Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/2C67F6E4A63411EBB0C1186AC4F9AE02.roa
File: 2C67F6E4A63411EBB0C1186AC4F9AE02.roa (raw, json)
Hash identifier: JmtYTLrnNC6RS+gAkPdD69L8uiQaMQ2/w03vhcNPNL0=
Subject key identifier: 88:D2:E1:81:E0:C7:88:D0:B1:BD:D3:B6:E7:C4:F8:03:39:62:E8:F6
Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial: 01D1
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/2C67F6E4A63411EBB0C1186AC4F9AE02.roa
Signing time: Wed 15 Dec 2021 14:21:36 +0000
ROA not before: Wed 15 Dec 2021 14:21:36 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 133886
IP address blocks: 103.45.252.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Validity
Not Before: Dec 15 14:21:36 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61b9f9f0-b342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:59:8c:af:ba:04:da:a6:8c:0e:08:93:55:
c9:24:ab:5b:64:8b:15:0b:26:81:fa:e8:92:cc:2d:
76:19:86:20:56:ce:e6:f3:25:7a:7a:76:bb:55:70:
bf:82:47:51:96:47:e1:8e:42:20:2b:96:50:a7:c2:
0b:f6:6c:4a:ab:8c:85:04:c5:34:8e:b0:bd:5b:03:
bb:b8:68:ed:54:72:39:4e:53:e6:de:f5:d1:88:77:
14:e4:bf:f6:f2:56:cb:3c:57:5b:55:b5:ed:4b:0a:
3b:7c:ee:95:8e:78:67:e4:3b:4a:20:20:8f:55:16:
35:6f:42:cf:b2:ca:d0:11:5c:12:de:8d:1f:39:37:
e3:0e:9a:84:06:95:ed:59:e3:53:5e:a4:f4:09:09:
5b:a2:2f:13:1c:64:71:9c:e4:5c:f8:80:a5:e5:29:
0d:e7:93:5f:3c:b6:12:ea:68:07:e9:e7:43:01:f2:
be:38:c9:80:60:f7:73:1e:f5:2c:0b:39:a3:67:02:
bf:43:30:8e:d5:33:c9:12:5e:af:bf:97:7a:7a:e7:
a8:62:2e:2f:47:bd:56:b8:4c:53:e9:38:d7:38:41:
4d:85:f8:af:e2:33:97:69:c3:85:6d:35:80:35:e5:
bd:bc:e5:6e:80:99:30:11:93:77:bf:93:b9:1f:fd:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D2:E1:81:E0:C7:88:D0:B1:BD:D3:B6:E7:C4:F8:03:39:62:E8:F6
X509v3 Authority Key Identifier:
keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/2C67F6E4A63411EBB0C1186AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.45.252.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:ed:eb:e5:de:41:2b:e5:11:67:fc:a8:79:f7:21:9f:35:0e:
30:cf:d0:89:b7:67:d1:5d:10:0c:9f:b5:40:59:99:72:6e:41:
36:d5:a5:0c:25:11:bb:1c:05:c6:ab:88:d6:27:da:34:7d:6d:
cc:00:d0:51:1b:65:2f:b7:49:74:24:34:a6:c1:f1:74:a8:de:
44:36:f8:14:25:06:ce:39:32:8e:d9:a2:97:19:05:4f:a8:db:
63:b7:97:f4:51:27:a5:ea:96:33:8a:eb:4e:ae:d8:1a:78:73:
ae:57:8e:88:e3:4d:75:b7:e1:e4:91:66:71:d8:bc:a8:92:d0:
88:6c:8a:9c:7d:a3:59:eb:4f:82:2a:58:4b:1b:e2:5f:8e:60:
1e:0a:0a:ba:6d:ae:96:e4:88:30:a7:b4:77:b9:ab:9d:3a:37:
71:d0:07:c4:fe:ef:46:e8:4e:cd:26:93:ab:b2:3c:a4:ce:d5:
e5:64:03:a5:89:0a:2f:61:36:99:b8:d7:c0:63:a2:49:a4:11:
60:c4:30:c5:30:56:10:ed:b1:7e:ec:8e:a7:00:a2:de:25:92:
f2:61:d8:51:65:88:9b:87:bd:3d:22:55:72:bc:1a:23:fc:b3:
2d:95:cf:8a:1a:bf:af:bd:08:04:f3:8a:23:11:58:93:7f:92:
4d:ed:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-fra.rpki-client.org