Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/23A645381C6C11EDA21ADB45C4F9AE02.roa
File: 23A645381C6C11EDA21ADB45C4F9AE02.roa (raw, json)
Hash identifier: kTussj1Ds+Sn71ZDq5jHTERR7JuY3/oOqeQ6L6BwfMk=
Subject key identifier: 24:9A:B7:1B:F0:F6:B4:24:5F:D3:0C:D2:C7:AC:68:AA:91:F4:BA:7E
Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Certificate serial: 0401
Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/23A645381C6C11EDA21ADB45C4F9AE02.roa
Signing time: Mon 15 Aug 2022 07:30:30 +0000
ROA not before: Mon 15 Aug 2022 07:30:30 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 132021
IP address blocks: 103.137.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Validity
Not Before: Aug 15 07:30:30 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62f9f616-1e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:be:b3:5a:9c:d9:2a:7f:16:b0:14:bb:79:
98:ac:07:f2:ab:a3:08:93:ab:4b:89:f4:e2:48:df:
e9:31:50:83:95:12:41:1e:31:98:96:29:c4:07:fd:
d6:1c:22:07:0b:c9:39:33:ee:0e:49:4b:03:1f:a2:
42:98:0b:06:04:6b:c3:8a:31:4b:fc:56:a8:72:25:
cc:40:85:9a:19:b3:2d:6a:17:c1:37:94:2f:f7:1f:
fb:87:09:e5:93:ba:6f:b2:1d:6a:60:92:ba:81:ec:
21:77:86:6f:18:8a:7c:a6:3d:bd:2d:55:ac:a6:ca:
17:a2:0b:b8:13:7c:2a:b1:c6:08:56:cd:67:29:79:
e2:7b:a5:a8:67:37:81:d1:22:85:b6:10:2f:08:d4:
27:18:35:9a:86:89:0a:14:7e:00:58:22:ca:8f:0b:
63:99:21:16:b1:cc:72:44:41:52:71:12:75:17:1d:
d7:fc:8b:96:fb:09:df:e7:b7:aa:45:fc:e6:40:a2:
a9:43:80:41:0c:68:8c:b8:33:a2:df:a4:cb:a4:5f:
31:fa:80:88:75:24:b9:a5:a4:f4:a0:97:1e:e0:c5:
7d:e7:7e:7e:5a:94:1b:c2:7c:a5:25:45:0c:b6:1a:
ad:6f:84:79:b2:8f:ac:db:71:32:5d:a0:f4:90:8a:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9A:B7:1B:F0:F6:B4:24:5F:D3:0C:D2:C7:AC:68:AA:91:F4:BA:7E
X509v3 Authority Key Identifier:
keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/23A645381C6C11EDA21ADB45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.209.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d6:78:25:ce:78:5c:30:ed:41:a3:79:c4:e7:a4:d5:8b:34:
62:85:89:17:d2:b7:b9:7d:32:a4:ad:b0:0b:42:1e:66:58:df:
75:3b:ad:5b:15:bc:78:97:73:b6:9d:58:12:84:64:c5:7a:5c:
3b:87:9a:8f:8a:60:a6:4e:4f:74:ea:e4:a2:29:61:46:20:52:
29:4b:52:86:e4:15:32:13:b2:f9:29:06:45:4a:5d:e9:cd:d2:
42:5c:7b:84:2b:7b:b8:4b:9b:6f:3a:e1:60:df:54:96:3c:a4:
9c:89:e2:69:e9:4f:e2:1c:b0:75:37:c3:b9:40:a3:1f:f0:c5:
77:61:40:2b:cc:b9:50:f9:4f:61:ac:1c:84:3c:b2:11:9a:9d:
27:e2:86:de:83:c2:ac:24:c0:16:55:ab:37:59:27:23:58:bc:
84:b6:d3:1b:c3:20:82:59:e9:63:77:16:dd:45:f8:da:30:fe:
4d:e7:25:31:c0:07:bb:7f:59:6f:58:66:45:2e:03:6b:4f:f3:
3c:22:9e:8e:16:01:a4:97:7d:bf:ec:f5:dd:9c:45:3e:ae:4e:
0a:44:3f:63:02:fc:da:ec:48:3f:e7:a1:17:fe:d4:10:7a:b1:
a7:52:55:ed:68:8b:9e:1a:08:9b:5f:ad:26:b5:92:a0:72:5b:
86:eb:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org