Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/AD1DA12240A111ED8128EB4EC4F9AE02.roa
File: AD1DA12240A111ED8128EB4EC4F9AE02.roa (raw, json)
Hash identifier: k3U5wDPZgXjlbJZhndpHgMlMtd+GGPdwv2Rk/LfyqRY=
Subject key identifier: E9:D4:97:1E:E4:62:D3:C5:6E:F7:5D:BE:95:BF:AE:C4:88:99:CB:86
Certificate issuer: /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial: 03
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/AD1DA12240A111ED8128EB4EC4F9AE02.roa
Signing time: Fri 30 Sep 2022 09:24:26 +0000
ROA not before: Fri 30 Sep 2022 09:24:26 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 16509
IP address blocks: 103.15.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Validity
Not Before: Sep 30 09:24:26 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6336b5c9-2345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:54:48:cd:0c:89:96:7b:22:8f:73:77:17:
bb:8e:22:69:42:8d:44:dc:2f:9b:58:06:1a:12:7a:
78:f1:c8:ee:e7:c3:66:6f:eb:2e:0f:76:76:9c:17:
53:66:23:c3:59:cc:bd:ca:d7:26:7b:62:83:87:03:
41:a1:65:3c:c2:33:30:ee:8c:d0:d9:1e:2d:87:41:
55:dc:72:22:fa:37:f5:76:5f:1b:d1:fb:12:8a:bd:
17:b3:fb:c0:ad:1c:b6:09:6c:1b:a3:45:6a:c0:21:
c6:a3:dc:8e:2f:ba:a4:23:11:d3:36:17:77:0d:92:
5b:2a:37:a1:a0:62:04:ff:19:a0:3f:23:45:5a:54:
35:40:83:bc:f5:d1:9c:c9:8c:cf:c2:a8:05:f0:81:
49:e4:47:be:12:64:9e:59:ee:e1:3a:d9:c2:a0:c0:
8f:bd:ae:54:37:84:43:d7:95:41:d1:5d:31:9b:26:
f8:ba:40:6e:09:61:f1:61:11:d6:3d:6a:e1:fd:61:
92:5c:70:a2:3f:66:4e:b7:4a:e5:6c:9d:b1:16:d9:
73:b1:20:e6:44:5c:33:65:8c:b7:20:a7:f5:e4:7e:
d8:c3:2b:5a:b9:c6:15:0c:a9:91:07:dd:a5:eb:02:
33:6e:4d:c2:27:8c:b9:06:a2:c9:98:61:0d:4b:68:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D4:97:1E:E4:62:D3:C5:6E:F7:5D:BE:95:BF:AE:C4:88:99:CB:86
X509v3 Authority Key Identifier:
keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/AD1DA12240A111ED8128EB4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.220.0/24
Signature Algorithm: sha256WithRSAEncryption
97:68:a8:b4:37:f4:28:99:9c:5f:ba:a1:61:49:99:1d:67:00:
7d:0b:8a:83:11:3d:87:c8:21:01:df:56:7f:a3:b0:bb:13:47:
54:4e:68:59:c2:05:36:65:f8:4e:f4:59:99:5d:ba:6d:02:bb:
04:f3:5f:98:5e:7e:8f:9c:60:17:fd:06:a5:e3:33:6d:ef:57:
97:ba:69:ed:02:ce:ce:1a:3b:0b:f5:f2:e3:fd:8c:02:38:10:
9f:d4:0b:2b:ab:f2:6e:f7:ad:a0:89:18:d6:7a:44:17:d5:6f:
8e:8e:0e:84:53:c4:40:4a:d6:e6:ee:31:1e:5b:86:2c:6e:60:
3e:66:77:da:23:99:df:4d:9d:7c:62:50:13:66:17:1b:64:f5:
80:4c:e1:f2:b8:76:ee:ce:ad:ec:05:dd:20:8b:d2:d0:60:1e:
9b:13:3a:c7:d7:f6:b9:5c:da:d4:03:e8:5a:03:9d:f8:c5:2a:
af:a8:a4:e4:a5:10:c4:cd:8e:c8:a9:72:0e:4a:b3:96:72:0e:
52:cb:5a:10:e4:7c:b0:bb:bc:49:34:06:56:2a:cd:54:29:84:
f7:5c:03:aa:ac:97:50:df:99:87:a0:42:f0:a7:a7:b5:6a:92:
58:9d:0e:3d:79:94:e3:7b:47:2c:51:fc:8e:9b:6a:47:df:66:
a8:26:1b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org