Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/434F94B4431811EA84E68121C4F9AE02.roa
File: 434F94B4431811EA84E68121C4F9AE02.roa (raw, json)
Hash identifier: 6H3imudbpHbvSISrwvkrFS/ZL/hr4s2/P69KYLiz1IA=
Subject key identifier: AB:DB:BD:8B:2D:09:F3:E4:95:CC:33:0C:BF:16:7C:FE:B1:7A:D5:6A
Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial: 051A
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/434F94B4431811EA84E68121C4F9AE02.roa
Signing time: Tue 11 May 2021 09:25:25 +0000
ROA not before: Tue 11 May 2021 09:25:25 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 139069
IP address blocks: 103.139.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Validity
Not Before: May 11 09:25:25 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=609a4d84-6106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:54:d8:6f:1b:af:01:a2:40:f7:72:40:d3:
2a:cc:2d:6f:5d:b0:77:f2:76:7f:09:60:73:12:e0:
7b:d4:35:e5:d7:46:be:bb:bc:1f:72:19:e4:9b:c6:
44:11:b2:ba:da:f2:b9:cf:ef:a4:81:a1:f7:66:ba:
c8:fa:b2:19:ff:1c:0a:eb:64:07:34:2e:72:1f:51:
90:e7:f5:16:a1:d8:11:3b:17:a8:64:41:82:c5:12:
4e:cf:cd:4c:de:19:87:40:af:2a:18:c7:64:27:a5:
67:9b:d6:ba:91:71:8b:fb:08:d2:23:0e:22:30:5a:
c2:db:c2:c6:ac:d5:19:54:a3:fe:af:ee:7b:93:c4:
08:cb:17:f9:50:08:8e:22:1f:47:c8:4b:cc:0b:b4:
31:ef:c5:a0:b6:51:31:b6:55:1a:22:2b:dc:d4:3b:
a1:c3:9e:41:3f:c3:ce:f0:92:1c:07:b9:62:8b:e1:
37:61:ad:de:4f:b3:2d:52:c4:0b:d2:cd:dd:3d:2e:
82:3a:d2:30:16:1c:c0:f3:d6:69:a0:fe:ba:34:2e:
68:6a:fb:eb:86:3d:12:27:0d:fe:78:97:18:9e:4c:
ab:8b:75:2c:67:bd:58:21:55:5e:93:7f:78:9c:62:
1b:f5:4c:9e:4d:a8:41:1e:b6:09:6c:22:13:21:d0:
83:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DB:BD:8B:2D:09:F3:E4:95:CC:33:0C:BF:16:7C:FE:B1:7A:D5:6A
X509v3 Authority Key Identifier:
keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/434F94B4431811EA84E68121C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:70:38:aa:db:1b:22:2f:83:c1:8a:81:d9:99:c7:4c:6c:72:
aa:5b:14:d2:4c:65:cc:1f:f1:31:7f:00:7a:1f:62:d1:c5:ac:
f3:33:33:64:3c:52:83:84:47:79:9f:3e:7e:4b:78:69:0b:68:
38:f2:33:03:a3:78:16:d5:13:dd:22:5a:dd:70:43:f6:5b:74:
6b:0a:ea:d8:c0:05:2f:a1:a6:6e:51:ab:e0:66:43:46:49:3c:
2d:f5:5b:2f:35:47:c2:ab:c7:5d:9c:e8:29:33:79:2c:b0:10:
80:42:94:22:64:1a:72:dd:a5:0f:69:ac:42:28:f4:e9:5f:dc:
91:5a:72:7d:90:36:41:5d:34:40:68:7b:25:79:ef:60:e6:43:
11:71:7d:46:1a:87:5e:39:83:92:72:4c:1c:9b:6c:57:9f:24:
05:66:61:69:40:60:68:13:bf:b1:70:b7:e9:a5:ca:08:9a:14:
05:13:32:45:ac:14:f9:17:b5:49:6f:3a:63:95:4d:8e:46:b1:
7e:d7:99:06:25:32:aa:03:26:cc:9b:10:76:76:ae:ca:75:72:
10:b3:50:17:71:17:f8:d0:fa:31:a1:d8:e3:69:f3:e5:25:c6:
7b:52:8b:16:53:9f:36:88:90:b9:84:ba:24:a0:e5:40:9e:0f:
38:bb:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org