Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/9B249D42480611EDBC63AD52C4F9AE02.roa
File: 9B249D42480611EDBC63AD52C4F9AE02.roa (raw, json)
Hash identifier: lYxAxfqRlQAZBP1qBofuFh/J1k88IqnG3IPSoYjC2eE=
Subject key identifier: 38:C7:F5:9C:21:2E:D1:1C:F6:CD:F9:66:43:B2:18:85:AD:88:34:76
Certificate issuer: /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial: 0D
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/9B249D42480611EDBC63AD52C4F9AE02.roa
Signing time: Sun 09 Oct 2022 19:14:34 +0000
ROA not before: Sun 09 Oct 2022 19:14:34 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 20473
IP address blocks: 103.15.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Validity
Not Before: Oct 9 19:14:34 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63431d99-f004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:90:16:12:71:c7:7b:84:3c:dd:6b:95:f0:
37:dd:01:29:45:13:29:54:76:3e:9e:4b:ea:df:df:
d0:45:76:4b:98:1a:3a:66:7c:14:ab:a5:7f:d1:16:
c9:53:87:13:2c:e6:c0:63:23:f5:18:41:b4:23:fd:
c8:f0:d4:8d:7a:ab:a7:1a:6e:76:13:77:b6:08:ac:
ac:5e:bb:cf:b6:c0:a7:5d:f2:c1:80:8e:2a:82:ad:
1c:74:ba:d8:4f:7a:0c:bf:96:b3:bb:eb:16:9d:56:
23:7c:0f:93:f2:d8:b2:cf:fe:c4:e6:cc:de:27:0a:
0f:11:ea:6e:34:44:81:68:7b:7e:eb:22:0f:5f:d7:
01:40:df:ee:8b:1a:ca:37:d8:67:3d:85:08:56:d5:
5f:1d:ea:6f:35:93:73:fd:de:2d:7a:33:44:0a:75:
b8:6c:fd:6a:a3:24:4d:5d:a8:11:08:bd:c3:6a:f7:
17:cb:66:13:56:3a:ba:75:b2:e0:ab:8b:a5:4f:23:
a1:0a:6d:9f:15:e0:39:76:bf:8f:c7:c7:22:77:bb:
81:8e:0b:08:58:82:a7:9e:06:f3:d1:db:97:d9:8a:
0a:8a:2c:1f:2b:89:a0:fd:1a:3a:eb:45:7f:2f:e0:
ad:45:2d:1b:b8:b4:ea:42:13:6e:74:6c:1d:91:bd:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:F5:9C:21:2E:D1:1C:F6:CD:F9:66:43:B2:18:85:AD:88:34:76
X509v3 Authority Key Identifier:
keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/9B249D42480611EDBC63AD52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.221.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c9:17:32:8c:b6:5b:52:1c:9e:9c:56:49:65:4d:4f:a3:95:
84:5c:a9:57:6f:c1:0e:79:3f:5c:4a:2e:79:d4:ee:8c:1d:66:
fb:a4:41:75:60:51:5c:17:78:93:df:84:89:02:33:6f:85:50:
2e:e9:35:87:c5:34:6f:83:ff:8a:d7:ee:96:f8:c6:3a:02:04:
dd:c1:f8:7d:b0:47:1f:df:e5:02:9b:95:76:a2:04:3b:2b:7c:
2b:d5:0e:1a:c7:b4:94:05:c4:eb:e4:f9:01:62:dc:71:03:24:
c9:48:fe:f2:26:19:85:47:b5:8a:5a:36:ff:ef:d2:04:d2:02:
11:62:e9:41:22:ec:8e:12:28:08:7a:ad:75:ab:e2:a3:08:fd:
73:83:db:4f:45:4d:d9:f7:6a:97:8b:0a:fc:ad:7b:a3:46:71:
37:79:df:d2:20:53:16:e2:0b:26:01:c6:f4:07:26:c5:56:35:
83:e7:4b:c8:01:ea:ba:59:3a:4e:65:97:92:e0:12:2b:fa:02:
96:fb:f2:cd:b2:6e:d9:dc:ee:bf:8a:9e:b2:0d:24:05:cc:f2:
13:f2:83:ec:d0:78:f5:51:df:f5:bd:4a:c3:55:c8:1f:e2:94:
0c:5b:04:b4:64:9c:17:cc:61:57:05:bb:31:e3:f3:91:9d:6c:
14:6f:45:b2
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QjIwMjExMC8GA1UEBRMoOENCRTlERDU5OTM0QzlBRDIwNUZDRTZBRjhFRjREQjgw
MUYxRDNFQjAeFw0yMjEwMDkxOTE0MzRaFw0yMzEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzNDMxZDk5LWYwMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxUZAWEnHHe4Q83WuV8DfdASlFEylUdj6eS+rf39BFdkuYGjpmfBSrpX/RFslT
hxMs5sBjI/UYQbQj/cjw1I16q6cabnYTd7YIrKxeu8+2wKdd8sGAjiqCrRx0uthP
egy/lrO76xadViN8D5Py2LLP/sTmzN4nCg8R6m40RIFoe37rIg9f1wFA3+6LGso3
2Gc9hQhW1V8d6m81k3P93i16M0QKdbhs/WqjJE1dqBEIvcNq9xfLZhNWOrp1suCr
i6VPI6EKbZ8V4Dl2v4/HxyJ3u4GOCwhYgqeeBvPR25fZigqKLB8riaD9GjrrRX8v
4K1FLRu4tOpCE250bB2RvZzDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOMf1nCEu
0Rz2zflmQ7IYha2INHYwHwYDVR0jBBgwFoAUjL6d1Zk0ya0gX85q+O9NuAHx0+sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMjAyLzRENDFDRjkyNDA5
RTExRURCMzUyRUU1RUM0RjlBRTAyL2pMNmQxWmsweWEwZ1g4NXEtTzlOdUFIeDAt
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvakw2ZDFaazB5YTBnWDg1cS1POU51QUh4MC1zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjIwMi80RDQxQ0Y5MjQwOUUxMUVEQjM1MkVFNUVDNEY5QUUwMi85QjI0OUQ0MjQ4
MDYxMUVEQkM2M0FENTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGcP3TANBgkqhkiG9w0BAQsFAAOCAQEAqskXMoy2W1IcnpxW
SWVNT6OVhFypV2/BDnk/XEouedTujB1m+6RBdWBRXBd4k9+EiQIzb4VQLuk1h8U0
b4P/itfulvjGOgIE3cH4fbBHH9/lApuVdqIEOyt8K9UOGse0lAXE6+T5AWLccQMk
yUj+8iYZhUe1ilo2/+/SBNICEWLpQSLsjhIoCHqtdaviowj9c4PbT0VN2fdql4sK
/K17o0ZxN3nf0iBTFuILJgHG9AcmxVY1g+dLyAHqulk6TmWXkuASK/oClvvyzbJu
2dzuv4qesg0kBczyE/KD7NB49VHf9b1Kw1XIH+KUDFsEtGScF8xhVwW7MePzkZ1s
FG9Fsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org