Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1C6B093E92F611ECB6F3BC52C4F9AE02.roa
File: 1C6B093E92F611ECB6F3BC52C4F9AE02.roa (raw, json)
Hash identifier: /iiroCy//pgLrwGa9ADRVrDEHQeBL65u681moZXwEtg=
Subject key identifier: C6:C5:F4:77:F5:C0:31:52:F4:A5:B0:8F:9C:46:64:E8:75:C4:8D:9D
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 05A3
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1C6B093E92F611ECB6F3BC52C4F9AE02.roa
Signing time: Wed 23 Feb 2022 09:48:37 +0000
ROA not before: Wed 23 Feb 2022 09:48:37 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 142617
IP address blocks: 139.190.0.0/19 maxlen: 24
139.190.224.0/21 maxlen: 24
139.190.232.0/24 maxlen: 24
139.190.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1443 (0x5a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Feb 23 09:48:37 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=621602f4-2bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:6d:40:fc:f9:02:d6:41:d3:96:eb:e9:be:
09:e4:76:0a:53:19:9f:20:7a:6d:58:5f:f0:c5:46:
80:88:81:0a:28:73:b6:49:47:d6:f0:59:8b:bd:16:
21:11:4e:77:1e:a1:d0:78:84:8c:e5:90:53:79:76:
d1:38:12:d8:1e:53:79:30:7d:3f:28:73:9d:dc:25:
03:7d:58:15:0b:ef:12:df:90:e1:13:43:c1:29:1f:
43:9a:59:f3:e3:7b:ae:d4:f1:a3:c3:35:46:66:a4:
52:50:4a:5f:c1:ee:dd:ad:3d:35:be:07:f6:d2:01:
c0:76:83:23:8f:ad:ab:50:37:b2:33:e2:6f:06:ca:
ea:95:43:1f:7b:26:30:ca:55:b4:0a:34:9f:92:1c:
94:05:5e:2f:c6:39:cd:24:d0:6d:81:88:35:18:3a:
de:f1:f6:84:6b:f4:c3:46:d0:b0:3c:0b:32:78:e8:
1b:73:57:a8:a8:89:92:4b:c2:e4:81:8f:6b:f3:d1:
c2:b4:08:1e:94:6b:68:ac:7c:1f:85:e0:a1:0c:e6:
26:a2:d1:d6:e8:df:cc:8e:ca:fd:a3:d9:7d:7f:6c:
9f:9e:fd:f4:2b:e8:9f:ba:0d:5e:3b:d5:14:33:06:
ea:e4:a0:9d:34:42:4a:9b:4d:f8:c9:ee:31:00:e8:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C5:F4:77:F5:C0:31:52:F4:A5:B0:8F:9C:46:64:E8:75:C4:8D:9D
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1C6B093E92F611ECB6F3BC52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/19
139.190.224.0-139.190.233.255
Signature Algorithm: sha256WithRSAEncryption
a9:ce:34:6a:8c:6b:00:82:97:9d:a2:0a:e7:df:fe:1f:68:25:
0c:34:80:88:69:21:7e:94:25:b2:dc:14:74:4a:41:56:ee:ea:
3d:15:e3:8e:79:01:9f:7e:9a:0d:be:a4:0a:0e:f3:8a:f4:e8:
e7:61:8a:cf:2c:73:eb:2f:e6:39:0a:06:dd:47:19:e6:12:4c:
8f:73:08:9e:c9:57:8c:bc:1c:c4:cc:4c:6c:8d:e6:a1:7f:27:
8f:43:3a:51:d1:1f:04:98:e7:8c:e5:8e:d2:a2:bf:6b:8a:80:
a8:9b:5a:ea:d2:8f:bb:ff:e9:ed:f1:9f:2f:29:67:fe:4e:4c:
55:dd:de:c1:db:e6:7e:28:a6:78:51:7e:78:6d:a4:2f:5a:be:
29:10:48:2c:4f:18:45:f9:84:0a:13:57:b8:cd:d1:ff:70:23:
5b:0a:5f:ba:f9:eb:a7:77:8c:7a:fb:6e:a8:f8:1c:f7:86:e4:
f4:3d:77:f7:55:ee:6f:aa:19:d5:d5:d5:02:4f:d7:32:83:28:
74:05:f5:36:db:67:d5:65:09:bd:4b:d1:60:3a:31:9d:cf:2e:
f7:66:0c:a0:66:45:79:27:a7:01:6e:e2:1d:11:07:cb:1d:54:
e6:2f:60:86:fa:92:e4:52:98:6c:80:73:77:d7:2a:27:ef:a9:
1d:95:db:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:23 2025 by rpki-client