72:4c:30:76:93:3f:f2:7b:33:34:a5:c3:d1:d6:15:
9d:b5:ba:a1:be:f5:3e:5e:23:8f:54:62:da:c2:d3:0f:a6:02:
d3:d9:7c:68:0c:0c:b2:de:3a:2b:d9:30:9c:43:65:fb:e6:d6:
65:aa:21:21:37:c1:c1:87:39:08:24:4a:b4:13:8a:90:05:4a:
15:f0:10:e2:ca:3f:3c:bc:43:ef:f8:8d:14:3a:b7:27:00:f6:
3e:02:06:25:90:d1:d0:ac:2a:9c:fe:02:f0:ec:8e:42:b8:50:
b5:59:37:74:76:5e:71:44:18:db:2e:11:53:84:8e:e1:af:45:
c4:6b:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org