Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/179C3BA222A311EDA121367FC4F9AE02.roa
File: 179C3BA222A311EDA121367FC4F9AE02.roa (raw, json)
Hash identifier: hs3r44kbV+iC+x9vSO2sYM+PpY/knEGtUBttrtWM5wk=
Subject key identifier: 14:10:E4:B9:7F:78:88:CD:63:BF:B2:47:E5:BB:53:EA:17:20:7A:6B
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0755
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/179C3BA222A311EDA121367FC4F9AE02.roa
Signing time: Tue 23 Aug 2022 05:18:59 +0000
ROA not before: Tue 23 Aug 2022 05:18:59 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 139.190.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877 (0x755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Aug 23 05:18:59 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63046343-1ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a9:66:73:a6:d7:21:79:42:9e:14:ba:96:5b:
22:f7:7a:c5:e5:35:7c:f1:06:25:59:87:c2:77:35:
66:02:5a:34:2a:f5:be:87:92:6b:ce:2b:b3:93:ce:
77:3a:d3:60:33:a1:e5:ed:05:21:09:15:6d:92:9f:
0a:82:9e:9c:3a:fb:d3:45:bd:3f:30:84:5f:75:b7:
6e:cc:1c:4f:60:06:76:3f:55:70:55:46:6f:18:36:
6a:c0:cf:e3:63:52:a4:fb:04:b9:70:d7:48:c0:51:
bc:eb:d0:36:8b:d9:d0:89:9a:b1:8d:65:e8:29:e8:
6b:36:38:56:89:69:3c:d8:a1:1f:df:b8:e3:3b:51:
1a:30:79:88:0b:01:f8:e1:26:4f:e6:a0:35:7a:4c:
be:45:9a:cc:24:d7:7f:52:8b:1f:12:8a:a8:c2:66:
37:aa:d7:8e:f3:c5:f3:75:cf:55:54:9e:18:af:b4:
dd:3d:e8:35:9c:af:21:fa:81:67:20:fe:7c:40:ef:
23:e1:03:2a:94:da:10:04:ab:87:49:b9:7a:17:ba:
e6:b1:26:bd:b5:ee:8b:1d:2e:4c:87:98:30:2d:16:
77:8b:db:33:50:c6:d8:a3:22:ae:0a:26:80:c1:70:
d3:47:6d:fb:67:d2:c1:bd:33:24:60:93:b0:ba:d7:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:10:E4:B9:7F:78:88:CD:63:BF:B2:47:E5:BB:53:EA:17:20:7A:6B
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/179C3BA222A311EDA121367FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.234.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:11:85:d3:12:9c:d3:78:d4:12:a9:4b:5f:77:73:2b:ea:8e:
4e:aa:1e:17:af:e8:23:a3:d8:7b:4e:c8:f7:ff:e5:63:66:88:
82:8d:77:73:37:69:14:ef:a0:a8:29:5d:c3:0e:e4:6c:04:9d:
6e:11:f1:68:90:30:67:a2:3f:74:18:8e:97:dd:bf:dd:1a:37:
8c:56:e8:53:07:c2:4d:e2:5d:f5:5e:57:28:53:0d:6a:da:b6:
6c:b2:7c:56:ed:c9:be:00:13:79:c2:c4:ae:f5:db:29:79:fa:
c6:35:02:f0:27:7d:e7:e5:8f:5a:37:ac:9b:8c:8e:c1:71:be:
97:97:e8:44:f4:10:f1:9f:f4:f5:fb:df:ab:14:20:47:a0:39:
5b:d8:54:ef:9d:e7:7e:15:60:5e:a9:b2:fb:25:06:2d:00:1d:
fc:03:6a:b4:a1:91:c1:62:82:7a:2d:71:eb:05:5f:22:0f:c7:
51:c4:0f:bc:89:18:18:e8:75:cd:56:56:29:d3:ba:69:68:fd:
78:6d:91:80:18:b2:7a:3e:1e:e6:eb:2c:e8:4f:11:d5:27:9d:
b9:7b:94:9e:fb:fa:b9:ae:b4:89:97:a3:b3:b1:6a:45:e4:77:
59:9b:19:02:08:a4:d0:7d:0a:25:da:b2:7d:57:16:ba:21:f9:
ca:50:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:55 2025 by rpki-client