Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/5F6C5B8A4EF711EDB483A887C4F9AE02.roa
File: 5F6C5B8A4EF711EDB483A887C4F9AE02.roa (raw, json)
Hash identifier: AaznqBQYmWj6QjGag0cl9kT22B4udVKjQ6YnVO/T+3Y=
Subject key identifier: 38:E1:9D:13:70:61:7E:CB:A1:36:B7:6B:31:22:B7:A9:A6:DB:CB:FB
Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial: 020A
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/5F6C5B8A4EF711EDB483A887C4F9AE02.roa
Signing time: Tue 18 Oct 2022 15:13:09 +0000
ROA not before: Tue 18 Oct 2022 15:13:09 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 141731
IP address blocks: 103.180.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Validity
Not Before: Oct 18 15:13:09 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=634ec284-6561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:96:dc:eb:d9:7c:99:7d:e7:38:d5:75:c4:
6e:68:1a:35:50:15:8a:d5:57:f1:b7:ac:c1:53:90:
32:11:85:0d:84:d4:0a:60:f7:fb:5a:8b:a0:ea:30:
90:b9:00:e3:68:e7:f4:11:90:ee:44:9c:28:b0:13:
d7:4f:f4:bd:d8:e6:56:1d:11:1c:60:45:fc:0b:3e:
61:8e:33:b6:0d:ea:a7:66:8f:d6:29:61:21:ab:d3:
df:98:de:b5:0e:d0:7d:4e:35:2b:9d:ed:d6:9d:17:
80:82:d7:a3:d9:39:35:34:c3:9d:85:b2:17:2d:0d:
3e:da:81:9a:91:13:df:05:a1:2c:01:4e:b7:b7:85:
e5:65:ef:c1:38:e2:14:6e:1f:13:d7:b8:82:18:83:
74:3d:64:80:07:da:a9:74:6e:20:07:bf:88:a1:e7:
91:45:64:94:db:a2:55:82:c9:67:2e:05:5e:10:4b:
cf:aa:29:7f:9b:8f:9d:bb:e6:20:3d:58:aa:c3:7e:
e5:af:22:f1:fc:59:77:26:85:1c:9f:90:83:83:f3:
a9:e1:c4:78:ae:c0:d7:71:06:5d:bd:19:53:dc:4b:
96:cb:f4:63:9a:ab:26:6b:8d:00:37:3f:14:bf:03:
fc:90:5b:b9:a3:5a:b8:d8:fc:16:0a:b6:13:78:39:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:9D:13:70:61:7E:CB:A1:36:B7:6B:31:22:B7:A9:A6:DB:CB:FB
X509v3 Authority Key Identifier:
keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/5F6C5B8A4EF711EDB483A887C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4b:e0:77:7e:ed:c2:61:04:ae:e6:28:d7:5a:d5:60:95:fa:
65:a8:44:f7:14:a1:cf:73:bf:01:23:a9:8e:fe:e5:0a:84:77:
2e:b2:c6:90:14:f7:0e:0e:1c:77:fb:89:11:26:9d:5a:6a:59:
7b:31:83:7a:6f:73:91:6a:d3:47:aa:03:44:29:35:4a:57:b6:
c5:a9:eb:89:17:8c:90:fd:6a:df:27:28:c7:26:52:9d:12:96:
b7:45:50:27:29:32:42:c0:17:05:d1:2c:58:cf:80:a3:b7:79:
be:ea:b4:d2:08:bf:29:8b:da:a7:74:d2:4e:7e:0b:c0:3b:92:
7c:c2:b4:a3:05:42:dc:42:03:34:41:33:e5:d0:14:c8:4b:34:
07:27:07:4d:fa:5f:0d:0f:4d:a4:3f:72:ac:da:25:59:07:10:
2e:07:c3:71:7a:c4:e6:33:56:f9:4c:14:26:c1:6f:57:67:50:
de:8f:82:1b:f3:96:69:67:3e:85:1f:8e:76:16:6a:8e:cf:d3:
3b:f5:03:45:11:60:c1:77:47:49:0e:13:e0:8f:d5:2e:e5:77:
36:e0:3f:1d:d0:f4:01:80:77:e1:e9:fb:ac:71:63:5a:d6:4e:
16:ea:1c:02:09:0e:17:e1:4b:b8:59:ff:8c:70:41:da:ee:d9:
7f:dd:a2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org