Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/B45B41A81BF011EEBDE45D3DC4F9AE02.roa
File: B45B41A81BF011EEBDE45D3DC4F9AE02.roa (raw, json)
Hash identifier: nVKTPtlRVe2GqQJOH3g37x+6jlfB0ZksNnme+j5D3YA=
Subject key identifier: DA:9B:8D:B0:30:B6:59:A4:B9:96:58:1E:84:67:05:B5:87:BE:E6:C0
Certificate issuer: /CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18
Certificate serial: 0242
Authority key identifier: 05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/B45B41A81BF011EEBDE45D3DC4F9AE02.roa
Signing time: Thu 06 Jul 2023 11:31:53 +0000
ROA not before: Thu 06 Jul 2023 11:31:53 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 149629
IP address blocks: 103.182.246.0/24 maxlen: 24
103.182.247.0/24 maxlen: 24
2001:df0:8040::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18
Validity
Not Before: Jul 6 11:31:53 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64a6a628-7810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:af:46:d5:c8:94:bf:67:82:55:33:57:94:
e4:2c:b7:45:c2:62:08:66:f5:ba:7c:c1:1d:7c:b3:
03:d1:1c:93:7f:89:db:f8:78:da:6c:87:a0:06:02:
b3:9a:7b:72:de:e7:95:f5:0e:46:81:44:70:63:1b:
ce:72:f5:c5:a3:81:4e:56:d8:a9:29:f5:e0:1b:5d:
14:28:7b:ef:95:67:f4:df:14:d6:30:59:db:23:ef:
03:c1:0d:4a:95:2b:91:7a:42:86:24:52:ed:46:17:
ee:65:45:9c:cd:8b:2e:37:ad:b2:40:ec:e2:36:a8:
44:29:2d:d5:75:46:d0:65:62:cf:0b:33:96:8e:f2:
c5:2a:27:a9:2c:4d:27:29:3d:74:14:4e:b3:6c:b6:
0c:d5:46:fc:ee:e2:79:30:a5:c2:80:2d:74:55:d4:
b5:b2:4b:17:ee:e1:3f:34:19:6e:a2:ac:d9:65:f0:
4a:24:76:97:8a:24:0b:9e:8b:47:b6:a9:9c:4d:bb:
9f:6e:f3:14:68:93:67:4d:39:cd:f3:34:f2:c0:98:
4a:eb:15:fa:e5:fa:2f:ea:78:4f:cf:41:ee:89:68:
d9:62:03:52:62:d8:d0:94:e9:a4:16:66:b4:1c:a4:
21:8d:ce:cb:e9:be:bd:30:a4:4c:9b:d4:2e:0b:70:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9B:8D:B0:30:B6:59:A4:B9:96:58:1E:84:67:05:B5:87:BE:E6:C0
X509v3 Authority Key Identifier:
keyid:05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/B45B41A81BF011EEBDE45D3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.246.0/23
IPv6:
2001:df0:8040::/48
Signature Algorithm: sha256WithRSAEncryption
a9:d9:e7:9d:87:4b:5e:92:e2:eb:1e:39:9f:fb:33:d8:44:d9:
c0:e8:80:95:f6:12:69:fb:c6:88:dd:53:19:ef:5b:27:87:c6:
3f:ee:1f:56:37:65:81:85:d5:48:5f:2e:8b:56:ea:64:23:76:
d8:9f:0a:63:2f:23:12:be:0c:69:8f:7f:a3:2e:3d:fb:d4:2b:
c5:46:53:6a:f5:c9:29:4f:80:3b:39:b7:d2:3e:f9:9e:a4:9e:
d8:79:c2:73:66:65:d4:5c:9b:5f:cf:5e:03:63:e7:6c:3e:3e:
e4:34:9d:05:56:0a:90:dd:c4:97:a5:a8:3a:a2:93:cb:8b:37:
8e:29:60:ae:35:f4:24:53:da:d4:09:07:f4:83:0c:65:e4:6a:
14:d5:f4:97:e7:12:fc:0f:1f:75:da:22:dd:e7:59:45:c5:fe:
66:c0:e3:05:ff:f5:46:30:c3:ad:ce:05:14:52:71:92:14:ad:
9a:80:06:1d:57:31:0f:4e:1e:ea:1b:3a:0b:7d:8d:86:27:e1:
25:09:d3:6a:45:a8:b1:82:05:71:10:2d:ce:df:95:71:17:53:
1b:10:09:bd:18:a2:6b:1d:8c:16:8a:e4:7d:30:99:21:db:2c:
38:66:30:0b:85:0d:5c:d3:94:bf:d1:c4:0d:5a:1d:6b:61:49:
ff:fc:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org