Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/CA224584170211ED9918D94BC4F9AE02.roa
File: CA224584170211ED9918D94BC4F9AE02.roa (raw, json)
Hash identifier: ajTWpq7na9o2GiVuCAqzC9b64aRK2LlUKtsycHSevBU=
Subject key identifier: D5:03:4E:37:AB:96:A9:51:5A:17:78:60:23:36:7A:71:66:59:3B:D4
Certificate issuer: /CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
Certificate serial: 02
Authority key identifier: B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/CA224584170211ED9918D94BC4F9AE02.roa
Signing time: Mon 08 Aug 2022 10:13:47 +0000
ROA not before: Mon 08 Aug 2022 10:13:47 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 150155
IP address blocks: 103.15.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
Validity
Not Before: Aug 8 10:13:47 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62f0e1db-d0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:3f:ed:66:4c:cf:1b:d0:3e:28:6a:74:b9:
00:d3:df:f9:0b:d9:8e:81:e9:b3:ac:7d:f5:1c:e4:
af:3c:57:97:71:1a:dc:2a:eb:00:1d:4d:7c:cc:44:
a2:f4:8a:e9:db:e6:90:19:10:e8:84:30:13:06:a2:
02:64:c9:3f:24:71:43:bd:17:09:62:5c:d8:7c:03:
f0:af:1e:80:39:b6:91:8f:ab:9e:74:7c:d0:82:cd:
c3:6e:b2:57:d0:4c:63:7e:20:55:48:05:d0:c7:ff:
f8:74:78:96:fd:49:e7:e6:28:eb:0c:af:96:0e:84:
57:68:3e:da:3f:9b:8f:96:91:b1:f6:aa:8a:a5:d8:
df:16:68:51:5b:ac:08:4b:c6:bc:a1:cc:6e:43:15:
95:84:ef:34:0b:cd:47:ea:42:c0:5c:21:4a:80:78:
08:c7:a7:72:de:8a:71:43:d7:c4:2f:71:c9:4d:40:
1b:f4:1f:e3:52:74:b4:2e:3b:35:ad:49:30:33:03:
a1:4a:9a:b7:82:3e:bf:10:37:53:f1:94:2d:07:1f:
c3:80:ce:61:19:b9:5e:dc:63:11:3f:98:a4:5e:ff:
c8:4c:43:59:0a:7e:4c:5b:0e:50:80:86:cd:9a:ac:
65:93:ce:4f:e5:da:00:3d:9c:8f:6f:29:fe:16:e2:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:03:4E:37:AB:96:A9:51:5A:17:78:60:23:36:7A:71:66:59:3B:D4
X509v3 Authority Key Identifier:
keyid:B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/CA224584170211ED9918D94BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.38.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e6:4f:fd:cb:08:f0:cc:35:ab:68:2a:51:e3:82:99:7d:9f:
1f:07:2e:74:b2:a2:6b:25:5c:0b:b8:f4:8d:a7:84:d2:9a:df:
49:68:34:77:45:e7:e7:e6:d6:ef:f5:72:e4:34:4a:32:a3:c4:
9c:13:f1:cf:f3:85:51:50:fb:9e:f2:84:b0:fc:d0:eb:3b:7c:
28:ca:c3:77:e1:1f:21:b4:2a:0b:33:a5:91:7f:35:08:2a:01:
f7:98:b2:40:46:9e:ad:25:9c:b0:40:d6:2b:1b:ca:0d:34:62:
b4:1a:d4:02:18:98:c8:40:9a:3a:64:c2:28:3b:ca:69:70:61:
8d:1d:e4:4a:b8:f4:20:60:1b:cb:df:0a:bb:de:8a:c9:54:db:
f1:41:4e:b2:28:8b:89:09:cf:e2:7b:ce:07:29:c9:3a:dd:3d:
0f:ba:36:3d:77:e2:a6:58:a5:0b:d6:8e:ef:78:b3:75:64:c6:
ff:39:a5:e2:10:6a:a4:29:4a:49:22:45:8e:77:58:ec:7c:c5:
9c:27:3d:80:93:87:50:21:bf:85:0a:49:35:fb:7e:6b:00:0b:
3d:dc:5a:f0:93:f7:a7:e6:f1:5c:af:71:53:e0:a3:9a:26:d8:
08:ae:71:fb:70:16:18:8c:0b:b9:e8:86:39:33:04:17:2f:f0:
f8:80:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org