Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/5426FC04098B11EE8E1F3382C4F9AE02.roa
File: 5426FC04098B11EE8E1F3382C4F9AE02.roa (raw, json)
Hash identifier: FczWscgiltOgPA6vhfmefF5CcxJp6WmDv3FsuaS+pTc=
Subject key identifier: 47:71:72:B3:5B:62:4E:A6:12:14:37:B0:E1:DF:81:45:B2:E1:AC:C5
Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial: 0A85
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/5426FC04098B11EE8E1F3382C4F9AE02.roa
Signing time: Tue 13 Jun 2023 01:40:51 +0000
ROA not before: Tue 13 Jun 2023 01:40:51 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 132436
IP address blocks: 103.145.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2693 (0xa85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Validity
Not Before: Jun 13 01:40:51 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6487c923-5663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:72:a3:47:a8:84:e5:15:bc:d8:65:1b:b2:
e1:d5:1f:3d:39:11:8a:23:f7:f6:09:35:87:bb:14:
c7:14:b8:a2:05:ad:fc:98:db:50:63:f5:cd:bd:26:
20:6c:54:ff:70:f7:11:58:4f:42:ea:6c:b7:79:74:
9c:7b:14:ee:6d:52:f9:e4:0b:5b:2e:76:14:31:5f:
39:6b:3b:08:12:3f:e7:44:d1:22:6b:36:27:eb:9c:
e1:c2:b7:a8:89:53:ed:25:ae:6c:17:f4:ba:ec:c9:
0a:1c:6f:d8:ad:0c:b2:f9:f9:fc:28:87:44:6b:29:
e2:76:bd:8c:72:61:cb:f3:c9:b5:44:b8:f2:61:a5:
a8:e1:4f:a5:97:a7:04:bc:7b:b0:bc:77:75:99:1f:
d0:2b:ac:4b:12:10:ed:d4:cb:6a:b8:d5:df:74:c7:
d5:78:36:26:97:1b:6c:5d:ac:67:7a:0c:ff:d2:07:
d8:94:30:74:98:99:5a:74:b1:45:8f:0f:5d:ce:1c:
70:9c:a6:5a:7d:1e:be:e2:fc:19:34:7e:13:be:31:
39:ca:89:5b:4b:0e:00:ec:db:8f:bd:ea:6c:1e:05:
3c:01:4b:41:42:d4:40:4d:53:b5:e4:8e:69:e8:ec:
b6:ce:54:f5:1c:c6:78:eb:b1:8a:cf:23:44:bd:72:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:72:B3:5B:62:4E:A6:12:14:37:B0:E1:DF:81:45:B2:E1:AC:C5
X509v3 Authority Key Identifier:
keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/5426FC04098B11EE8E1F3382C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.205.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2d:37:d6:3e:77:df:70:24:fc:3f:b8:f8:9c:e2:33:cc:62:
51:c6:cf:0f:b2:09:9c:53:ae:d3:fb:35:51:47:88:fa:35:49:
9e:49:1c:6d:8a:dd:8d:27:92:5c:25:7d:90:17:1c:6d:f9:9e:
77:23:02:44:bd:f6:74:da:7b:5e:ef:c8:24:78:de:10:49:e4:
0a:a4:9b:27:59:1e:d4:48:d1:d1:97:79:df:19:97:44:6b:b4:
83:3c:a1:34:bc:63:f9:ec:35:f8:db:a7:a1:16:ea:79:01:b5:
ca:17:0f:0a:d2:47:28:7c:4a:85:0d:aa:96:9c:31:02:0c:8b:
f1:b7:3a:bd:a6:97:e6:2e:c4:a0:88:84:e4:4d:df:11:49:9c:
c6:45:5d:d3:8b:ee:15:c4:4f:55:80:8c:3d:d3:be:9d:15:4c:
1b:0e:4d:5f:bb:f1:85:4d:2b:1e:1c:f4:19:92:3b:73:9d:42:
d8:84:c3:c6:8b:e0:0e:1e:d1:86:76:c4:35:61:3d:8d:f3:22:
1e:b1:56:7f:3b:5d:43:68:01:c5:a3:5d:d4:3d:02:12:15:f7:
b5:04:86:34:5c:ac:3e:85:a1:b2:27:7c:86:9e:21:02:bd:41:
e3:d8:af:57:83:9a:88:f2:f4:ba:3c:69:11:cc:b9:86:e7:4a:
43:88:c7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org