Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/15AFADE45C5311ED96526A13C4F9AE02.roa
File: 15AFADE45C5311ED96526A13C4F9AE02.roa (raw, json)
Hash identifier: YE1a8/F3fmtLZxkIevtQE0/BbR5eBuX/fTkEppz9Y0w=
Subject key identifier: 1B:D2:EF:C0:89:CF:DA:D0:F0:AA:AE:C6:17:B4:AE:FC:8A:E6:C6:D3
Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
Certificate serial: 0284
Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/15AFADE45C5311ED96526A13C4F9AE02.roa
Signing time: Fri 04 Nov 2022 15:12:24 +0000
ROA not before: Fri 04 Nov 2022 15:12:24 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 138538
IP address blocks: 103.177.80.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C751F
Validity
Not Before: Nov 4 15:12:24 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=63652bd7-78b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:0b:27:8b:08:9f:ef:57:7a:57:cb:d9:94:
9a:02:45:28:1e:a9:96:69:c3:fc:b7:d5:fb:88:31:
b6:50:3a:4a:09:5a:d7:4a:36:6a:8f:94:ea:b5:82:
80:58:e1:68:b9:6c:47:51:f8:3d:b5:dd:d7:3f:f3:
d6:2d:f2:16:fb:a9:76:d4:b9:4d:d3:15:0e:d8:b7:
87:1e:50:52:06:a2:a5:9c:09:0c:fc:c8:87:63:14:
dc:c0:72:82:19:da:aa:91:c1:e8:e1:1f:5d:74:6a:
38:1f:f7:9c:84:d8:af:38:74:80:b5:f7:69:4b:2f:
c2:a0:4d:9e:dc:09:ac:44:7d:93:a8:3c:ab:a6:bd:
42:f8:43:fb:ab:f3:f7:72:f8:94:30:ee:56:0a:38:
c0:b2:cf:f6:18:51:31:c2:5c:7e:5f:6e:b6:7a:e4:
20:de:45:e1:6a:5a:02:b6:52:c7:c0:11:9f:31:b1:
0b:ec:2a:61:6c:16:5e:5b:26:f3:f1:a1:9e:ed:8b:
2d:07:51:5c:44:b1:fe:2e:34:10:e2:3d:aa:a6:73:
bb:07:2c:fe:14:2f:7f:5d:75:45:25:b3:b6:28:5b:
dd:50:61:f0:fe:f3:2b:47:d9:98:79:81:13:73:ff:
fa:9a:08:3c:07:ba:0c:32:ef:46:53:14:18:ee:e9:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:EF:C0:89:CF:DA:D0:F0:AA:AE:C6:17:B4:AE:FC:8A:E6:C6:D3
X509v3 Authority Key Identifier:
keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/15AFADE45C5311ED96526A13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.80.0/23
Signature Algorithm: sha256WithRSAEncryption
46:86:f1:f0:a9:8f:9d:e2:01:22:bd:9e:6e:ca:cf:ad:55:2a:
cb:10:5b:a3:4c:ce:3d:e5:ad:75:da:2b:0b:bf:4c:4d:a7:98:
e8:0a:3d:53:5e:64:58:53:7f:cc:bc:bd:75:b6:e4:82:44:c3:
23:f6:05:1d:c8:f9:e6:f7:a0:04:e3:9e:52:75:70:ea:e7:c1:
74:6b:4a:ee:db:c5:80:1e:50:d4:68:ab:3a:11:16:ad:5e:4b:
3f:65:cb:45:ee:de:98:25:44:e7:2a:6f:4c:85:c0:f5:2e:67:
cb:f4:8e:b6:f3:ca:cd:4d:88:ab:d6:7d:4a:05:a4:a7:be:03:
b0:cc:d1:2a:55:91:af:c8:ff:35:0d:5a:da:6d:14:d3:83:86:
fa:0d:13:72:aa:08:d0:bc:ae:56:af:2b:81:a1:20:1e:cd:82:
d9:3a:51:52:aa:dc:a6:b9:e0:0c:a9:46:f4:e9:c2:f3:c5:c1:
08:ca:f9:06:df:69:3c:47:a8:74:a5:d4:e3:da:59:ce:53:0a:
eb:df:1b:e4:ef:2e:39:50:10:24:bb:d1:59:f5:05:85:2b:3e:
fd:61:ee:9d:dd:2d:f1:da:4e:7c:c1:51:03:fa:69:1e:5e:64:
b1:74:c8:b9:eb:0a:7c:db:57:90:54:e4:af:b5:b5:fa:a2:a6:
cb:d2:f2:e1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc1MUYxMTAvBgNVBAUTKDQ5N0E2OTk4MzQwOUFENzBDMjE3NTY0MDcxQ0NGNUJF
MzRDNTFCQzcwHhcNMjIxMTA0MTUxMjI0WhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzY1MmJkNy03OGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1SwLJ4sIn+9XelfL2ZSaAkUoHqmWacP8t9X7iDG2UDpKCVrXSjZqj5TqtYKA
WOFouWxHUfg9td3XP/PWLfIW+6l21LlN0xUO2LeHHlBSBqKlnAkM/MiHYxTcwHKC
GdqqkcHo4R9ddGo4H/echNivOHSAtfdpSy/CoE2e3AmsRH2TqDyrpr1C+EP7q/P3
cviUMO5WCjjAss/2GFExwlx+X262euQg3kXhaloCtlLHwBGfMbEL7CphbBZeWybz
8aGe7YstB1FcRLH+LjQQ4j2qpnO7Byz+FC9/XXVFJbO2KFvdUGHw/vMrR9mYeYET
c//6mgg8B7oMMu9GUxQY7ukOmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBvS78CJ
z9rQ8Kquxhe0rvyK5sbTMB8GA1UdIwQYMBaAFEl6aZg0Ca1wwhdWQHHM9b40xRvH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzUxRi8xODM5ODFEMjUx
ODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJYRENGMVpBY2N6MXZqVEZH
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NYcHBtRFFKclhEQ0YxWkFjY3oxdmpURkc4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzc1MUYvMTgzOTgxRDI1MTg0MTFFQzk2MTIwNjQwQzRGOUFFMDIvMTVBRkFERTQ1
QzUzMTFFRDk2NTI2QTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnsVAwDQYJKoZIhvcNAQELBQADggEBAEaG8fCpj53iASK9
nm7Kz61VKssQW6NMzj3lrXXaKwu/TE2nmOgKPVNeZFhTf8y8vXW25IJEwyP2BR3I
+eb3oATjnlJ1cOrnwXRrSu7bxYAeUNRoqzoRFq1eSz9ly0Xu3pglROcqb0yFwPUu
Z8v0jrbzys1NiKvWfUoFpKe+A7DM0SpVka/I/zUNWtptFNODhvoNE3KqCNC8rlav
K4GhIB7Ngtk6UVKq3Ka54AypRvTpwvPFwQjK+QbfaTxHqHSl1OPaWc5TCuvfG+Tv
LjlQECS70Vn1BYUrPv1h7p3dLfHaTnzBUQP6aR5eZLF0yLnrCnzbV5BU5K+1tfqi
psvS8uE=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:16 2025 by rpki-client