Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/FF4CF474E22911EC844F7835C4F9AE02.roa
File: FF4CF474E22911EC844F7835C4F9AE02.roa (raw, json)
Hash identifier: l5qycF3ycoEvHxEpAM7BjhzMWbJPasjpjqQ1UA0leKM=
Subject key identifier: 37:15:BD:5F:1B:25:76:93:71:00:A5:B0:16:5E:F7:68:6D:B9:D2:BB
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 31A5
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/FF4CF474E22911EC844F7835C4F9AE02.roa
Signing time: Thu 02 Jun 2022 04:10:55 +0000
ROA not before: Thu 02 Jun 2022 04:10:55 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 834
IP address blocks: 103.21.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12709 (0x31a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Jun 2 04:10:55 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6298384e-44ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:99:8a:8a:d6:27:38:2b:43:9e:6c:61:8d:
a7:76:14:01:3a:36:35:02:3d:e1:af:8e:a1:b3:87:
9b:6b:ef:10:8e:09:35:03:1a:fb:f5:58:cc:6f:94:
c4:d3:48:8a:4c:a1:d9:05:fa:e6:6e:01:62:9d:6a:
be:00:aa:3e:6d:1f:1e:6b:69:31:bb:ab:12:b8:3f:
03:82:c4:a4:47:59:eb:48:09:eb:53:68:76:08:59:
b1:60:03:9c:8f:1e:53:c8:a4:b9:29:ea:63:6d:38:
7f:a4:22:fa:93:93:88:02:3f:94:98:eb:c8:71:5a:
5d:7a:52:e9:70:f9:e2:05:9a:68:13:d4:33:15:79:
30:cc:5e:a6:44:01:9f:95:4b:b1:b8:ab:e4:45:b9:
3b:eb:ef:05:32:ae:b3:6a:3e:71:2b:b7:5a:d7:4f:
69:71:72:d3:46:c5:26:8f:91:08:4d:96:19:79:f5:
aa:60:e4:c3:6a:5b:50:30:5e:f0:ee:9f:ca:9d:02:
a2:1b:ce:c1:0f:a6:f8:b9:ea:88:8c:ca:b9:8d:71:
10:93:7a:3f:16:05:7d:63:17:63:ba:e7:07:46:c9:
95:87:6e:f8:76:35:ab:59:e2:63:7f:7a:86:91:02:
9d:e2:34:d8:f0:7c:71:81:23:06:0e:1a:cc:a0:b8:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:BD:5F:1B:25:76:93:71:00:A5:B0:16:5E:F7:68:6D:B9:D2:BB
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/FF4CF474E22911EC844F7835C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:6e:0b:a0:f0:3c:94:ea:4d:35:cf:37:03:e5:19:da:38:f7:
68:62:78:d8:c1:dd:9a:20:1e:db:2d:9a:ff:d4:13:03:d5:b1:
02:f1:16:51:3c:c9:05:eb:0c:18:cc:b1:24:9d:37:7b:13:7d:
07:ee:f5:19:0e:89:82:00:1e:0a:60:b2:a5:32:bc:11:b7:ea:
96:e3:d2:65:db:b0:10:c4:e4:cb:34:4f:50:2d:a7:7c:7c:62:
89:f7:cc:04:b3:4e:f8:d8:84:a0:2a:36:9b:70:bc:b4:97:94:
1e:74:57:20:75:fd:8f:28:00:81:e5:2c:97:bc:2a:87:f5:87:
59:96:d4:29:24:34:d2:14:e2:4a:33:92:48:d6:94:87:0f:9d:
e9:26:9d:7b:94:dc:c1:a9:65:dc:11:d3:aa:8a:1f:5d:43:3d:
1b:b1:bd:42:cd:cb:02:29:aa:05:40:d2:af:8c:41:68:b1:5b:
6b:eb:51:2e:14:08:dc:0d:ec:fb:c1:2f:31:e1:a6:0d:74:09:
56:e1:6d:04:0c:4b:3a:9d:ab:32:92:07:53:12:65:6b:d1:35:
51:eb:8d:f2:80:65:22:0d:47:eb:7e:22:82:b3:1e:8b:76:1f:
d9:3a:e8:9e:79:2d:e4:69:e0:34:1c:3a:7e:3b:fc:b1:9f:21:
18:0d:a7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-fra.rpki-client.org