Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/E9BF60824FA711EEA2160870C4F9AE02.roa
File: E9BF60824FA711EEA2160870C4F9AE02.roa (raw, json)
Hash identifier: ZAmoj1StavNDMAtOUQKU098apZL6r7CIyIV5gMgNi3E=
Subject key identifier: 21:63:73:5A:90:33:E8:05:F9:BF:F7:4A:50:9F:9B:4D:52:7E:75:6B
Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial: 05E5
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/E9BF60824FA711EEA2160870C4F9AE02.roa
Signing time: Sun 10 Sep 2023 07:01:49 +0000
ROA not before: Sun 10 Sep 2023 07:01:49 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 150744
IP address blocks: 103.159.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1509 (0x5e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Validity
Not Before: Sep 10 07:01:49 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64fd69dd-0d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:64:81:3b:13:73:0e:97:61:cb:c9:b0:3a:
03:a7:ad:ce:ab:56:80:cb:db:ac:a7:05:fa:a9:93:
c1:58:7a:53:f1:6c:19:0a:d9:1e:f7:4f:1c:1a:3d:
f1:16:cf:8b:a0:18:bc:2b:b5:f3:cf:77:a7:ee:f2:
2c:2f:c9:c5:f1:89:3e:f4:8c:b2:6e:db:37:31:e5:
82:0d:bc:cb:da:64:fd:f4:bb:1f:65:17:5d:80:91:
fe:e2:c7:a1:92:05:fe:b4:31:ab:47:f6:b8:be:cb:
71:90:22:98:11:9a:f1:4e:2e:42:de:26:33:0e:b8:
1b:7c:4a:96:dd:6d:ca:f6:c7:4c:76:0c:74:68:14:
b4:4d:77:5d:25:24:ca:e7:8d:5d:1b:c0:75:b4:b2:
47:79:1d:5b:48:22:a0:29:fb:df:2b:4c:71:8c:98:
db:58:27:65:58:7e:af:b4:aa:d7:ce:60:94:fd:77:
76:7a:7a:2f:0c:b1:02:30:e0:78:60:7e:26:40:7a:
62:c4:89:fd:a9:b7:46:d1:3a:5e:7d:f4:3c:a9:05:
b0:eb:cd:15:80:11:bc:d5:14:2b:ad:71:8a:4a:c2:
b3:95:2a:a7:f2:f7:ca:79:c6:a9:50:1d:0a:ba:80:
d1:b3:92:d9:b0:f7:e1:50:23:99:5a:65:cb:53:39:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:63:73:5A:90:33:E8:05:F9:BF:F7:4A:50:9F:9B:4D:52:7E:75:6B
X509v3 Authority Key Identifier:
keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/E9BF60824FA711EEA2160870C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:41:90:34:6d:b8:87:1b:6b:92:dc:81:87:40:38:2c:6e:39:
0d:f5:44:3b:37:c3:b6:ce:47:49:cd:45:3d:37:a4:dd:ab:da:
5a:e5:67:d5:ea:55:5f:6b:b1:1d:99:82:77:f1:92:b2:aa:4f:
90:f4:15:43:d6:90:87:8e:d9:f2:0f:d4:52:18:cf:fa:12:81:
7a:51:27:24:f6:c3:cf:73:fe:31:24:86:19:f0:ae:c4:97:ce:
c5:51:df:da:f5:e1:02:cb:24:2b:d8:cd:bf:26:6a:29:f0:d3:
7b:9c:e0:6d:7d:68:95:d3:5d:b8:11:31:4a:c1:00:9a:57:e5:
37:d5:7f:c4:e2:90:f8:d1:c7:74:e2:f1:2d:34:ed:de:71:6f:
3e:01:c4:4e:eb:77:57:f4:e5:9c:48:42:f2:a4:11:95:e7:73:
c5:64:cb:f2:79:79:91:7b:a9:c4:d2:a3:02:fb:af:97:e9:5a:
59:8b:7d:93:55:b6:62:d2:4f:8a:1d:9a:12:47:cf:77:33:79:
2b:5f:d7:c8:9d:ad:cc:4b:cd:53:66:9c:03:5a:94:72:14:19:
c2:48:c7:d6:31:ff:72:d8:f0:e6:88:88:f9:a3:c1:d6:f2:f0:
16:5d:3c:94:71:43:e7:d0:de:ed:56:a7:65:ed:da:74:9e:67:
cd:77:06:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org