Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/79E6255288B811EABB326228C4F9AE02.roa
File: 79E6255288B811EABB326228C4F9AE02.roa (raw, json)
Hash identifier: oHOHeW05gnbNFlbbp8nDvNsQx2725ytXWb8V26Zp6HY=
Subject key identifier: A3:D0:62:14:D9:10:52:89:1A:18:92:F5:26:95:9B:E8:3B:C0:01:99
Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial: 03FF
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/79E6255288B811EABB326228C4F9AE02.roa
Signing time: Wed 10 Feb 2021 09:35:06 +0000
ROA not before: Wed 10 Feb 2021 09:35:06 +0000
ROA not after: Wed 02 Mar 2022 00:00:00 +0000
asID: 134552
IP address blocks: 103.79.216.0/22 maxlen: 22
103.79.216.0/24 maxlen: 24
103.79.217.0/24 maxlen: 24
103.79.218.0/24 maxlen: 24
103.79.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1023 (0x3ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Validity
Not Before: Feb 10 09:35:06 2021 GMT
Not After : Mar 2 00:00:00 2022 GMT
Subject: CN=6023a8c9-2720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:08:cd:92:3c:66:d7:e3:ba:96:60:f5:61:
ec:2b:38:b8:fc:30:c0:9e:52:86:4e:38:5a:d8:f1:
b2:b9:91:d7:8e:83:56:47:99:4d:bf:3b:08:29:54:
d5:75:79:92:13:b1:67:6c:33:68:10:09:5a:99:c5:
11:28:60:7f:22:29:bf:92:4b:a8:ad:fd:0c:26:0d:
d7:12:73:88:4c:e5:ae:49:23:50:f5:03:69:46:72:
4c:ee:65:a5:42:75:0d:e8:c4:5a:b6:07:ba:9f:26:
33:ad:1e:c9:31:e2:4b:59:2a:f7:10:65:98:a6:30:
e7:a6:78:67:a1:8b:f3:78:4d:31:68:e6:b0:22:87:
7a:0c:ef:d1:d6:29:e2:c1:23:7f:9b:49:01:07:3b:
89:0b:50:f5:59:52:7a:67:5a:24:87:0e:2f:f2:16:
ab:91:78:00:5d:3e:1f:a0:05:f0:f8:79:78:7d:0d:
fa:86:fb:1f:5d:dd:10:b4:4d:5b:3a:79:c7:b7:37:
8d:5d:e4:bd:4b:7c:5f:11:43:7c:54:0d:90:48:2c:
4e:42:5d:a0:28:67:75:bd:ff:aa:00:15:db:80:54:
23:a4:85:1a:19:6b:be:a9:ae:f9:c9:a1:23:21:c5:
f6:53:e9:a5:f1:f4:12:be:72:67:f0:37:3f:4b:7d:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:62:14:D9:10:52:89:1A:18:92:F5:26:95:9B:E8:3B:C0:01:99
X509v3 Authority Key Identifier:
keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/79E6255288B811EABB326228C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.216.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:06:f0:ca:23:9c:0a:2d:77:f4:3b:1a:2a:46:82:39:01:51:
73:7e:da:98:4d:21:a5:ac:3f:9f:be:c9:d5:81:94:7c:d8:98:
49:43:7f:9f:4c:37:6e:9e:a7:93:f5:45:a1:71:bd:b4:1e:01:
25:05:73:cb:82:4c:0a:bb:a7:51:b1:d6:de:72:4d:11:c5:d2:
b1:14:71:57:ec:6a:b3:8b:39:fd:84:04:f8:96:33:f0:4f:c7:
87:a1:c1:d5:83:0b:2a:d2:86:4b:67:49:4a:ea:08:94:10:d5:
0b:b3:43:55:36:ec:9e:64:ef:a1:0b:20:69:6d:ac:e6:59:9c:
27:b3:8c:bf:c2:35:40:58:7e:7f:94:08:23:72:f5:fe:e7:b1:
f5:58:b2:07:e4:8b:eb:90:00:0b:f7:07:a0:09:47:d6:a0:e1:
1c:f2:de:4f:a2:1c:e2:37:86:68:36:86:db:ad:ca:e5:fc:ae:
f2:02:8a:bf:dc:54:7a:d2:db:3e:b0:03:a9:22:08:cc:07:e5:
81:a9:ac:a8:d3:b4:30:9e:35:91:e9:98:1d:45:c7:cd:e0:b4:
71:ce:9b:34:ec:68:e8:a9:79:cb:1b:97:27:3e:7c:0e:c7:c7:
30:64:7c:db:37:1a:98:2d:b9:15:b7:fd:4b:37:03:51:e1:50:
22:78:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org