Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/44796932859211EC8464F25DC4F9AE02.roa
File: 44796932859211EC8464F25DC4F9AE02.roa (raw, json)
Hash identifier: vXZlu68xo0TUTCgaWf6mMUAQjm9CuTNiFtO+YzPV1xo=
Subject key identifier: 25:D4:46:B6:84:CB:5C:B1:78:F6:6B:AF:E6:3D:7D:04:A4:9B:C3:CF
Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Certificate serial: 02
Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/44796932859211EC8464F25DC4F9AE02.roa
Signing time: Fri 04 Feb 2022 08:13:01 +0000
ROA not before: Fri 04 Feb 2022 08:13:01 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 149496
IP address blocks: 103.180.244.0/23 maxlen: 24
2001:df0:6340::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Validity
Not Before: Feb 4 08:13:01 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61fce00c-749e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:71:73:d6:66:91:44:0f:e2:60:49:e1:0e:
1f:02:bd:1d:d2:db:ac:d5:f1:e5:6f:78:86:be:56:
eb:b0:4f:52:f4:c5:60:63:8a:2f:56:cd:2e:5c:88:
a1:55:e8:88:e6:b8:b4:78:02:6e:6d:f3:37:cf:38:
4b:c2:b6:30:a5:16:48:97:cc:88:cd:8b:5a:73:15:
39:62:48:4b:4f:a7:86:0b:a0:a2:75:88:f5:0a:a9:
d9:40:06:24:22:56:4f:9a:6b:1e:b7:cb:59:3b:14:
b5:c8:6e:ad:59:96:96:86:b3:fc:e3:f4:f5:6a:64:
d9:2a:ca:e4:c5:74:be:ae:c0:7c:f5:bb:c8:94:5f:
e7:10:88:22:8c:f2:a2:5d:78:5e:94:f6:f2:12:b8:
c4:05:f8:f0:88:2a:80:26:ea:d5:3f:af:82:bc:97:
b1:29:ef:c4:e7:c8:82:f1:15:82:2c:d5:19:92:68:
63:e5:f9:80:9a:bf:15:7e:69:f4:62:08:74:64:8d:
1b:f3:a8:55:69:13:3e:c6:f8:5b:13:0b:3c:6d:ea:
49:4c:39:6c:d7:cf:2f:31:5b:3e:5a:41:5f:67:5d:
3a:bc:97:c8:39:2e:a9:13:e8:42:58:67:05:0e:38:
e0:42:fc:7d:ec:45:40:d2:37:0d:d2:77:ac:a0:4a:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D4:46:B6:84:CB:5C:B1:78:F6:6B:AF:E6:3D:7D:04:A4:9B:C3:CF
X509v3 Authority Key Identifier:
keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/44796932859211EC8464F25DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.244.0/23
IPv6:
2001:df0:6340::/48
Signature Algorithm: sha256WithRSAEncryption
27:d2:e7:4d:dd:5e:50:83:f5:0e:9a:29:3c:02:14:63:01:a3:
02:b6:4d:4a:6c:b9:e1:89:d1:dc:a5:fb:49:c0:0e:ba:47:df:
31:6c:7c:cb:d0:bf:66:f7:79:75:3c:4c:cc:13:6d:57:cb:74:
c8:e7:2c:99:c6:95:a1:7c:fb:c1:50:c0:8f:84:72:52:38:8f:
92:9c:81:2d:dd:fd:70:23:43:22:19:53:06:27:56:ca:dc:fc:
69:4e:c6:04:13:77:72:70:be:34:31:05:c2:34:3a:3a:80:d8:
92:8f:57:48:27:9b:d7:80:af:13:fd:64:11:21:3a:b8:db:49:
f5:67:cf:91:0d:ed:69:22:8c:8b:de:4e:18:0c:fd:b6:41:31:
6c:b1:de:5b:c4:31:47:44:8d:8a:d7:34:99:04:2f:2d:18:4a:
79:80:80:13:2e:86:30:0c:15:8b:27:5a:88:5a:dc:f1:f7:e8:
06:25:c8:8f:0b:1a:80:eb:a7:2a:d2:2a:46:7b:6c:5b:3a:bb:
1e:55:2b:2b:7d:21:cf:cf:eb:8a:02:b2:c9:09:db:f0:54:bd:
b0:89:bb:a0:72:a6:24:e1:24:f9:da:70:ad:5f:36:fd:c1:a3:
ad:d0:79:db:93:74:49:ce:e3:d7:2d:81:6f:2d:5f:06:10:0e:
9f:af:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org