Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/3D4C9BE48C2511EDB64DB410C4F9AE02.roa
File: 3D4C9BE48C2511EDB64DB410C4F9AE02.roa (raw, json)
Hash identifier: vZ9Wl1s0m3opR7egu2Yzvlhj2MfbfeFK6fVbrmXqKaQ=
Subject key identifier: A7:CE:76:AA:18:FE:6C:7C:F2:FF:16:9F:25:49:B0:0F:E5:21:08:BB
Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial: 03
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/3D4C9BE48C2511EDB64DB410C4F9AE02.roa
Signing time: Wed 04 Jan 2023 11:45:09 +0000
ROA not before: Wed 04 Jan 2023 11:45:09 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 139598
IP address blocks: 103.178.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Validity
Not Before: Jan 4 11:45:09 2023 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=63b566c5-4f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b6:5b:ee:8a:66:07:42:1f:15:83:a7:ba:24:
2d:35:6b:03:b5:b1:14:03:ec:8e:41:a5:84:f9:a8:
44:c2:a2:b9:0a:b0:0c:4f:94:2c:49:b3:46:f1:ab:
b3:f0:ef:02:fb:44:74:70:cb:b6:f0:3b:ad:2d:d3:
77:91:40:d9:02:7d:18:d3:cc:a5:cf:62:70:6f:e4:
59:70:95:eb:3e:44:70:1e:62:ea:83:ed:76:ee:8d:
c0:f1:85:4e:47:a6:6b:e4:f0:74:4a:ed:5d:0a:52:
a7:4c:f5:58:78:64:46:1e:97:d2:28:09:77:95:dd:
4b:60:b8:22:03:96:97:2f:ee:b6:63:6e:cf:0c:fc:
8e:03:7d:78:93:a3:c5:e7:33:04:bf:12:d8:df:43:
0d:b9:b9:b3:6e:54:0f:68:f9:55:81:f5:fb:90:fb:
8b:cf:53:59:8a:ce:9f:9f:4a:3b:2f:61:04:35:cf:
bf:d6:92:90:34:26:81:8a:07:bc:79:e2:35:05:04:
29:6b:75:1d:ee:b4:82:27:6f:48:a0:83:0f:71:86:
ab:ce:de:d0:8e:9e:55:0e:85:af:75:cc:e8:99:72:
57:fa:d7:34:ec:b5:53:bf:9c:88:24:84:b8:cc:0c:
10:cc:5a:3d:2c:11:2e:b3:c8:c1:10:de:aa:ee:4f:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CE:76:AA:18:FE:6C:7C:F2:FF:16:9F:25:49:B0:0F:E5:21:08:BB
X509v3 Authority Key Identifier:
keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/3D4C9BE48C2511EDB64DB410C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.79.0/24
Signature Algorithm: sha256WithRSAEncryption
51:37:14:75:be:fa:44:6e:e3:47:4e:9e:20:e0:b8:cd:0a:24:
af:89:92:54:21:e3:0d:37:d7:3d:7a:e7:0e:4f:bc:17:ba:c5:
ef:6f:72:c1:29:64:30:a7:b7:f3:75:63:cb:46:57:ec:78:8b:
53:20:04:3d:16:12:b0:31:c7:9b:6d:6d:7a:9f:2a:dc:41:6f:
a1:c5:19:e4:92:2a:38:ef:85:1e:d8:57:69:00:5d:ea:c3:00:
9a:b1:92:47:6b:ed:fe:55:e1:04:82:7c:8f:ae:99:d8:71:5f:
da:d0:8d:01:3a:0c:43:c4:cd:20:6f:44:28:42:c7:0c:5d:d6:
b7:c9:b9:8d:d6:87:04:92:6d:81:e6:ca:1a:4b:ee:d3:10:5b:
09:48:61:f8:35:1d:ab:88:14:79:a5:62:4a:44:b2:05:ed:16:
cb:e7:7a:7b:67:19:14:8e:82:7c:2f:71:83:fc:e6:22:32:30:
f1:b0:e2:ff:af:fd:4d:76:88:11:22:22:b3:c6:73:e4:45:f9:
b5:1e:3e:e3:7a:54:fa:dd:87:cf:ee:9a:63:70:9a:15:51:46:
d4:d9:db:ba:d1:c2:5a:dd:ae:07:f0:60:c8:ea:19:35:d7:5b:
3e:0d:a6:44:a8:92:b2:72:5d:b3:01:5f:65:97:81:86:3c:6b:
56:90:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org