Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/15D6324E413A11EE8DB8C664C4F9AE02.roa
File: 15D6324E413A11EE8DB8C664C4F9AE02.roa (raw, json)
Hash identifier: N2vV4jy32wt8nucTGQGie/O+FBPQYSKlmr/bXntJCEw=
Subject key identifier: 9A:23:E1:86:2D:E6:B6:F0:9E:49:D2:26:86:92:22:31:9D:D0:8E:36
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 0477
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/15D6324E413A11EE8DB8C664C4F9AE02.roa
Signing time: Tue 22 Aug 2023 22:20:22 +0000
ROA not before: Tue 22 Aug 2023 22:20:22 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 201670
IP address blocks: 103.231.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1143 (0x477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Aug 22 22:20:22 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64e534a6-3625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:35:6f:e6:e1:b1:da:82:72:8d:7e:97:fb:
1f:ed:58:c1:a6:b0:b5:11:94:1c:f4:83:0f:b8:46:
05:6e:8c:65:71:cd:c5:aa:6f:98:e8:3e:cd:98:a6:
7c:e1:aa:83:36:57:1e:35:27:5f:21:a2:8a:0a:7d:
38:b4:d2:6a:a9:c1:90:f1:31:c8:36:50:2d:93:b1:
a4:d7:b0:fe:99:a1:a9:f2:08:28:d3:8c:0f:45:ef:
20:06:06:51:c5:68:42:0a:c5:37:d9:b6:30:7d:2a:
a2:b6:1b:cc:f8:5f:82:9f:61:79:a4:c1:7b:03:50:
d1:b4:7d:cc:f6:c7:5d:63:ac:d1:74:cd:61:23:97:
bc:38:17:8a:cb:d7:7e:91:2c:b1:b7:88:02:76:a0:
09:71:1d:9a:de:c0:fa:6e:ad:eb:0a:b9:bf:a1:32:
2e:6e:55:53:62:1d:9f:73:6f:15:88:18:e8:97:46:
f7:e5:3a:3f:ac:4b:1a:da:c0:de:33:a3:e6:9d:b1:
df:14:ba:e8:0a:06:bb:12:0e:6a:9e:80:f6:2a:eb:
e4:77:b2:15:a3:39:51:a1:f6:5e:6d:7e:21:65:7d:
d8:fb:2f:ff:33:ce:b9:3e:c9:c2:99:6b:0e:02:b4:
a8:84:7b:3e:6a:cc:dc:fa:e7:fb:5c:81:b0:4a:38:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:23:E1:86:2D:E6:B6:F0:9E:49:D2:26:86:92:22:31:9D:D0:8E:36
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/15D6324E413A11EE8DB8C664C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:54:c5:47:7f:ca:2c:6d:ef:b8:f7:ea:d9:82:4f:35:5f:29:
b3:11:69:ef:51:53:92:b9:42:2b:ed:9b:69:dd:2a:f1:a9:27:
3e:8e:86:01:ad:6f:03:80:80:a5:d2:46:73:66:09:97:21:a8:
e7:22:29:ff:b8:af:b3:3c:5d:14:1e:7d:dd:90:64:ec:0f:1a:
18:fc:8b:6d:64:c1:c4:6e:70:9a:ab:a0:97:aa:5a:6a:4d:66:
a1:3a:b1:5a:b3:b9:da:f8:78:05:5b:8e:21:49:f8:df:bc:f4:
c6:70:29:45:ce:48:ae:cf:ff:9b:4f:72:83:44:bf:10:c9:84:
cf:27:63:d0:f2:c2:78:09:a6:d4:aa:cd:b9:7d:c0:c9:f2:59:
01:33:74:f1:76:67:26:0f:98:ce:1d:9c:77:d5:a9:2a:50:3e:
dc:36:69:6a:f1:e0:d5:c3:f6:de:e3:4c:d6:25:4f:47:3a:35:
be:05:56:6a:05:44:4e:a5:1c:1e:eb:fc:94:e6:15:9c:c2:1c:
fd:0f:2f:cc:44:94:f7:df:74:b4:0d:4b:49:83:29:67:45:93:
ca:d2:9a:14:f3:91:fe:d5:0a:5d:e0:8e:95:fc:f4:5d:e5:d0:
a6:49:29:22:41:9e:25:5e:d2:1b:4a:f3:76:7e:ef:a8:23:2f:
64:74:7d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org