Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/79E8FA42064911ECA853EB0FC4F9AE02.roa
File: 79E8FA42064911ECA853EB0FC4F9AE02.roa (raw, json)
Hash identifier: 4PziwrsgN4c5ccGSjmjeyRhMcjXl4yEjqT9goEPXe3Y=
Subject key identifier: CF:66:26:67:24:EF:D1:53:BA:4F:6B:0C:50:65:AE:54:3E:FD:9E:1B
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 04
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/79E8FA42064911ECA853EB0FC4F9AE02.roa
Signing time: Thu 26 Aug 2021 08:41:59 +0000
ROA not before: Thu 26 Aug 2021 08:41:59 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 24429
IP address blocks: 110.164.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Aug 26 08:41:59 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=612753d7-17a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:24:90:80:22:98:cb:58:cd:34:15:05:42:
e9:b1:af:c7:e8:04:33:ed:06:93:ad:e5:79:0b:3a:
42:64:87:8d:81:ab:4b:1d:95:9d:88:b1:fd:0f:16:
89:11:94:62:24:e7:e0:8e:0f:9e:46:af:e5:38:aa:
fc:5a:f4:b0:06:38:bc:84:50:5e:00:36:dc:0d:6c:
89:5a:2b:4a:80:ce:df:b7:94:65:77:df:fa:7a:21:
32:79:a5:84:bd:2e:5a:14:2f:bf:6a:d0:35:e2:0d:
86:ca:61:54:bf:f0:1d:69:a1:56:06:02:6a:31:65:
04:0d:e2:df:26:2e:28:3d:0c:e8:fd:c9:f8:f3:bb:
e2:8c:c8:9d:32:0b:f6:75:91:c3:18:13:04:af:84:
b8:b6:6d:2a:01:5e:8d:58:bc:15:6a:c8:d2:92:c8:
04:15:c1:d1:21:a2:42:61:20:69:a5:fe:34:d2:ea:
4e:e8:ea:51:64:15:80:23:7e:f5:46:51:82:73:ac:
24:03:3e:85:35:b3:71:64:f1:26:e1:7f:33:a6:a8:
77:2e:2f:a8:07:be:f3:3d:37:12:d8:b8:d4:34:4d:
7a:69:1d:29:b8:b7:49:c9:2f:ec:1e:57:ca:da:62:
ca:15:15:eb:50:05:8f:d0:1b:c0:d5:7c:5f:ad:ef:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:66:26:67:24:EF:D1:53:BA:4F:6B:0C:50:65:AE:54:3E:FD:9E:1B
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/79E8FA42064911ECA853EB0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.37.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7e:a7:7d:f9:fa:e3:b2:1e:c7:51:08:74:18:f0:61:b5:5c:
7e:60:03:47:7c:57:36:63:19:64:c5:4a:8f:5e:af:9b:cc:e0:
ee:78:47:e3:cc:0c:d0:8c:c4:d9:a9:c8:69:e8:ab:ff:51:58:
8b:ff:e9:ed:e6:e0:05:41:5a:13:b5:06:2d:1f:c8:69:dd:da:
50:fb:cf:cf:7b:e4:6b:57:48:12:68:8f:83:7f:cb:70:88:41:
0d:cc:71:74:9d:17:f0:5a:09:9d:5f:17:82:e2:81:11:9f:72:
1f:61:7a:c7:6b:95:77:61:7c:d2:6a:48:25:47:cd:9b:12:cd:
67:79:2b:e4:6a:d1:4c:85:0a:53:e6:11:3f:c5:59:ce:54:0e:
10:98:95:fd:11:51:f2:e8:a8:65:f5:69:9a:9c:1d:b7:bd:89:
00:a6:d2:a7:ac:4f:69:ec:ee:1f:2e:04:ef:11:c0:d9:15:ea:
43:f3:5d:f9:9d:a7:1c:0c:d1:e1:d6:ed:42:29:4a:4e:b4:6d:
c8:3e:70:18:13:0b:4b:05:7f:62:13:6d:bb:cc:1a:f4:09:10:
42:e3:38:4b:e2:36:69:1b:04:09:45:62:a3:27:4e:7d:50:99:
c4:38:d6:9a:d2:e2:16:f6:2d:12:cf:a4:da:61:4f:d8:f3:ff:
7e:e8:ab:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:46 2024 by rpki-client on console-fra.rpki-client.org