Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/9FCF98E6923511EDAB6DD975C4F9AE02.roa
File: 9FCF98E6923511EDAB6DD975C4F9AE02.roa (raw, json)
Hash identifier: 760nafFQ41+Ikptl4YEZGvkS4WhC3YcbCYfZhehHEbQ=
Subject key identifier: 77:D9:16:39:28:0B:6F:F1:56:00:B6:40:BC:5B:19:11:CE:40:6E:AD
Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial: 08F4
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/9FCF98E6923511EDAB6DD975C4F9AE02.roa
Signing time: Thu 12 Jan 2023 21:37:47 +0000
ROA not before: Thu 12 Jan 2023 21:37:47 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 138024
IP address blocks: 103.79.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292 (0x8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Validity
Not Before: Jan 12 21:37:47 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63c07dab-0076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:7a:4d:17:b3:f6:a1:82:de:14:64:c7:61:
1e:b6:4f:13:00:f2:95:37:6d:b6:d7:f6:07:a4:f4:
19:cb:80:36:8e:1c:2f:0d:d3:af:fe:e5:1b:dc:45:
a5:30:81:9a:1d:57:88:d6:1a:12:02:23:17:6b:1b:
18:27:53:19:9f:ca:0b:f1:3f:c3:f4:81:c1:c0:8c:
0b:cc:ae:24:06:80:f1:3d:39:43:21:9d:b2:c8:5d:
8f:70:8b:2e:77:db:b3:36:e4:b8:42:f4:b1:5b:f8:
21:19:e4:21:ff:a3:38:58:13:17:dc:eb:c0:8c:8c:
da:11:16:aa:13:65:a0:70:df:c3:6d:b2:49:93:fa:
94:29:65:0e:bc:b7:63:74:b4:a7:d0:47:af:21:c1:
74:e8:86:9c:d3:c2:29:70:43:7a:a8:90:c5:fa:6e:
02:77:a8:1a:82:29:f5:35:29:08:7d:7d:db:88:c3:
75:21:48:05:88:89:e0:dd:69:21:0c:62:ba:22:91:
55:eb:50:41:a6:6c:a0:d1:4b:6d:30:4d:4b:97:81:
47:84:40:9e:c5:8e:4f:14:fb:be:52:f0:78:e3:9a:
ed:6f:6d:bc:5c:88:c3:79:6f:ab:91:1b:89:c6:c9:
eb:c4:6a:3a:01:cc:bf:28:02:8b:d4:b9:f2:6d:e9:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D9:16:39:28:0B:6F:F1:56:00:B6:40:BC:5B:19:11:CE:40:6E:AD
X509v3 Authority Key Identifier:
keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/9FCF98E6923511EDAB6DD975C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.219.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c6:c2:99:59:09:02:70:b8:bf:6b:37:d6:8c:83:18:e0:3a:
e6:1c:3b:f0:2e:67:4e:3c:2d:c0:6b:22:c6:a2:14:10:2c:ed:
ab:52:6e:24:76:d2:c0:88:84:fa:69:4b:35:44:36:f3:dc:44:
cc:45:4b:ea:5d:fe:8c:78:54:85:5c:d7:07:39:11:b8:31:62:
1e:1d:af:59:f7:1f:8b:9d:26:17:46:c9:d3:c5:93:c3:05:30:
d9:d8:43:d3:27:11:eb:dc:f7:4c:9c:8c:c0:35:36:48:b0:92:
cd:6d:ec:3c:7a:2f:49:5c:10:fa:5c:77:d6:5c:b9:09:a2:54:
82:e2:55:28:de:4a:20:8f:22:b1:2b:82:2a:70:9c:b7:68:54:
84:4d:78:4a:ca:98:a8:6a:f4:50:0b:62:f6:cc:69:81:43:87:
ff:a8:15:06:83:48:c7:9e:f5:ac:55:e5:de:8d:15:ab:d6:72:
3c:50:05:e9:45:e0:a8:79:fe:2c:8b:71:72:8c:6f:09:20:4f:
1b:db:22:cd:8b:68:c5:22:bb:ca:f7:cc:a0:b5:56:66:ec:db:
f1:9f:88:a8:fe:4a:49:da:b6:0a:28:1d:ad:8d:f1:62:db:09:
7f:ee:5d:bb:45:e8:c8:4a:68:5e:4d:f2:7d:dc:e0:a7:52:34:
2f:88:86:d7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTMxMTAvBgNVBAUTKEFCNEMzRTM1QUVGQzU1QjVCQTM1OENBNDA2RUQ5NjI2
QTQyMjBGRDAwHhcNMjMwMTEyMjEzNzQ3WhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2MwN2RhYi0wMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5SV6TRez9qGC3hRkx2Eetk8TAPKVN2221/YHpPQZy4A2jhwvDdOv/uUb3EWl
MIGaHVeI1hoSAiMXaxsYJ1MZn8oL8T/D9IHBwIwLzK4kBoDxPTlDIZ2yyF2PcIsu
d9uzNuS4QvSxW/ghGeQh/6M4WBMX3OvAjIzaERaqE2WgcN/DbbJJk/qUKWUOvLdj
dLSn0EevIcF06Iac08IpcEN6qJDF+m4Cd6gagin1NSkIfX3biMN1IUgFiIng3Wkh
DGK6IpFV61BBpmyg0UttME1Ll4FHhECexY5PFPu+UvB445rtb228XIjDeW+rkRuJ
xsnrxGo6Acy/KAKL1Lnybek19wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHfZFjko
C2/xVgC2QLxbGRHOQG6tMB8GA1UdIwQYMBaAFKtMPjWu/FW1ujWMpAbtliakIg/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1My85NUM4QTNFNDU3
QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZiVzZOWXlrQnUyV0pxUWlE
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Ewdy1OYTc4VmJXNk5ZeWtCdTJXSnFRaUQ5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE1NTMvOTVDOEEzRTQ1N0EzMTFFQUE5MzVDMDgzQzRGOUFFMDIvOUZDRjk4RTY5
MjM1MTFFREFCNkREOTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnT9swDQYJKoZIhvcNAQELBQADggEBAHLGwplZCQJwuL9r
N9aMgxjgOuYcO/AuZ048LcBrIsaiFBAs7atSbiR20sCIhPppSzVENvPcRMxFS+pd
/ox4VIVc1wc5EbgxYh4dr1n3H4udJhdGydPFk8MFMNnYQ9MnEevc90ycjMA1Nkiw
ks1t7Dx6L0lcEPpcd9ZcuQmiVILiVSjeSiCPIrErgipwnLdoVIRNeErKmKhq9FAL
YvbMaYFDh/+oFQaDSMee9axV5d6NFavWcjxQBelF4Kh5/iyLcXKMbwkgTxvbIs2L
aMUiu8r3zKC1Vmbs2/GfiKj+SknatgooHa2N8WLbCX/uXbtF6MhKaF5N8n3c4KdS
NC+Ihtc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org