Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/11E2CB180E4411ED9C0F5B45C4F9AE02.roa
File: 11E2CB180E4411ED9C0F5B45C4F9AE02.roa (raw, json)
Hash identifier: 3IeZi+Gp3wG5lYztQ9eR5RQtn8IttC7dxTbAjWHHPTU=
Subject key identifier: 39:B4:58:1B:AA:1B:6C:90:28:18:7C:27:EB:6F:CA:AD:B4:A6:31:EC
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0713
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/11E2CB180E4411ED9C0F5B45C4F9AE02.roa
Signing time: Thu 28 Jul 2022 07:08:24 +0000
ROA not before: Thu 28 Jul 2022 07:08:24 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 139.190.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1811 (0x713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jul 28 07:08:24 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62e235e8-87d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:63:ea:26:c2:c6:00:fc:c4:87:b5:21:60:
64:64:3f:6f:6d:5c:a2:ce:39:4f:11:29:71:0c:09:
d3:4d:0b:f5:91:1f:d4:b9:c3:71:78:bf:b5:97:5f:
fa:9e:ce:33:91:c8:b4:12:7b:5e:14:24:3f:16:52:
a5:1f:34:2e:6e:eb:39:3d:62:5d:81:35:cb:1c:73:
b8:2d:66:3b:85:86:00:da:ba:dd:05:1d:50:1c:58:
89:94:34:af:1b:ad:c8:f3:55:93:cf:d6:8a:6e:2e:
cc:23:ff:c8:b8:d7:9b:f3:fb:76:7c:0d:87:4b:23:
a8:1b:be:94:4b:fa:74:41:83:37:7a:eb:76:37:b3:
7f:07:12:b5:8b:f8:dd:b1:86:9a:18:3c:7c:e7:e3:
d8:31:4e:24:ed:80:1f:e8:f5:e4:95:52:a8:c5:80:
aa:9f:e9:f7:ab:9b:38:27:67:93:ee:cc:dc:b7:f2:
c9:0c:7e:c5:88:5e:2e:ec:f2:ca:81:7b:64:ff:b2:
9e:54:94:9c:7e:e7:4b:bf:d9:66:6f:fc:55:95:6b:
f0:0c:bf:d0:26:07:ef:e2:df:2b:10:7c:92:66:f5:
e8:f1:3c:90:c6:bb:13:ea:da:ba:1d:14:db:0c:05:
d4:9a:e8:81:cd:08:fd:72:1a:ff:ed:31:6d:ce:f5:
58:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B4:58:1B:AA:1B:6C:90:28:18:7C:27:EB:6F:CA:AD:B4:A6:31:EC
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/11E2CB180E4411ED9C0F5B45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.234.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:30:28:d3:28:41:57:57:9a:67:61:be:a9:9e:1c:fc:ca:f3:
a9:47:85:13:9a:ff:e2:31:78:ee:fa:61:64:52:17:20:63:11:
b4:d8:33:8d:2d:2b:81:dd:44:25:f3:88:0b:f4:ab:9b:06:ed:
23:e3:e6:14:2a:72:af:d8:56:cd:9b:22:70:05:ab:d1:2c:89:
58:45:ad:91:2b:f4:b7:4a:8e:a2:e6:79:dc:25:0d:9a:85:98:
07:b4:25:10:05:ac:eb:af:a5:67:b4:b7:9f:75:54:84:24:e2:
6f:2b:38:e1:6c:0c:72:02:53:63:a6:1f:94:b6:1a:66:c3:f5:
64:26:6e:35:b5:b8:28:b1:52:41:9c:9e:78:d3:ba:a7:d8:3d:
a1:36:e8:3d:4f:e2:4c:38:08:7f:a6:3c:3e:f1:cf:0d:2a:b4:
24:0d:69:f3:38:d2:04:d3:37:ae:6d:0f:bc:0a:7f:22:64:16:
af:79:0d:08:bc:15:9f:fb:57:ba:60:d4:69:cd:62:e9:36:84:
ba:a8:d4:f2:2c:48:13:d1:b0:35:8d:74:a7:9f:02:15:8f:8a:
f6:11:a9:8a:49:05:f7:90:b7:dc:69:9b:45:1d:f4:64:c2:ef:
11:a4:a6:97:b5:3b:75:1a:e6:f2:25:60:39:62:16:ed:5b:bb:
0d:a5:fe:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:47:16 2025 by rpki-client