Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C133A628E4611EC8FED6C80C4F9AE02.roa
File: 4C133A628E4611EC8FED6C80C4F9AE02.roa (raw, json)
Hash identifier: 7Or/QSCOJLrVvS+wxwZbEnkZti89Zx7fKdSRRFYIe0A=
Subject key identifier: 8E:5F:94:BA:90:BA:5C:51:63:34:F8:FF:86:8F:74:EF:0D:78:66:2B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4F15
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C133A628E4611EC8FED6C80C4F9AE02.roa
Signing time: Mon 16 May 2022 04:04:20 +0000
ROA not before: Mon 16 May 2022 04:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133254
IP address blocks: 103.180.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20245 (0x4f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281cd44-48f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:81:aa:dc:dc:ff:9b:c0:ce:84:5b:b5:1b:
d9:2e:85:f7:db:e4:d0:8c:a6:21:99:94:93:47:db:
ac:05:60:cd:c6:39:a3:f8:e2:e9:cd:0f:17:3e:db:
f5:da:40:cf:3c:9b:90:a8:b6:5a:ec:82:07:bd:c1:
2e:86:e6:7a:9a:df:1b:e8:17:a0:e7:6d:65:cf:c5:
7a:c1:1b:97:53:1e:c0:0d:09:41:35:ad:9f:f8:9e:
70:21:30:ad:d8:a9:25:03:8e:9a:0a:d2:40:2d:bc:
71:74:f1:e0:05:7e:fe:0c:ff:49:b8:b7:7d:40:be:
8f:94:8b:30:6d:bb:54:49:9e:3c:ab:f7:a9:91:1b:
b3:78:0f:6a:b4:13:e2:69:77:d2:62:e4:d0:06:52:
e0:4a:a1:6b:44:61:8c:77:a3:6d:ae:f8:eb:f2:22:
3e:9b:94:a2:22:95:09:b8:10:03:bb:92:e4:f2:43:
95:0b:f9:4a:72:cb:49:88:0d:4f:19:06:73:0b:20:
84:2f:e7:0c:c8:b2:7a:1c:06:bc:51:5e:04:24:d3:
a9:dc:9e:71:8e:02:88:02:f6:77:a2:6a:0a:03:45:
75:5b:d0:6b:3f:f7:f5:35:64:51:d3:a1:a0:81:ef:
21:e9:0a:0d:01:96:c6:cc:c5:92:51:c0:00:d1:e9:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5F:94:BA:90:BA:5C:51:63:34:F8:FF:86:8F:74:EF:0D:78:66:2B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C133A628E4611EC8FED6C80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.44.0/23
Signature Algorithm: sha256WithRSAEncryption
63:c2:15:3f:cb:83:5a:9c:61:49:f3:5a:3a:b5:19:f8:cd:23:
db:f2:16:cc:93:39:c6:65:b9:ed:68:54:49:c7:52:97:fe:19:
57:b0:33:85:07:6c:83:0c:53:f2:55:45:ee:fb:b4:85:e3:3c:
30:a4:8f:e7:38:cb:a0:60:f0:ef:15:8c:d6:94:14:03:a8:05:
33:65:7c:bc:5f:8b:f3:7d:a2:6c:4e:98:e5:5a:37:75:71:ab:
12:da:48:a9:9b:ed:91:23:10:98:cc:a2:20:9e:29:ea:fb:f8:
d3:1a:b1:d7:df:36:54:17:dc:cb:57:74:c8:d1:96:ab:e9:56:
9b:2c:a8:0d:8b:ce:b5:e9:a4:57:66:e6:b1:32:cd:8d:02:f2:
fc:95:21:08:fe:37:88:b5:a8:f7:c1:46:22:69:4b:e7:60:c9:
ec:ec:ad:37:e9:89:f9:5b:4d:6d:bb:e9:82:44:14:07:a4:82:
bb:64:fa:22:08:e2:15:8a:f8:83:4e:59:9b:60:53:be:ed:45:
37:d9:ab:91:df:b5:51:7e:27:98:53:69:a3:fb:15:84:68:e5:
50:ac:20:04:51:c9:b7:4a:95:0b:78:d7:60:a6:50:b8:bd:ad:
d1:ea:54:d9:ee:32:cc:79:18:46:85:50:08:00:2b:db:b3:94:
e8:e5:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-ams.rpki-client.org