Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/6361EB9CBFED11EABE972E5AC4F9AE02.roa
File: 6361EB9CBFED11EABE972E5AC4F9AE02.roa (raw, json)
Hash identifier: tKGqPCitpLqeMc0KhDc1+A0UOIp0G7ZlGk7YQxislE4=
Subject key identifier: 28:79:98:6C:8F:18:C3:5E:B0:FC:42:5B:CF:2E:15:30:CE:3B:99:99
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 25CD
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/6361EB9CBFED11EABE972E5AC4F9AE02.roa
Signing time: Sat 01 May 2021 04:11:34 +0000
ROA not before: Sat 01 May 2021 04:11:34 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 132391
IP address blocks: 103.15.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9677 (0x25cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: May 1 04:11:34 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=608cd4f6-da53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ba:ca:2f:94:9e:a4:6f:57:09:82:fd:4f:31:
01:30:3c:d9:e9:80:b0:0f:16:a7:17:b5:d3:59:6d:
72:73:1b:f7:1b:8d:cb:c7:e3:05:a3:c9:a8:07:ff:
0f:b9:5a:0d:c3:c3:a7:1e:76:42:85:15:dd:23:2d:
ee:d5:32:24:63:07:b0:87:2e:f2:43:d1:fb:e9:0c:
e4:7f:97:ab:2f:b7:d0:6a:f9:36:32:3c:f9:6a:60:
02:79:87:b4:7e:0f:1d:dc:ad:34:b2:83:f7:df:1f:
c3:62:32:8c:1c:6d:74:98:77:e0:bd:4e:d3:e0:72:
04:73:b4:65:ca:cd:29:8a:2a:64:4a:6b:05:f2:5f:
7f:b1:92:53:b2:32:a5:d1:c9:cb:44:b1:0b:3f:87:
a7:31:7f:27:10:e7:57:a8:50:0b:e5:d6:ae:4c:58:
a4:94:77:59:a2:11:2b:33:63:fe:54:26:9e:42:61:
53:fb:4b:f0:79:0e:89:8d:97:a2:c4:b7:0a:d5:97:
34:ca:d2:7a:1d:c5:f1:7b:8a:58:ab:90:30:be:01:
bf:42:ee:e8:28:96:5b:7b:9c:20:d9:84:4b:ce:cb:
07:e1:f8:2c:61:7e:95:51:04:d7:3a:b2:57:d3:0b:
81:db:8f:86:3b:ce:af:d7:c4:b0:d3:fe:d4:55:d9:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:79:98:6C:8F:18:C3:5E:B0:FC:42:5B:CF:2E:15:30:CE:3B:99:99
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/6361EB9CBFED11EABE972E5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.178.0/24
Signature Algorithm: sha256WithRSAEncryption
23:af:db:92:e9:51:78:0f:06:5b:d2:d0:61:11:63:b2:c0:7b:
e2:90:88:b7:e2:6c:fc:3e:fc:10:6e:1f:56:7b:98:ce:38:5e:
76:fb:83:06:03:7d:f0:1a:0e:63:1d:71:39:e1:b0:c1:8e:88:
d2:1f:72:9a:78:6e:ad:41:b0:05:d2:06:8e:22:91:2a:84:bb:
70:68:bf:15:ec:55:ad:3b:70:93:47:4f:54:e6:6e:a5:00:82:
89:19:63:e0:79:88:37:bf:9e:c6:26:7e:b6:7d:d2:e0:d1:71:
e8:06:0e:67:79:aa:9b:50:90:62:52:09:9f:09:51:8d:85:e9:
de:7b:44:31:e7:99:81:92:93:f9:e4:74:45:24:07:75:75:0a:
be:d7:a3:7a:96:d5:04:a5:05:e5:15:b0:cb:d9:7c:62:ed:df:
b5:e4:39:11:74:08:5a:87:42:86:bf:1a:21:68:8d:41:ed:61:
21:99:b6:38:65:54:c6:cd:b6:dd:fc:9c:a0:66:83:d0:d3:8f:
3e:56:ef:f7:db:dd:ea:aa:17:86:a5:6b:de:0b:17:f8:90:2a:
e4:a2:f7:fd:5c:d7:e8:02:93:a5:6b:99:b6:de:d2:8a:ce:18:
97:f8:9c:23:ba:0d:7a:ce:3c:a2:e3:64:6b:36:36:c4:80:b6:
1e:b1:a2:67
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkMxMjgxMTAvBgNVBAUTKEI1NjQyNzMyMjY1RDQwQkY3NUNBOTRBOUVDODExOTIx
MUMxQjlCMzIwHhcNMjEwNTAxMDQxMTM0WhcNMjIwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MDhjZDRmNi1kYTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA87rKL5SepG9XCYL9TzEBMDzZ6YCwDxanF7XTWW1ycxv3G43Lx+MFo8moB/8P
uVoNw8OnHnZChRXdIy3u1TIkYwewhy7yQ9H76Qzkf5erL7fQavk2Mjz5amACeYe0
fg8d3K00soP33x/DYjKMHG10mHfgvU7T4HIEc7Rlys0piipkSmsF8l9/sZJTsjKl
0cnLRLELP4enMX8nEOdXqFAL5dauTFiklHdZohErM2P+VCaeQmFT+0vweQ6JjZei
xLcK1Zc0ytJ6HcXxe4pYq5AwvgG/Qu7oKJZbe5wg2YRLzssH4fgsYX6VUQTXOrJX
0wuB24+GO86v18Sw0/7UVdncTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCh5mGyP
GMNesPxCW88uFTDOO5mZMB8GA1UdIwQYMBaAFLVkJzImXUC/dcqUqeyBGSEcG5sy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzEyOC82NjRBOUJDQUZB
NkQxMUUzQjZBQzIzNTA1OTExRUEzMi90V1FuTWlaZFFMOTF5cFNwN0lFWklSd2Jt
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RXUW5NaVpkUUw5MXlwU3A3SUVaSVJ3Ym16SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkMxMjgvNjY0QTlCQ0FGQTZEMTFFM0I2QUMyMzUwNTkxMUVBMzIvNjM2MUVCOUNC
RkVEMTFFQUJFOTcyRTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnD7IwDQYJKoZIhvcNAQELBQADggEBACOv25LpUXgPBlvS
0GERY7LAe+KQiLfibPw+/BBuH1Z7mM44Xnb7gwYDffAaDmMdcTnhsMGOiNIfcpp4
bq1BsAXSBo4ikSqEu3BovxXsVa07cJNHT1TmbqUAgokZY+B5iDe/nsYmfrZ90uDR
cegGDmd5qptQkGJSCZ8JUY2F6d57RDHnmYGSk/nkdEUkB3V1Cr7Xo3qW1QSlBeUV
sMvZfGLt37XkORF0CFqHQoa/GiFojUHtYSGZtjhlVMbNtt38nKBmg9DTjz5W7/fb
3eqqF4ala94LF/iQKuSi9/1c1+gCk6Vrmbbe0orOGJf4nCO6DXrOPKLjZGs2NsSA
th6xomc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org