Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/D1B68BC680D911ECA6806158C4F9AE02.roa
File: D1B68BC680D911ECA6806158C4F9AE02.roa (raw, json)
Hash identifier: 9TJMs8YhknMJvTMjtqbFTEFp9Z4jlQHD3tXIgDxAF5A=
Subject key identifier: 70:74:AC:B4:D4:DD:E1:9F:66:41:70:2B:8A:AF:3A:8B:F8:FE:D9:C3
Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Certificate serial: 03
Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/D1B68BC680D911ECA6806158C4F9AE02.roa
Signing time: Sat 29 Jan 2022 08:02:36 +0000
ROA not before: Sat 29 Jan 2022 08:02:36 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 149484
IP address blocks: 103.180.202.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Validity
Not Before: Jan 29 08:02:36 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61f4f49b-658b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:e1:99:67:db:09:38:e5:4a:e3:56:f6:20:
7f:9c:a3:25:5d:57:a1:b7:d6:80:ef:a9:f1:53:33:
7a:55:54:06:d3:d4:2a:85:7d:07:37:b6:47:bc:93:
43:50:5a:d8:e0:d1:b4:e2:a1:28:00:4b:4d:67:d7:
95:0e:a5:44:8a:9f:65:11:07:d0:bd:b7:10:67:d3:
93:bc:7e:af:0e:2f:a4:cb:f5:6b:fa:db:24:3e:ef:
cf:ea:16:34:2d:06:d3:c5:6b:da:e0:78:41:aa:74:
82:f1:63:fe:75:f0:3b:9e:0e:97:54:fa:fa:65:a3:
88:91:f0:79:fe:ec:e0:2c:26:e4:68:1a:f7:73:32:
f6:ed:c1:57:3f:9b:ba:d8:5b:e6:e6:ff:68:1c:d8:
61:85:11:24:6e:59:f8:08:67:1f:bc:06:42:4c:1b:
c7:08:c1:26:bb:4a:59:4b:fa:60:26:5c:69:7b:94:
44:e7:99:75:6e:71:46:10:8a:2f:42:d2:68:77:34:
44:4a:58:a5:bd:13:11:72:7c:3e:58:77:db:61:1b:
39:56:42:49:f7:ee:39:da:0f:59:98:4c:08:1d:3a:
f8:00:62:70:05:80:5e:30:58:de:d9:b5:3a:a3:99:
68:b2:3f:23:17:94:36:e7:c0:dd:ea:fb:63:ad:b8:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:AC:B4:D4:DD:E1:9F:66:41:70:2B:8A:AF:3A:8B:F8:FE:D9:C3
X509v3 Authority Key Identifier:
keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/D1B68BC680D911ECA6806158C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.202.0/23
Signature Algorithm: sha256WithRSAEncryption
53:24:27:99:42:39:3d:89:c1:7d:97:e1:cf:d1:25:a3:a7:5c:
49:d7:19:52:83:e7:cd:d3:75:79:20:3d:34:53:f1:ad:ed:14:
0b:7e:db:2e:21:6d:8f:a0:62:82:22:18:dc:14:22:5b:4a:47:
9b:f0:85:23:31:9d:97:e1:e6:40:1f:51:43:ba:37:6a:6e:5a:
ac:cf:74:fe:0c:a0:30:92:35:51:0c:99:1e:10:d7:39:90:bc:
7d:ed:0d:d5:a2:7c:ea:f5:d6:e8:e2:a6:a3:53:fc:de:c2:a5:
8b:4f:a7:f4:05:23:71:6b:82:d2:9b:f1:a2:9a:5d:d5:c2:f8:
23:45:f5:ba:df:4c:86:bd:22:71:8b:8b:69:e9:82:e6:ca:11:
78:7d:a2:21:5a:ab:c1:1e:f4:a9:77:a3:29:20:1e:49:c5:56:
c9:16:d7:8a:14:7a:ea:8e:8a:75:91:6f:69:11:e9:ab:34:5f:
ac:84:62:b0:45:67:ab:2d:ae:1b:11:ca:8a:e5:79:82:45:9f:
b2:f4:c6:9e:22:e3:73:e3:5e:6d:62:e5:cd:15:c0:cf:2c:37:
b0:97:10:76:6e:ae:d0:7e:7b:eb:5b:e5:be:4f:6a:91:5a:ac:
56:89:9d:93:e5:75:dc:57:e9:3c:ad:fe:ad:3b:4d:ce:69:15:
53:cc:8c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-ams.rpki-client.org