Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/B34B39F2AF4B11ECB461E634C4F9AE02.roa
File: B34B39F2AF4B11ECB461E634C4F9AE02.roa (raw, json)
Hash identifier: tYxUMPAiUT34Q9FMYkRLmFNTqwkTw9eTcEnfzs/KiIo=
Subject key identifier: 30:24:D0:B8:3C:DD:E0:43:35:E8:F3:B3:0C:A1:1F:F0:FB:15:43:E3
Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial: 86
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/B34B39F2AF4B11ECB461E634C4F9AE02.roa
Signing time: Tue 29 Mar 2022 11:52:57 +0000
ROA not before: Tue 29 Mar 2022 11:52:57 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 134562
IP address blocks: 103.180.112.0/24 maxlen: 24
103.180.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Validity
Not Before: Mar 29 11:52:57 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=6242f319-32cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c1:31:e2:66:63:43:2c:a5:c4:17:0e:02:dc:
d3:84:a4:71:65:8f:c9:9b:95:84:6f:ea:e8:ad:7c:
91:8c:b1:ca:fb:88:d0:26:b3:a3:6a:e6:97:f8:96:
97:bc:c9:9b:fd:16:be:2a:7a:1b:90:03:44:42:a5:
e6:cd:ae:f8:65:43:4a:53:b1:19:a5:e1:34:d0:eb:
0b:cb:35:ee:2d:40:b9:f3:9e:6a:09:f6:94:99:df:
34:4a:21:e8:10:d4:54:8f:cb:95:cb:67:e0:1f:b8:
23:71:bc:13:9f:32:75:15:d7:5c:04:22:07:e9:91:
9e:11:22:06:c9:1a:9e:7a:a0:69:d8:f4:14:cb:47:
2c:9a:02:c5:45:3b:0d:79:2a:ac:15:17:6a:07:d1:
6a:7c:48:f1:ba:b9:2a:78:03:69:40:0a:a1:6b:46:
10:4e:04:de:22:64:2a:b7:7a:47:43:fe:0e:e7:6f:
cc:b0:c8:de:2d:c6:52:63:45:be:06:9f:58:e5:6c:
fa:96:c5:e7:88:16:2f:fe:1b:d8:c4:8c:ba:e4:ed:
f7:a5:f2:f6:81:c3:6d:68:5a:fa:9e:4c:0a:7d:f1:
f8:5a:69:c1:59:4a:4e:40:1b:0d:ce:72:ff:b5:e5:
af:92:90:86:62:3e:a6:91:d3:e7:e6:da:30:b1:f7:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:D0:B8:3C:DD:E0:43:35:E8:F3:B3:0C:A1:1F:F0:FB:15:43:E3
X509v3 Authority Key Identifier:
keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/B34B39F2AF4B11ECB461E634C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.112.0/23
Signature Algorithm: sha256WithRSAEncryption
35:27:cf:a0:50:91:20:01:12:36:12:fc:0f:90:76:db:6b:f9:
0a:ea:54:ec:06:42:c5:9b:22:19:02:19:d6:4a:92:69:6a:62:
bd:69:dd:9d:e8:96:42:58:5e:54:b3:b1:f9:94:27:e5:b9:ee:
a3:17:a3:41:15:b8:9b:00:45:70:bf:c3:88:b6:a9:31:26:77:
5f:6b:04:a6:7d:8a:eb:b8:f3:26:8e:41:2c:3b:7b:0b:63:cd:
c5:0b:39:35:85:b8:c8:c3:7f:02:14:ed:e6:0e:f2:1e:fc:20:
1c:40:7c:f4:a0:72:0f:7f:13:82:6f:87:44:94:ea:3d:c3:56:
f4:7b:3e:2f:9f:36:6b:76:0f:fc:ce:d2:a8:b8:4c:c6:63:8c:
dc:d3:97:90:d5:d0:43:41:49:da:bb:8b:72:7f:78:49:1f:2a:
77:36:42:1e:05:98:61:8c:4c:7c:33:44:22:88:57:e7:1b:9d:
23:b7:17:c3:9d:a0:41:35:a0:99:50:ef:a7:e2:dc:3f:ec:8a:
8b:69:f8:02:49:cb:e4:e8:02:a9:ed:12:1a:7a:5c:8d:cc:3b:
64:e5:91:28:f6:3d:da:2d:18:69:57:4f:d0:15:d9:82:88:01:
31:1f:40:f7:fe:e2:a7:c7:2e:21:33:46:e4:3a:14:12:c0:a7:
cb:93:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-fra.rpki-client.org