Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ADB3F83C8DA611EDA6A5F926C4F9AE02.roa
File: ADB3F83C8DA611EDA6A5F926C4F9AE02.roa (raw, json)
Hash identifier: 0en+SE5feHDTve+XCgss4/iIf5cugFAg6M0ViyzjX7c=
Subject key identifier: F3:AA:16:6F:E6:C1:AA:43:C3:01:F1:9A:88:17:F8:A7:EF:17:03:92
Certificate issuer: /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9
Certificate serial: 0110
Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ADB3F83C8DA611EDA6A5F926C4F9AE02.roa
Signing time: Fri 01 Dec 2023 04:54:45 +0000
ROA not before: Fri 01 Dec 2023 04:54:45 +0000
ROA not after: Sat 30 Mar 2024 00:00:00 +0000
asID: 135598
IP address blocks: 103.69.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9
Validity
Not Before: Dec 1 04:54:45 2023 GMT
Not After : Mar 30 00:00:00 2024 GMT
Subject: CN=65696714-c472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:1d:b6:ef:2b:9f:7a:54:df:8c:d4:4a:f9:
19:e9:fe:85:ff:b3:b8:2e:68:78:e1:5f:ba:3b:b4:
28:9b:51:33:05:77:39:35:74:d7:39:cc:98:d3:ce:
0f:3c:b5:fc:50:56:42:1b:03:b5:88:e3:4b:ec:e7:
61:b3:7e:40:00:10:bf:c6:1e:b0:26:e6:d7:79:e0:
fe:f1:38:ca:e6:0e:94:d3:3d:56:22:48:3d:ef:fc:
70:b4:a7:19:ec:83:2c:5c:a3:28:b3:fd:36:c7:e7:
45:4b:51:6b:f7:47:32:9f:db:75:f0:d7:99:75:c4:
ec:ac:11:cf:be:6b:fe:fb:f4:29:b8:2f:a9:53:58:
4b:f4:0c:8a:b8:fd:1a:b6:df:5d:5b:c8:bf:71:cf:
7d:c3:35:e6:85:85:d4:b5:aa:e6:b0:e6:c0:9c:67:
cb:c2:da:05:f8:32:39:e2:f5:11:a9:30:63:e9:6d:
b4:c0:52:6c:6f:92:f2:06:94:ab:b4:69:6e:52:0c:
22:7d:33:7f:dc:70:c3:2a:ac:92:5b:f3:67:95:87:
82:8d:24:30:72:3a:57:85:86:2f:c2:0a:8f:91:ff:
3d:86:a5:ea:65:38:58:34:b7:25:82:fd:3f:22:ce:
7d:b8:61:95:46:3a:c1:61:f1:bc:c0:32:c9:21:16:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AA:16:6F:E6:C1:AA:43:C3:01:F1:9A:88:17:F8:A7:EF:17:03:92
X509v3 Authority Key Identifier:
keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ADB3F83C8DA611EDA6A5F926C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.128.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d3:6c:cf:da:22:0e:4c:11:08:5e:37:3d:19:d6:e7:ba:3a:
44:7c:2e:2b:dc:15:bc:25:0e:26:e9:65:9d:32:23:e9:98:80:
9f:15:fa:19:a0:6c:0e:4b:a3:db:b7:bb:ba:93:19:0b:5f:2d:
e8:db:81:fa:ec:47:07:bb:89:c3:94:9f:df:72:94:ac:0c:f6:
16:fc:59:8b:ec:dc:56:11:2c:0f:d8:54:a3:d0:70:f1:03:56:
e7:fa:7a:7b:c7:31:e7:1e:48:6b:3d:80:6a:d5:b7:04:8d:3a:
4a:e7:ee:3b:16:cd:df:10:aa:30:e7:da:08:5a:ac:05:e2:14:
e0:21:4f:ee:83:ea:93:0c:9e:fd:90:b7:9c:25:46:db:4d:33:
89:f2:95:a2:0d:92:af:f8:8e:0c:91:ce:ac:bd:48:84:8d:db:
24:49:e7:d6:1c:c8:74:87:83:a1:f4:0c:7e:74:8d:e8:eb:2f:
a7:6e:76:a7:ef:b1:68:7b:3a:5f:11:c7:13:59:1d:78:f6:b0:
9b:85:dc:79:d0:cf:63:f5:61:34:0d:9b:57:cd:45:04:47:20:
09:35:d9:49:18:d8:bc:3a:c8:60:02:3d:ab:ab:87:b6:9b:48:
46:89:48:60:22:80:66:17:2c:0b:cb:57:44:e2:e6:7c:57:44:
bf:45:64:69
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBDRjMxMTAvBgNVBAUTKDdBM0U0MjZDOTYyNTdCREYyNDNDM0M2M0I3ODAzODM0
MDUyNUMyQTkwHhcNMjMxMjAxMDQ1NDQ1WhcNMjQwMzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY5NjcxNC1jNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0vQdtu8rn3pU34zUSvkZ6f6F/7O4Lmh44V+6O7Qom1EzBXc5NXTXOcyY084P
PLX8UFZCGwO1iONL7Odhs35AABC/xh6wJubXeeD+8TjK5g6U0z1WIkg97/xwtKcZ
7IMsXKMos/02x+dFS1Fr90cyn9t18NeZdcTsrBHPvmv++/QpuC+pU1hL9AyKuP0a
tt9dW8i/cc99wzXmhYXUtarmsObAnGfLwtoF+DI54vURqTBj6W20wFJsb5LyBpSr
tGluUgwifTN/3HDDKqySW/NnlYeCjSQwcjpXhYYvwgqPkf89hqXqZThYNLclgv0/
Is59uGGVRjrBYfG8wDLJIRYQ4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPOqFm/m
wapDwwHxmogX+KfvFwOSMB8GA1UdIwQYMBaAFHo+QmyWJXvfJDw8Y7eAODQFJcKp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF
ODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5OGtQRHhqdDRBNE5BVWx3
cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VqNUNiSllsZTk4a1BEeGp0NEE0TkFVbHdxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTBDRjMvMDI4RjlFRkUyRTg2MTFFRDlEMkVEQzREQzRGOUFFMDIvQURCM0Y4M0M4
REE2MTFFREE2QTVGOTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnRYAwDQYJKoZIhvcNAQELBQADggEBAGTTbM/aIg5MEQhe
Nz0Z1ue6OkR8LivcFbwlDibpZZ0yI+mYgJ8V+hmgbA5Lo9u3u7qTGQtfLejbgfrs
Rwe7icOUn99ylKwM9hb8WYvs3FYRLA/YVKPQcPEDVuf6envHMeceSGs9gGrVtwSN
Okrn7jsWzd8QqjDn2gharAXiFOAhT+6D6pMMnv2Qt5wlRttNM4nylaINkq/4jgyR
zqy9SISN2yRJ59YcyHSHg6H0DH50jejrL6dudqfvsWh7Ol8RxxNZHXj2sJuF3HnQ
z2P1YTQNm1fNRQRHIAk12UkY2Lw6yGACPaurh7abSEaJSGAigGYXLAvLV0Ti5nxX
RL9FZGk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org