Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/2F644760041211EEA85BE32CC4F9AE02.roa
File: 2F644760041211EEA85BE32CC4F9AE02.roa (raw, json)
Hash identifier: JTC8C+CBbahWX7lGu5pNMU4wOggBWEQ5pO2Wgdmw88c=
Subject key identifier: 44:55:C2:B5:9F:95:30:D2:FA:4C:25:B4:09:91:8C:02:EF:CC:AE:67
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 333E
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/2F644760041211EEA85BE32CC4F9AE02.roa
Signing time: Tue 06 Jun 2023 02:31:05 +0000
ROA not before: Tue 06 Jun 2023 02:31:05 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 57844
IP address blocks: 103.21.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13118 (0x333e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Jun 6 02:31:05 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=647e9a68-8f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:f8:9a:95:1c:ed:d9:f0:07:81:7f:e9:7a:
d3:e7:52:0d:6d:cf:9e:a5:4e:57:02:da:d5:a6:1b:
ce:90:57:04:f9:10:a6:d2:8c:ed:5b:22:28:47:36:
c2:63:a5:d6:ba:c6:15:30:c9:de:d3:c8:f6:3e:01:
f1:07:93:6f:5a:1b:b7:a0:c9:18:7f:e6:33:c4:a1:
72:86:02:6a:fd:14:c5:31:ea:16:06:0f:29:98:ea:
e2:80:7c:c0:5c:78:91:3c:7b:5e:3d:62:f9:40:2f:
fa:68:6d:5f:6b:bb:85:1d:7b:d8:b4:97:10:b3:26:
8e:99:82:6f:23:5d:74:25:d5:71:ed:86:cf:48:7d:
0b:8d:31:2f:d5:e2:84:a2:22:c4:ca:43:0b:8a:74:
e9:86:ff:ab:67:4a:b4:a4:27:7c:df:3f:1b:3f:2d:
60:5f:19:70:02:7a:0e:0e:47:06:1f:a4:0b:e7:34:
36:18:0d:2c:cc:b3:32:66:d6:fa:cb:4a:07:f0:1b:
e1:41:60:76:2f:a2:53:a4:6d:d9:95:7e:2b:0b:c3:
f7:dd:d5:2c:a2:b4:be:f6:80:28:e4:31:19:92:7c:
fb:d5:7a:c0:47:57:0d:8f:9b:0c:f8:32:8f:65:90:
bb:17:f9:8b:70:8b:82:52:c3:98:39:14:ce:a7:ed:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:55:C2:B5:9F:95:30:D2:FA:4C:25:B4:09:91:8C:02:EF:CC:AE:67
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/2F644760041211EEA85BE32CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e8:6f:5f:4c:10:94:56:06:30:1b:83:bb:25:4d:ae:b2:0d:
89:42:6f:5e:60:6e:05:bf:d9:52:e8:11:96:61:44:5c:ba:1c:
f2:48:4f:32:c1:67:b9:d7:5b:26:e5:68:92:51:6b:34:fd:fd:
38:38:83:8d:1c:89:7b:6f:22:1e:ba:d4:87:d7:1c:5c:ef:70:
cd:69:a0:37:6a:a1:b0:4d:df:9e:f5:5b:77:ab:5b:f6:c6:db:
8c:1b:ab:6c:4d:38:4d:48:6a:fa:b6:69:e2:63:57:a6:a6:a2:
63:2a:b4:87:6e:71:e0:bf:87:60:a2:51:e7:a8:af:ad:33:c9:
04:f2:5c:f3:e0:cb:15:7b:00:2c:be:28:d0:e2:20:60:8a:f2:
1a:98:8f:3c:39:18:b0:17:8e:de:b7:6f:a9:7e:bd:0e:3b:55:
22:f8:82:21:0e:08:ef:7f:48:33:ef:6a:5f:29:a0:a0:00:6f:
ad:55:39:c7:33:2d:25:fc:66:98:4f:77:ad:bf:fd:e8:a4:bc:
a3:2b:ea:be:06:9a:40:31:71:41:3c:7d:66:b3:13:0d:e3:03:
ca:a6:38:2b:42:2d:d9:2c:54:b6:8a:46:7a:04:83:38:06:1a:
87:a9:39:fc:ec:f3:71:34:47:25:5c:ec:47:a1:13:94:f4:11:
80:15:eb:2b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICMz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4
RTA4Rjg1NkUwHhcNMjMwNjA2MDIzMTA1WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDdlOWE2OC04ZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1q74mpUc7dnwB4F/6XrT51INbc+epU5XAtrVphvOkFcE+RCm0oztWyIoRzbC
Y6XWusYVMMne08j2PgHxB5NvWhu3oMkYf+YzxKFyhgJq/RTFMeoWBg8pmOrigHzA
XHiRPHtePWL5QC/6aG1fa7uFHXvYtJcQsyaOmYJvI110JdVx7YbPSH0LjTEv1eKE
oiLEykMLinTphv+rZ0q0pCd83z8bPy1gXxlwAnoODkcGH6QL5zQ2GA0szLMyZtb6
y0oH8BvhQWB2L6JTpG3ZlX4rC8P33dUsorS+9oAo5DEZknz71XrAR1cNj5sM+DKP
ZZC7F/mLcIuCUsOYORTOp+34IwIDAQABo4IClTCCApEwHQYDVR0OBBYEFERVwrWf
lTDS+kwltAmRjALvzK5nMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE
QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJGNzYvOTQ0RTM4OTIxREFCMTFFMkJCMzBDQUE5MDhCMDJDRDIvMkY2NDQ3NjAw
NDEyMTFFRUE4NUJFMzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnFYswDQYJKoZIhvcNAQELBQADggEBAAvob19MEJRWBjAb
g7slTa6yDYlCb15gbgW/2VLoEZZhRFy6HPJITzLBZ7nXWyblaJJRazT9/Tg4g40c
iXtvIh661IfXHFzvcM1poDdqobBN3571W3erW/bG24wbq2xNOE1Iavq2aeJjV6am
omMqtIduceC/h2CiUeeor60zyQTyXPPgyxV7ACy+KNDiIGCK8hqYjzw5GLAXjt63
b6l+vQ47VSL4giEOCO9/SDPval8poKAAb61VOcczLSX8ZphPd62//eikvKMr6r4G
mkAxcUE8fWazEw3jA8qmOCtCLdksVLaKRnoEgzgGGoepOfzs83E0RyVc7EehE5T0
EYAV6ys=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org