Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/80B3A78660A811EDB7F3FD68C4F9AE02.roa
File: 80B3A78660A811EDB7F3FD68C4F9AE02.roa (raw, json)
Hash identifier: XB3TDMPLTKhYnHPJPjtma4sXK8828Ijc6HF68kf1KNw=
Subject key identifier: DC:56:94:34:47:D4:3A:AD:A6:1D:5B:A3:9F:AF:BF:7C:8C:BB:88:D7
Certificate issuer: /CN=A9138FCA/serialNumber=C199597C4E78CD35ADF1AFDCFD4161174606A649
Certificate serial: 3A
Authority key identifier: C1:99:59:7C:4E:78:CD:35:AD:F1:AF:DC:FD:41:61:17:46:06:A6:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZlZfE54zTWt8a_c_UFhF0YGpkk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/80B3A78660A811EDB7F3FD68C4F9AE02.roa
Signing time: Thu 10 Nov 2022 03:33:55 +0000
ROA not before: Thu 10 Nov 2022 03:33:55 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 58879
IP address blocks: 103.79.120.0/22 maxlen: 22
103.79.120.0/24 maxlen: 24
103.79.122.0/24 maxlen: 24
202.91.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138FCA/serialNumber=C199597C4E78CD35ADF1AFDCFD4161174606A649
Validity
Not Before: Nov 10 03:33:55 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=636c7123-4f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:d7:22:d2:13:3c:6f:f2:81:07:8d:11:3b:
dd:ed:36:6d:eb:ea:a6:17:0c:40:ea:e4:65:21:02:
4c:61:a2:31:6c:b8:4d:3a:1a:c6:c8:c7:66:4e:34:
3e:49:c7:60:5c:5e:09:2a:7f:f2:30:68:20:8e:45:
f8:05:d6:33:4f:97:e6:7f:2c:d6:56:1f:b1:d7:df:
e5:42:3d:17:04:ea:13:a5:cc:2a:ed:f5:57:95:36:
25:22:c2:e2:bc:a0:6c:87:f4:69:51:c0:b2:71:69:
a4:0b:d8:80:92:1a:28:e0:44:04:1e:af:45:10:ec:
ff:46:dd:2b:59:a6:fe:f6:39:58:f5:53:1d:3d:84:
be:af:ec:a6:64:d7:54:91:74:34:63:7d:9f:58:77:
b0:5f:f5:7e:f1:81:4a:58:0d:00:79:91:04:cc:6b:
8f:0b:8c:79:d9:49:18:ff:48:88:eb:47:5b:90:fd:
59:70:f9:0d:48:38:08:dc:a5:aa:17:0b:77:6c:8c:
ba:a9:5d:84:80:80:2a:8b:33:ce:05:a2:05:11:62:
63:e1:29:e5:2e:fb:72:a2:87:30:33:9d:d4:1a:e5:
bc:96:b4:7e:ec:fd:80:b1:0b:64:87:2c:33:c7:ac:
54:77:4e:cd:62:1b:18:9b:ab:ed:f8:c4:aa:31:26:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:56:94:34:47:D4:3A:AD:A6:1D:5B:A3:9F:AF:BF:7C:8C:BB:88:D7
X509v3 Authority Key Identifier:
keyid:C1:99:59:7C:4E:78:CD:35:AD:F1:AF:DC:FD:41:61:17:46:06:A6:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/wZlZfE54zTWt8a_c_UFhF0YGpkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZlZfE54zTWt8a_c_UFhF0YGpkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/80B3A78660A811EDB7F3FD68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.120.0/22
202.91.36.0/24
Signature Algorithm: sha256WithRSAEncryption
14:21:0a:21:e8:19:78:7c:11:7a:6c:ae:dd:af:23:fe:7d:d1:
ca:58:ef:88:ef:16:d4:47:5e:67:53:89:78:69:47:61:f4:5b:
d5:cc:b3:30:de:9f:9d:e3:b4:d5:16:bf:c7:eb:1a:f3:90:b2:
7a:73:ee:5b:a1:aa:62:7c:d2:22:d5:2f:29:62:6c:24:07:a4:
29:30:5a:80:2a:70:0e:17:bc:21:7c:ae:7e:15:f9:c8:3d:eb:
10:4f:f9:96:48:4a:d5:97:17:ce:88:19:84:a2:a3:00:1e:bb:
89:7a:54:2a:b7:0b:03:3a:83:aa:4f:34:50:e4:56:f1:85:d2:
f5:5f:a0:43:d5:e4:32:67:9e:da:3e:9a:81:3f:76:2e:ec:fd:
bd:83:e5:18:88:6b:f7:8e:a8:c3:21:59:0b:94:16:93:3f:38:
7e:68:a6:8d:1c:d0:84:82:d5:92:4e:c6:0f:4d:01:06:bc:7e:
14:a9:21:c1:1d:a5:06:76:45:c9:8f:20:b8:89:68:70:22:a6:
ca:9a:0e:8d:c8:a2:17:0e:bd:29:8a:de:bc:cc:c4:22:79:24:
50:ee:a3:dc:f2:2f:9e:8e:dd:12:95:11:58:3e:c7:85:42:35:
9d:2d:ff:8e:11:d5:1d:3b:16:25:05:76:52:7d:64:4a:77:09:
77:0a:af:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org