Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/15F1E4186FBB11EDB783F362C4F9AE02.roa
File: 15F1E4186FBB11EDB783F362C4F9AE02.roa (raw, json)
Hash identifier: nC9fb1jWnwuJzs8MqrLDncwINE8YYhryz47vDKQz3k0=
Subject key identifier: 9A:AD:2E:AD:A6:73:30:17:E9:ED:64:F6:0B:64:C0:DB:B0:3A:95:A4
Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial: 23
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/15F1E4186FBB11EDB783F362C4F9AE02.roa
Signing time: Tue 29 Nov 2022 07:54:44 +0000
ROA not before: Tue 29 Nov 2022 07:54:44 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 150311
IP address blocks: 103.250.28.0/24 maxlen: 24
103.250.29.0/24 maxlen: 24
2001:df1:4540::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Validity
Not Before: Nov 29 07:54:44 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6385bac3-b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:c1:79:56:c3:0f:35:b5:af:dc:72:2a:a1:
55:1b:96:f9:ba:8d:43:33:7f:da:bb:75:7d:ff:59:
62:a6:a9:ed:cb:68:02:dd:bd:bd:0a:69:4a:c2:5b:
47:31:18:0f:6d:26:ad:c9:e8:2d:4e:f1:38:5f:01:
23:ee:26:5f:68:54:70:b9:77:20:6c:ca:ad:6b:67:
a0:0a:80:ca:e0:65:b6:73:0b:6d:6e:17:7d:22:dc:
01:34:fd:45:0a:9c:fe:72:7d:58:7f:8f:6b:1d:5e:
a0:a9:26:83:6d:93:c4:be:aa:fc:76:a0:65:99:0e:
33:99:c0:b9:5b:70:ea:00:ce:53:ef:3e:4a:5b:0c:
de:6c:59:25:b5:65:83:e8:3d:56:b8:be:35:dd:0a:
3d:1c:03:0f:9f:df:35:a8:d1:fd:96:73:d3:80:bb:
ba:71:15:9d:e1:bc:f1:44:95:a9:33:b3:4e:b1:b8:
ff:3f:86:ff:73:a0:46:85:fc:ab:01:e0:a8:24:3d:
11:0e:84:05:db:30:28:25:22:29:20:d8:8f:d3:97:
fb:8a:66:05:3c:7d:61:e2:0a:f0:24:7b:82:d5:b7:
0c:c0:27:c2:10:ec:be:58:79:14:92:56:43:c1:e1:
b4:3f:9d:0c:88:06:27:fd:a2:13:92:bd:6b:31:a0:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:2E:AD:A6:73:30:17:E9:ED:64:F6:0B:64:C0:DB:B0:3A:95:A4
X509v3 Authority Key Identifier:
keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/15F1E4186FBB11EDB783F362C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.250.28.0/23
IPv6:
2001:df1:4540::/48
Signature Algorithm: sha256WithRSAEncryption
7f:c8:54:a6:ad:3c:43:a6:83:e3:8b:fd:ac:02:51:e8:f4:cf:
5a:c7:26:ee:c3:f1:84:54:e5:8f:2f:60:56:32:a4:21:29:a8:
b4:29:9b:a7:da:7c:e5:4d:25:63:89:5d:2a:ac:ed:5d:18:61:
82:64:34:ed:f2:8d:76:20:89:f4:02:05:a9:69:14:ff:64:9e:
33:51:d8:a8:05:e2:e2:17:5d:20:b7:1d:41:65:5d:df:b4:97:
7d:e5:ff:d1:91:74:53:b3:ce:70:df:7e:5b:b5:a7:aa:de:a5:
68:f5:e0:5c:eb:ab:d1:b5:64:f4:00:c5:35:0e:b5:54:03:cb:
26:69:1b:ef:10:64:2d:8b:46:23:d6:54:d3:7c:10:12:67:76:
f7:15:a4:2a:a0:5c:c7:93:94:bf:46:68:a8:d0:51:35:4a:bb:
e5:77:d1:1f:ca:1c:90:df:5d:2d:ad:90:19:ce:42:5d:38:d8:
cb:79:94:a2:8d:03:cd:f2:ea:de:b6:50:5b:7a:78:4b:e9:18:
c9:dc:bc:e2:d7:74:f8:5d:53:c4:24:31:34:bf:e3:02:81:57:
3e:5e:56:75:e0:08:37:d5:13:44:34:d9:60:76:47:ce:0d:8d:
b7:bc:b2:2e:bd:70:7a:99:04:a9:39:e2:5c:47:55:2d:14:b4:
c4:e8:05:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org