Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/A3BF9A665F6111ED87896085C4F9AE02.roa
File: A3BF9A665F6111ED87896085C4F9AE02.roa (raw, json)
Hash identifier: JAmX/bXDrLaUdi5UcO0tRmZYl3Ru7R3xoheMcD45KbM=
Subject key identifier: C5:0C:50:F8:00:5B:B4:E7:E8:43:2E:CC:CF:7B:95:8E:33:53:FB:CB
Certificate issuer: /CN=A9138FCA/serialNumber=C199597C4E78CD35ADF1AFDCFD4161174606A649
Certificate serial: 33
Authority key identifier: C1:99:59:7C:4E:78:CD:35:AD:F1:AF:DC:FD:41:61:17:46:06:A6:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZlZfE54zTWt8a_c_UFhF0YGpkk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/A3BF9A665F6111ED87896085C4F9AE02.roa
Signing time: Tue 08 Nov 2022 12:34:08 +0000
ROA not before: Tue 08 Nov 2022 12:34:08 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 137443
IP address blocks: 103.79.120.0/22 maxlen: 22
103.79.120.0/24 maxlen: 24
103.79.122.0/24 maxlen: 24
202.91.36.0/24 maxlen: 24
202.91.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138FCA/serialNumber=C199597C4E78CD35ADF1AFDCFD4161174606A649
Validity
Not Before: Nov 8 12:34:08 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=636a4cc0-81e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:68:b2:70:91:11:ca:07:00:f6:e5:ba:9c:
35:37:d5:04:27:75:9e:2e:73:dc:3e:02:d7:ad:7d:
56:e7:e2:4c:aa:0e:01:c0:d8:7d:37:84:d9:4e:37:
1d:7a:3d:87:a6:ca:f0:c1:3b:b1:e6:d1:82:8b:80:
2a:d7:0a:ef:e3:ef:f9:4a:6f:d7:aa:65:ae:ff:fd:
9d:e9:76:dc:55:16:42:12:6c:f5:9f:af:1b:e6:9e:
28:8e:c6:a5:9d:83:b0:24:c3:c2:28:a2:0f:e3:43:
6b:4a:9e:4b:73:97:db:79:f4:c1:81:d5:e7:c5:c0:
8f:30:4d:a8:f1:98:30:67:82:62:22:a6:66:81:74:
34:67:ff:78:70:ec:f9:af:a1:a4:17:7e:15:0d:8c:
c4:2a:8b:29:86:87:82:b7:97:e8:e7:c3:de:b2:3e:
b8:cb:fa:6d:7d:61:81:49:45:22:da:e6:25:d5:2f:
95:0d:6d:d2:24:3d:af:59:24:95:5e:7b:5d:f3:77:
fe:db:85:ab:df:38:52:03:33:c0:8b:0f:67:b4:7a:
38:35:0a:a5:73:12:6d:26:ec:62:bb:1d:c4:a1:da:
62:6a:76:df:e3:04:86:64:b8:9b:23:f1:fd:0d:d0:
e8:d7:9e:4e:3e:d6:6e:a8:98:2a:86:17:88:e8:8c:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0C:50:F8:00:5B:B4:E7:E8:43:2E:CC:CF:7B:95:8E:33:53:FB:CB
X509v3 Authority Key Identifier:
keyid:C1:99:59:7C:4E:78:CD:35:AD:F1:AF:DC:FD:41:61:17:46:06:A6:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/wZlZfE54zTWt8a_c_UFhF0YGpkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZlZfE54zTWt8a_c_UFhF0YGpkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/A3BF9A665F6111ED87896085C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.120.0/22
202.91.36.0/24
202.91.38.0/24
Signature Algorithm: sha256WithRSAEncryption
81:97:ab:5d:15:80:88:6d:05:5e:61:fa:bc:fc:cc:fc:86:bd:
56:f7:a2:6c:ca:87:cc:31:c2:2f:6d:e8:6c:b5:b4:bb:71:9c:
d4:f4:eb:02:54:3b:40:2f:51:03:1d:88:64:c4:33:30:3d:1c:
44:a7:ca:3a:6b:e8:56:c3:d8:ac:93:a3:9e:b1:5f:17:a6:01:
76:cc:67:6f:55:bc:6d:a3:be:8c:92:8d:5c:0d:9e:2d:d4:52:
15:9f:e3:10:54:f4:06:32:ad:30:15:83:1a:aa:47:8d:95:78:
01:4c:da:52:a1:eb:ab:f4:b4:9a:69:57:a0:23:1d:3d:e3:8e:
80:57:b8:8c:af:4f:e2:d8:c5:e1:27:74:3a:20:49:5d:d2:d7:
96:9e:54:54:9e:53:e4:a0:0a:81:b5:5b:13:94:1c:9e:b8:21:
9a:8a:36:f2:ab:07:de:bd:d4:4d:aa:6b:80:e7:cd:45:3b:09:
fb:ce:19:e1:e3:fe:94:16:ec:56:f8:60:6a:2c:9b:5d:15:5c:
e3:ed:0a:94:f1:5d:ae:4b:cb:bf:f6:b9:d1:23:33:47:81:a6:
6f:0e:d2:c7:75:54:05:81:05:ec:a2:df:4c:ff:16:02:7e:23:
ac:e5:99:27:81:7e:49:39:fc:76:e2:af:ca:3c:10:66:54:59:
85:8a:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-fra.rpki-client.org