Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/60A47EC44EF711EDB483A887C4F9AE02.roa
File: 60A47EC44EF711EDB483A887C4F9AE02.roa (raw, json)
Hash identifier: fpqNCLJjR2ote7Wq1S3+NuuqHUiR6C8PuwaG02b9NM4=
Subject key identifier: 66:BB:2D:A2:6B:E4:38:BB:75:7C:B7:E2:6D:9B:AC:D8:82:5E:94:53
Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial: 020B
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/60A47EC44EF711EDB483A887C4F9AE02.roa
Signing time: Tue 18 Oct 2022 15:13:11 +0000
ROA not before: Tue 18 Oct 2022 15:13:10 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 134562
IP address blocks: 103.180.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Validity
Not Before: Oct 18 15:13:10 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=634ec286-ff73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:6d:02:7b:d5:55:88:e7:ad:3d:df:b1:9c:
4a:51:ef:1e:e6:ab:90:27:41:5c:a6:70:75:ef:41:
0d:56:64:fb:6c:32:bb:09:2e:83:aa:8a:68:20:bf:
a2:8d:ef:86:27:35:fe:1c:3d:d2:bb:00:71:d8:4a:
e8:e2:cb:1f:16:09:88:c8:ff:25:69:6c:a8:54:0d:
85:5a:0c:94:84:76:52:f8:96:2a:44:3c:e7:13:21:
3a:03:9f:50:52:48:e8:c5:c2:bc:f3:01:a6:f7:0a:
c7:ce:15:72:a2:50:c0:7b:48:90:72:60:e4:92:77:
a4:87:c6:01:99:42:23:44:28:75:ec:95:9d:c7:2b:
a3:b6:43:72:ad:a8:b0:e4:4d:65:6a:a0:51:3d:d3:
53:36:bd:c3:ab:0b:84:5a:0d:0d:3c:e4:43:1b:3a:
38:9f:9c:4e:fb:c6:0a:5b:6e:f8:34:fa:7b:e5:4e:
d2:33:c4:1c:5e:f4:71:5b:c6:93:d2:84:73:7c:4c:
09:b8:66:64:7b:43:4d:1f:ce:6a:4a:40:c2:37:4e:
9d:83:cb:06:f1:06:7f:c1:82:a7:3e:62:06:60:99:
d7:39:74:70:51:fd:78:2c:a4:e9:c5:06:37:1d:b6:
c4:d4:2c:c9:46:84:a5:9d:d1:20:f9:4f:06:35:c9:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BB:2D:A2:6B:E4:38:BB:75:7C:B7:E2:6D:9B:AC:D8:82:5E:94:53
X509v3 Authority Key Identifier:
keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/60A47EC44EF711EDB483A887C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.112.0/24
Signature Algorithm: sha256WithRSAEncryption
72:76:1a:83:33:33:59:17:f6:dc:15:1f:ca:ce:5e:e7:af:48:
1b:d5:a2:46:34:01:a3:80:08:6e:e2:00:a6:d9:d5:77:e0:e0:
64:c7:9c:2d:5e:c0:c6:74:c8:1f:3c:b3:65:c3:be:d9:6b:53:
c2:38:66:df:77:21:45:e9:0e:47:ad:47:b1:42:ea:fa:30:5e:
fb:f6:27:e7:cd:29:42:c6:aa:ea:49:44:65:38:4d:7d:70:c4:
74:df:3f:01:ec:ba:6b:8d:a4:d7:8b:19:3b:2b:0d:16:07:f5:
e5:05:ce:c6:e2:e9:8e:da:ad:69:53:06:9d:30:1b:e4:6f:9b:
03:f5:6b:b2:21:7f:97:56:ac:6c:60:1c:02:a9:43:fd:3c:a1:
3e:3c:a9:cb:d3:14:a4:27:64:f2:af:25:5f:ac:3d:99:cb:f8:
c7:0f:57:cc:2d:7a:8f:39:bd:e6:b4:52:8c:5f:a4:f0:de:12:
9a:eb:a2:2a:47:ae:c1:67:a1:2e:42:88:69:13:39:64:db:a0:
67:a0:5c:04:ee:e4:d1:83:73:a6:05:75:20:41:b2:15:48:51:
84:7c:f6:c7:8d:ee:a2:ee:ec:28:51:6f:7c:b6:9a:4e:0f:47:
8d:b3:c7:9b:68:26:a9:88:4f:bf:e0:33:db:2e:ea:97:13:5c:
29:4a:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-fra.rpki-client.org