Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/15272D58FF2A11EABC2D9052C4F9AE02.roa
File: 15272D58FF2A11EABC2D9052C4F9AE02.roa (raw, json)
Hash identifier: Ail26TCWVojlA3g5/+ZKPxuVay+XmrerQQeRv6ZwTE0=
Subject key identifier: CE:40:EE:6F:D9:77:EA:1D:39:F7:2E:D1:29:E2:9B:C3:73:63:EC:DD
Certificate issuer: /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
Certificate serial: 0486
Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/15272D58FF2A11EABC2D9052C4F9AE02.roa
Signing time: Fri 25 Feb 2022 16:49:27 +0000
ROA not before: Fri 25 Feb 2022 16:49:27 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 140608
IP address blocks: 103.150.238.0/24 maxlen: 24
103.150.239.0/24 maxlen: 24
103.150.239.0/25 maxlen: 25
2001:df3:9880::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1158 (0x486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
Validity
Not Before: Feb 25 16:49:27 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=62190896-dbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:1a:af:45:ec:9d:cc:2b:3b:a4:04:86:29:
cd:ab:91:39:48:7e:cd:76:ce:9c:b2:9f:43:22:7b:
ec:0b:60:38:1c:3f:e4:cf:9c:b3:3e:9b:64:8b:d2:
9f:fd:cd:5d:96:d5:ea:37:a7:21:46:23:02:ab:45:
b0:d4:80:27:e6:7f:59:b9:08:89:b7:53:af:04:93:
1c:08:22:f6:66:f7:b0:69:1a:18:a8:a7:2c:3f:31:
68:76:bc:40:a2:7b:8f:0c:4c:77:d0:06:f9:cf:db:
c5:8e:c2:f8:e1:aa:a2:28:9c:2d:e3:d5:33:a0:a4:
a9:a7:d2:c3:4f:e4:e6:92:41:87:ab:c3:94:1d:ea:
1a:53:0e:d2:b6:bf:71:5b:ba:f3:72:a8:1d:2a:c7:
a9:1e:c6:4a:96:9f:04:59:69:cc:d7:3a:e6:80:c2:
43:18:59:0d:5d:30:a6:e5:21:b1:76:e7:ac:54:de:
22:b3:6e:44:60:b9:19:98:61:93:93:7a:74:22:2f:
b2:8f:fc:b9:45:71:12:dd:57:c9:4f:72:9a:b5:e1:
46:0f:5e:69:19:b6:7e:42:b3:98:c6:d1:40:ff:8c:
98:fe:5e:f9:a5:4d:3b:23:b0:5d:7f:1d:1a:c7:e3:
d0:8a:a6:58:23:dd:ad:ff:af:0f:9c:86:35:ae:cf:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:40:EE:6F:D9:77:EA:1D:39:F7:2E:D1:29:E2:9B:C3:73:63:EC:DD
X509v3 Authority Key Identifier:
keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/15272D58FF2A11EABC2D9052C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.238.0/23
IPv6:
2001:df3:9880::/48
Signature Algorithm: sha256WithRSAEncryption
44:0d:da:6d:eb:d1:d8:ee:c3:45:e9:28:8d:e2:73:98:b1:64:
59:ae:05:ba:dc:02:4e:f6:a9:f1:c1:91:23:7c:5e:3f:45:e3:
19:d1:b8:eb:64:b3:a3:43:ec:e9:28:5b:af:00:7e:c7:5e:72:
b0:6b:f9:cc:09:92:1c:a7:2d:d5:84:f6:11:11:64:76:a3:3c:
41:dc:8a:54:ca:8c:3e:8d:2f:dd:78:33:c3:37:d6:52:53:1a:
76:4b:6e:15:bd:cf:ba:69:ac:f0:0f:8f:61:33:eb:1d:08:42:
20:5e:fb:8a:c7:d1:a1:b9:ae:63:9a:11:39:f7:05:3b:4a:64:
f6:e1:c3:b8:15:03:1a:e4:06:fb:a4:18:4f:b2:35:7f:7c:df:
e4:4e:09:40:ac:bf:7c:fb:9c:39:8d:62:f2:f5:c8:f6:89:06:
56:37:13:de:b4:92:7a:c9:eb:63:bd:d4:db:61:42:9a:25:72:
8d:b1:52:53:39:63:4a:81:41:84:e8:01:78:92:c7:2e:62:09:
53:d2:03:be:2a:17:04:5d:29:80:d4:28:ff:75:c5:0b:87:20:
68:4a:3f:77:86:5a:40:f3:f0:94:28:6b:02:3f:1f:67:c0:58:
e5:25:f4:75:c4:57:7b:36:53:bb:d4:8b:8b:a1:9d:1c:80:e2:
c8:3b:5d:1f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U0MTUxMTAvBgNVBAUTKENFN0IzMDc4RUEyMDBFRjFDRkMzNDU4QzREMUU5MDhE
NUY5Q0I3MzUwHhcNMjIwMjI1MTY0OTI3WhcNMjIwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjE5MDg5Ni1kYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApSkar0XsncwrO6QEhinNq5E5SH7Nds6csp9DInvsC2A4HD/kz5yzPptki9Kf
/c1dltXqN6chRiMCq0Ww1IAn5n9ZuQiJt1OvBJMcCCL2ZvewaRoYqKcsPzFodrxA
onuPDEx30Ab5z9vFjsL44aqiKJwt49UzoKSpp9LDT+TmkkGHq8OUHeoaUw7Str9x
W7rzcqgdKsepHsZKlp8EWWnM1zrmgMJDGFkNXTCm5SGxduesVN4is25EYLkZmGGT
k3p0Ii+yj/y5RXES3VfJT3KateFGD15pGbZ+QrOYxtFA/4yY/l75pU07I7Bdfx0a
x+PQiqZYI92t/68PnIY1rs98oQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFM5A7m/Z
d+odOfcu0Snim8NzY+zdMB8GA1UdIwQYMBaAFM57MHjqIA7xz8NFjE0ekI1fnLc1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTQxNS9CQzY2MTA2RURE
OTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2SFB3MFdNVFI2UWpWLWN0
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3puc3dlT29nRHZIUHcwV01UUjZRalYtY3R6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0U0MTUvQkM2NjEwNkVERDk0MTFFQThBMkUyRDM3QzRGOUFFMDIvMTUyNzJENThG
RjJBMTFFQUJDMkQ5MDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnlu4wDwQCAAIwCQMHACABDfOYgDANBgkqhkiG9w0BAQsF
AAOCAQEARA3abevR2O7DRekojeJzmLFkWa4FutwCTvap8cGRI3xeP0XjGdG462Sz
o0Ps6ShbrwB+x15ysGv5zAmSHKct1YT2ERFkdqM8QdyKVMqMPo0v3XgzwzfWUlMa
dktuFb3Pumms8A+PYTPrHQhCIF77isfRobmuY5oROfcFO0pk9uHDuBUDGuQG+6QY
T7I1f3zf5E4JQKy/fPucOY1i8vXI9okGVjcT3rSSesnrY73U22FCmiVyjbFSUzlj
SoFBhOgBeJLHLmIJU9IDvioXBF0pgNQo/3XFC4cgaEo/d4ZaQPPwlChrAj8fZ8BY
5SX0dcRXezZTu9SLi6GdHIDiyDtdHw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:03:16 2025 by rpki-client