Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0F63B25C09D511EE846FE131C4F9AE02.roa
File: 0F63B25C09D511EE846FE131C4F9AE02.roa (raw, json)
Hash identifier: iNZr+k4f1UC5aetozIdOHc6F1lTx3V8Maza7Ez/lkwk=
Subject key identifier: 29:30:B5:63:A9:0C:59:70:87:18:65:55:1C:AA:9B:27:EA:02:3D:6E
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 08A2
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0F63B25C09D511EE846FE131C4F9AE02.roa
Signing time: Tue 13 Jun 2023 10:28:39 +0000
ROA not before: Tue 13 Jun 2023 10:28:39 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jun 13 10:28:39 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=648844d6-19fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:e4:b6:1a:bf:5e:21:62:aa:e3:91:00:ee:
95:d3:ae:02:6f:8d:a6:c3:5b:3f:96:25:ea:bc:e2:
11:38:17:55:38:5b:5d:46:1b:09:97:fb:31:9f:ba:
53:37:ee:75:4d:fb:d9:94:52:a9:5d:23:25:e9:fb:
75:0d:75:10:58:34:eb:8c:84:c4:82:3f:77:2d:f4:
a3:34:dc:ff:d2:2b:4d:dd:e0:b1:4a:3a:9d:89:97:
62:bc:1e:91:f4:b8:11:9a:eb:24:1b:b4:54:e8:df:
5d:ec:f4:65:de:b1:1e:2e:e9:65:46:75:a2:8a:5b:
2c:eb:09:ba:04:31:2f:96:11:40:0c:21:f7:3f:39:
64:a0:60:e0:ac:a6:12:e2:05:4c:81:2e:86:6e:21:
dc:06:5b:40:aa:00:eb:60:cf:f5:4e:42:41:7e:79:
5d:8d:1b:09:66:7b:4f:6f:ef:f3:63:29:75:fd:93:
bf:4b:86:43:3a:56:05:c4:4d:a8:95:6d:c8:22:bc:
e2:f7:1e:ad:c5:d8:dc:a4:4e:82:8d:62:02:7c:21:
13:1b:51:cf:44:0b:57:7c:79:f7:24:5f:23:a6:d8:
40:b6:c2:c0:0f:0a:d4:76:4e:8e:f0:d4:47:07:37:
a9:a9:2f:f8:9d:34:82:1b:78:67:94:2a:65:f6:b0:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:30:B5:63:A9:0C:59:70:87:18:65:55:1C:AA:9B:27:EA:02:3D:6E
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0F63B25C09D511EE846FE131C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.60.0/22
Signature Algorithm: sha256WithRSAEncryption
41:bf:a3:59:75:d0:e6:ac:6f:5a:45:c8:5e:5f:d5:c6:bb:28:
ea:09:a4:68:ef:3c:bd:a7:fb:9c:99:bb:4c:90:f4:c3:45:0d:
6e:56:de:b6:59:3f:a7:63:28:cc:e0:e4:6a:72:d0:bd:fd:0d:
10:cb:4a:d0:1b:56:db:02:3d:34:ae:4d:54:d3:64:36:61:46:
94:99:f6:52:af:73:c0:cb:9e:f6:9a:a9:0d:3f:ef:d2:a6:28:
25:70:53:2a:0f:8d:32:f6:60:8c:98:14:62:28:ec:af:0b:f7:
42:1b:87:1e:fc:b7:ec:59:bd:d4:58:45:c0:91:c8:51:f5:a4:
00:18:13:1c:f7:94:7e:2b:88:18:0f:68:1c:e4:6c:5e:43:32:
43:9c:73:0a:90:8c:be:35:86:a9:97:d8:11:ea:b3:c1:d6:1f:
6e:27:dd:4a:b3:62:6c:dc:db:cc:32:7a:8b:48:2e:2c:74:c0:
6d:51:ad:19:69:0d:47:d0:91:93:01:55:ae:4a:58:c2:12:af:
e4:2c:5f:b7:de:a1:c3:ce:4e:3e:0d:a1:fb:4b:d5:89:c0:9d:
62:b2:8a:c6:6f:0e:14:18:97:87:4f:e7:c8:c2:0d:d2:d2:b8:
6f:99:f8:72:0e:38:b7:4d:4b:30:94:74:e3:fa:a8:f8:7f:27:
b9:77:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:42 2025 by rpki-client