Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01077DF0B17611ECA770DF50C4F9AE02.roa
File: 01077DF0B17611ECA770DF50C4F9AE02.roa (raw, json)
Hash identifier: h+ycuiPfSUiGMsTnGum6sDY/ml2AV6pkliGcApZgFc8=
Subject key identifier: 8A:58:6E:DA:B9:F1:70:01:C7:E1:E2:B1:BF:11:10:9D:46:DD:70:C1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4B50
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01077DF0B17611ECA770DF50C4F9AE02.roa
Signing time: Fri 01 Apr 2022 04:41:33 +0000
ROA not before: Fri 01 Apr 2022 04:41:33 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 149610
IP address blocks: 103.181.60.0/24 maxlen: 24
103.181.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19280 (0x4b50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 1 04:41:33 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6246827c-06a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:1c:2c:34:1b:30:ac:23:ba:6a:aa:53:c5:
5c:24:57:1f:bc:cd:cd:7a:2d:da:3e:99:42:ac:a3:
08:b9:61:69:89:41:90:a8:3f:18:85:cc:60:e4:30:
0c:a7:ca:ae:d4:b4:4b:84:79:b0:94:e3:2e:c8:4d:
2f:b9:87:d2:ad:24:af:1e:cd:73:61:ba:4d:82:b2:
97:a4:e3:7d:85:02:5d:2e:62:6e:2a:89:70:2e:26:
3f:e7:cd:1e:77:b4:84:e3:59:1f:4b:11:35:7f:3a:
ad:4c:a1:c8:6c:58:9a:de:39:d7:b0:41:69:df:4e:
34:13:57:9c:04:79:2a:5c:0d:10:af:0c:b5:31:c8:
b7:e2:ca:d8:07:d5:21:2b:3e:99:29:47:a7:78:7a:
a8:23:f7:28:2b:cf:f0:40:f2:88:37:d3:f4:11:bc:
20:b2:d7:c6:f7:40:a5:03:6c:b5:25:a0:f9:c5:cf:
55:ee:5e:e4:8d:e2:cc:ea:9c:a3:ae:98:71:d2:e0:
bf:f9:ea:4d:d6:1b:ea:94:7c:15:54:89:6e:64:cc:
ef:ff:b8:e7:f2:10:0d:a6:7c:1b:a0:35:7b:1d:7f:
f9:5b:f8:21:f8:a4:c7:fd:2d:eb:5d:80:a6:c5:04:
a2:e7:bc:1a:d1:14:06:7d:8a:b6:86:24:ce:4d:d0:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:6E:DA:B9:F1:70:01:C7:E1:E2:B1:BF:11:10:9D:46:DD:70:C1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01077DF0B17611ECA770DF50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.60.0/23
Signature Algorithm: sha256WithRSAEncryption
56:6e:fd:28:30:19:05:7d:fc:48:5b:6c:ae:c3:a2:a9:79:90:
40:cb:00:83:70:38:19:9f:83:3d:3d:92:c5:34:04:2a:e7:f4:
f3:70:2a:ca:ea:74:7f:3b:09:76:8b:74:a2:48:cc:5b:e0:e3:
bd:59:7b:3b:3c:8a:e4:10:8b:94:8d:d0:02:af:12:62:f4:01:
dd:f6:f3:50:88:b6:c4:24:6f:a5:03:c9:1f:2c:2f:75:6d:24:
06:55:66:81:dc:cc:2c:e4:77:46:5a:93:e7:56:f1:d8:df:ae:
49:e2:54:74:ec:12:3c:44:fe:b5:72:f1:84:a9:cd:09:24:9a:
ef:88:9d:eb:ed:45:93:93:76:2c:c9:84:ba:cd:eb:2a:69:31:
6c:39:c6:a5:47:bc:52:81:2a:5d:29:50:6e:d1:6a:af:b2:de:
4e:9c:44:9c:85:82:41:1c:6f:fa:45:2f:02:b1:c0:15:90:36:
84:c5:f0:f2:3c:46:29:d7:1b:f6:68:84:49:32:a4:aa:42:17:
df:56:37:e1:23:72:66:75:27:f2:72:28:78:1d:e2:1b:b7:f8:
74:23:09:9f:7d:0a:65:22:5e:a3:63:d5:20:50:3d:58:c6:80:
25:b1:d0:27:37:57:b5:de:53:86:5d:a0:8d:5f:c3:42:5a:e9:
bd:24:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-ams.rpki-client.org