Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/21ED7DCEFB6011EC8099D90CC4F9AE02.roa
File: 21ED7DCEFB6011EC8099D90CC4F9AE02.roa (raw, json)
Hash identifier: wifeRt18jz2MhBtZTXfAHFh6gQTpGpZGAKTIbpz3yss=
Subject key identifier: AB:16:D1:E9:95:5A:E8:C1:A1:F0:C1:62:15:C2:02:DF:B5:A4:3B:C1
Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Certificate serial: 03AA
Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/21ED7DCEFB6011EC8099D90CC4F9AE02.roa
Signing time: Mon 04 Jul 2022 06:11:25 +0000
ROA not before: Mon 04 Jul 2022 06:11:25 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 132021
IP address blocks: 103.137.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Validity
Not Before: Jul 4 06:11:25 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62c2848c-e6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:4d:43:56:42:5f:ba:bf:00:b0:aa:95:26:
1b:08:ec:e4:af:7b:b7:7f:1d:ba:79:01:ed:32:c1:
6c:f9:3f:0f:8e:84:02:0f:80:9a:47:5c:2e:ac:5b:
2e:da:85:f6:aa:23:34:f9:78:62:61:6b:ba:cc:6b:
45:37:bd:b3:59:0e:62:f0:5f:10:26:9a:02:60:81:
10:28:1e:03:fb:b4:e5:22:1d:e3:07:a6:38:18:d6:
2f:6b:fe:73:53:03:d6:e9:30:07:24:2c:2e:51:6c:
39:83:18:5e:e1:b8:72:12:85:2c:b8:00:89:4b:8a:
57:ac:ce:07:d8:05:ce:9b:7b:b6:8e:0b:30:bd:06:
d9:63:5b:a4:c1:a4:12:85:ff:92:e6:d7:e0:1b:39:
6e:09:a5:5a:33:95:1d:2f:d2:c7:39:22:69:32:f2:
55:a8:86:f2:73:d5:95:4c:71:0f:ed:be:93:f7:95:
3e:9d:10:d5:56:53:d7:62:30:57:e1:d7:aa:55:91:
60:7c:5e:2c:25:a4:65:8d:c6:5d:08:d2:86:90:d0:
b7:61:3d:53:12:e5:eb:55:9c:79:e3:fb:d6:2f:eb:
0e:72:71:22:6d:1a:3c:33:cf:b8:d5:8f:f8:b3:d2:
84:a3:37:c4:a4:25:ea:a5:f3:be:a4:0f:fb:b6:88:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:16:D1:E9:95:5A:E8:C1:A1:F0:C1:62:15:C2:02:DF:B5:A4:3B:C1
X509v3 Authority Key Identifier:
keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/21ED7DCEFB6011EC8099D90CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.209.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:df:03:59:e1:18:77:0f:d4:2b:f8:cc:a9:a2:1a:16:19:68:
0d:87:77:24:56:6e:1b:2b:ed:83:7b:f2:d7:9b:a7:e3:6f:15:
35:08:4b:4c:3e:d3:8b:54:77:e1:14:24:2b:08:70:03:48:1f:
d6:51:a0:a6:83:a6:f5:87:5d:1b:fa:24:e9:58:ed:87:24:72:
79:aa:10:db:79:9c:37:87:77:17:62:02:52:af:f3:b8:bd:00:
bd:42:f1:d5:6c:62:88:17:9a:f0:34:1c:7c:42:11:70:cc:c2:
0f:45:5c:5a:29:d4:02:c0:40:62:0b:0e:8d:2b:b3:87:aa:a2:
0b:b4:ef:16:5e:b5:8d:70:58:7c:38:c5:cc:b8:1f:55:0d:0e:
20:db:41:0b:b7:d0:db:7c:d0:41:c6:73:e8:db:3b:9d:f3:f5:
5d:14:81:35:cc:c9:f6:d2:77:5f:90:27:bb:73:f2:93:c7:ca:
c5:3e:74:d0:a1:ec:3a:b7:8d:42:54:bb:8d:30:de:1d:8a:7f:
53:4d:e5:3a:ce:31:20:6c:63:05:65:d4:57:59:b4:2c:cd:ff:
15:84:7d:e6:a6:e9:dd:e1:2a:f1:b5:6f:85:7f:e3:60:ac:6f:
49:ce:30:0f:df:84:99:e3:95:91:96:e9:d1:55:d7:c7:b7:19:
c3:03:40:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org