Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/0626421CCB9311ECA3F71B5FC4F9AE02.roa
File: 0626421CCB9311ECA3F71B5FC4F9AE02.roa (raw, json)
Hash identifier: mMcPaRMFwgHlOS0fCDIMInyXtk6GEJdi9/jHg9GNtio=
Subject key identifier: 56:32:5D:0C:20:94:C4:DE:F8:C6:D1:0F:B1:2A:5D:35:9F:3F:A0:DE
Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial: D4
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/0626421CCB9311ECA3F71B5FC4F9AE02.roa
Signing time: Wed 04 May 2022 10:14:47 +0000
ROA not before: Wed 04 May 2022 10:14:47 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 134562
IP address blocks: 103.180.112.0/24 maxlen: 24
103.180.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Validity
Not Before: May 4 10:14:47 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62725217-9a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:f2:30:c0:27:6b:33:e2:7f:d0:ae:b2:a2:
84:14:63:cd:98:19:93:ed:68:14:4b:3a:ad:6f:30:
3b:8e:31:53:6b:74:94:78:0f:82:de:23:85:0a:40:
92:37:e0:15:0b:86:f7:bb:72:f3:6b:63:cc:8e:18:
12:77:69:12:97:37:61:65:18:52:38:66:dd:9d:04:
3b:1f:93:c1:c7:9f:0e:5d:0b:6b:8e:ed:47:5d:dc:
88:10:98:c1:89:ce:7b:ed:7d:65:b9:d9:bb:46:fd:
fd:a4:ce:61:f1:ba:5b:94:c7:aa:b8:e0:c5:2b:6b:
a5:30:ba:35:cf:43:00:ad:95:68:0a:a9:2b:76:c5:
c1:33:fc:86:5c:db:bb:65:15:6d:de:f6:9e:ca:2e:
1e:72:44:c4:7e:30:5b:7d:f7:f7:a3:5c:94:09:63:
c7:81:a5:5d:0e:ed:c8:06:c3:24:9f:cb:31:96:c1:
1e:df:81:7e:30:6f:28:d3:fb:b2:cd:54:60:cc:ee:
e0:fe:72:5c:20:4c:2e:56:fd:fe:78:7f:ac:55:08:
d3:7d:c8:aa:90:c7:a0:aa:7f:7e:3d:dc:55:e1:43:
ef:4f:8f:e9:1a:2b:b0:32:80:d2:cd:0d:60:98:c5:
a8:fb:81:54:68:ff:d2:b7:60:c8:e0:e3:1c:49:96:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:32:5D:0C:20:94:C4:DE:F8:C6:D1:0F:B1:2A:5D:35:9F:3F:A0:DE
X509v3 Authority Key Identifier:
keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/0626421CCB9311ECA3F71B5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.112.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:f2:22:15:1d:ee:ef:46:cc:98:53:7c:95:50:7e:66:b7:c0:
df:33:ec:bc:92:2e:44:33:9b:00:f5:4a:02:41:e1:f0:61:a7:
65:de:19:26:ac:87:6d:2e:70:31:47:2e:11:18:76:e0:1f:82:
ba:ef:97:fd:09:3a:75:cd:c0:02:b0:c2:3c:4c:af:65:7e:6c:
c5:89:a3:e7:aa:68:bc:2d:04:f7:aa:cb:4f:f4:42:65:fe:6c:
86:f6:03:2e:d2:d6:d8:04:1e:1d:aa:2d:8b:70:2a:2a:e3:5b:
7b:a3:5a:ae:58:c9:e9:ab:44:e7:7f:c5:48:a3:a4:e5:09:87:
1a:e7:52:64:64:f3:ae:c2:ca:f0:77:60:87:23:8a:b1:09:a4:
6e:78:1c:1c:25:89:4d:f7:09:ff:71:f2:74:70:01:f6:5b:d0:
64:f2:5a:88:b1:b8:2e:ea:f2:6c:40:fe:d9:21:4e:91:c1:d7:
0f:77:6e:28:d0:d3:c0:78:ce:6d:e9:a5:c2:fd:eb:0f:24:1b:
2f:3b:be:68:d9:c7:ae:12:32:ca:16:e5:75:fe:ca:7b:37:aa:
49:44:15:cb:89:26:56:76:3c:6b:f0:07:49:8f:2e:40:8c:f5:
08:8c:31:5a:bd:29:f4:33:3f:23:0e:08:4b:fa:e2:ca:82:d8:
08:b8:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-ams.rpki-client.org