Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/61B09C8A4EF711EDB483A887C4F9AE02.roa
File: 61B09C8A4EF711EDB483A887C4F9AE02.roa (raw, json)
Hash identifier: C+NmxD31uWYX5ZpZP93lZdUjx5XUz7dS1CTmSZ8pcb4=
Subject key identifier: 6B:99:93:65:BE:F2:54:A0:7A:DB:96:AE:97:53:E0:BE:53:8D:BE:67
Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial: 0260
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/61B09C8A4EF711EDB483A887C4F9AE02.roa
Signing time: Mon 13 Mar 2023 06:34:15 +0000
ROA not before: Mon 13 Mar 2023 06:34:15 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 149474
IP address blocks: 103.180.112.0/24 maxlen: 24
103.180.113.0/24 maxlen: 24
2400:52a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Validity
Not Before: Mar 13 06:34:15 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=640ec3e7-3e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:db:b8:cf:c3:21:b5:4b:02:13:96:ed:fb:
dd:c9:77:70:04:63:7e:b9:96:0a:a5:02:02:6e:d2:
18:3f:4c:5c:c9:89:16:c1:72:55:fa:5f:09:5d:84:
5e:00:b8:7e:fb:6e:87:22:47:a5:9c:98:1c:40:f7:
78:be:15:71:d0:21:e4:c0:be:fe:9f:21:0c:d5:fc:
a9:e1:79:ae:08:d5:e6:88:ea:1d:74:76:bc:f4:26:
75:de:67:1b:16:dd:19:ad:15:bc:c2:37:8f:c2:37:
66:58:66:54:7c:12:59:a1:ed:a8:70:b9:97:46:25:
8e:62:bd:a8:3e:ef:92:9d:da:a0:ef:4a:77:ad:44:
3f:01:cd:7c:d8:90:13:a1:37:b7:98:11:9e:e4:c3:
6c:a2:ef:a0:a9:21:df:0d:5e:8c:8a:aa:80:c5:65:
fa:2f:b6:d7:f4:d0:9d:c7:5b:14:fd:93:65:8f:42:
cd:37:41:76:6c:4c:ec:80:8f:c5:88:ee:95:41:36:
ed:ce:77:c8:f4:df:2f:7c:6e:0d:1b:0b:88:4b:8c:
3e:83:8c:1f:a6:dd:57:5b:03:ab:5c:3c:2f:a3:37:
15:ab:c8:ae:00:5b:6a:6c:51:e5:73:31:6b:4f:2f:
8a:ab:59:77:dc:d7:64:66:7b:de:3e:ee:a0:ee:2f:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:99:93:65:BE:F2:54:A0:7A:DB:96:AE:97:53:E0:BE:53:8D:BE:67
X509v3 Authority Key Identifier:
keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/61B09C8A4EF711EDB483A887C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.112.0/23
IPv6:
2400:52a0::/32
Signature Algorithm: sha256WithRSAEncryption
19:0f:11:c0:26:ea:fc:f9:63:55:04:19:49:4f:26:3f:39:64:
63:92:b2:9c:a3:a4:c4:81:a0:5b:45:f8:4f:2c:8b:09:fb:db:
1a:bb:6a:f4:b0:29:63:5c:6a:93:5c:b2:a8:88:3e:d4:aa:e7:
b5:53:51:fe:28:3a:a9:f6:58:6f:ca:1a:a2:28:1f:05:d8:54:
d9:c6:c5:95:66:dd:e2:d7:5d:90:e7:c4:4a:30:a6:77:67:d7:
29:cd:82:f0:42:dc:02:d9:6a:fe:83:e1:c0:e3:79:55:f1:bc:
76:da:80:4d:c4:0a:3e:d8:d5:47:57:0e:06:15:26:5d:1f:fe:
60:4c:3a:35:b6:1e:ac:ca:07:85:16:5b:7b:ba:b0:68:d1:4c:
a6:5e:55:ae:0a:c5:85:9a:4f:00:80:8a:13:38:0a:f1:22:7f:
21:12:b8:fe:53:40:db:27:a1:dd:eb:11:a5:0b:a9:cb:07:52:
38:ae:94:48:78:c6:42:08:03:8e:04:0d:c9:7e:5c:c4:04:cb:
70:00:89:de:4a:3e:be:a3:e0:86:07:da:b2:5d:0a:fe:09:8b:
98:a8:89:dc:5f:5e:8d:2f:25:f4:5d:c5:0c:a3:1e:63:19:3d:
bd:cf:1d:06:9b:a4:0a:25:af:0d:57:d2:57:06:fc:0c:cd:56:
7c:96:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org