Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1E5A92D2E3EF11ED93D82717C4F9AE02.roa
File: 1E5A92D2E3EF11ED93D82717C4F9AE02.roa (raw, json)
Hash identifier: vyeFdzPfulK6MO6SqSGGYMyqiG7nt7WYLslxG24y99Q=
Subject key identifier: EE:B8:EF:61:D7:11:73:9A:A8:15:23:08:D0:4A:37:D5:34:0F:91:F3
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 086A
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1E5A92D2E3EF11ED93D82717C4F9AE02.roa
Signing time: Wed 26 Apr 2023 04:59:27 +0000
ROA not before: Wed 26 Apr 2023 04:59:27 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2154 (0x86a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Apr 26 04:59:27 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6448afae-7bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:1a:c0:0a:47:ca:1d:9d:b0:1d:e2:e5:41:
3f:18:f2:0e:5e:25:21:eb:28:c7:3b:02:d2:8b:38:
6d:75:15:bf:5b:f8:95:6b:e0:af:fd:c8:13:b2:7f:
54:e6:e6:00:58:55:da:7d:7d:fc:48:a0:f9:35:2b:
30:7d:d4:73:5b:b5:18:a8:3e:f6:48:f7:a2:bd:0c:
c2:a8:e0:db:de:0d:46:e3:25:ab:63:ac:5e:01:c2:
e1:f4:25:e7:a2:c0:5c:42:36:e1:47:09:be:67:6c:
8f:59:c6:ec:cf:b6:2d:c1:ce:6e:44:81:67:91:d4:
4b:bb:c7:50:35:22:be:c0:15:8a:e5:9a:a6:5e:f2:
6b:df:89:f6:20:c8:aa:68:4f:64:1b:5f:f9:f8:83:
b1:ab:47:09:67:36:c7:75:30:1c:e1:2e:98:57:da:
1a:97:ac:cf:0b:25:6a:52:4c:c8:c8:9a:fd:41:65:
30:6b:a7:8e:1a:e1:e6:06:a5:d2:fc:cf:a5:21:fc:
92:1e:a6:ef:18:c5:90:cc:61:63:5b:9e:b9:e6:18:
04:59:55:70:8d:62:49:f7:71:f1:79:5d:6c:58:71:
79:72:4a:9b:87:b2:19:d6:d1:a2:89:10:8f:13:3b:
b4:c9:16:0d:ff:93:b0:4b:a0:3e:f7:6d:aa:37:b4:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:EF:61:D7:11:73:9A:A8:15:23:08:D0:4A:37:D5:34:0F:91:F3
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1E5A92D2E3EF11ED93D82717C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.100.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:af:71:d5:7f:12:a9:1b:21:fb:1f:49:10:f6:03:f8:26:ed:
40:8b:70:bb:90:04:48:61:7b:a6:8f:43:f9:a0:a3:3d:97:87:
a0:a1:ed:c9:7b:06:89:2e:54:fe:66:92:b2:a3:45:aa:a3:6e:
a2:c5:0a:9b:a4:52:0b:38:f9:ed:8a:2c:f5:d4:a9:80:af:75:
32:cd:dc:cc:28:1d:10:03:27:9c:b0:a5:6d:f2:bd:77:a1:98:
12:5d:ef:d4:9d:59:86:d6:aa:23:a3:3a:21:a8:4a:13:35:e6:
cb:3f:11:d5:33:25:87:a4:58:9b:47:86:7b:b6:cf:77:bf:88:
ea:8c:98:d4:a8:88:25:58:50:10:3f:f1:e1:96:1b:dc:18:04:
dd:ab:00:52:91:de:aa:e6:b8:4a:5b:ab:05:20:1a:11:33:58:
d3:7c:23:f9:26:9d:41:f3:e7:05:bf:fe:33:50:b9:4b:d7:4a:
19:9d:fe:0f:52:23:87:8f:b7:48:15:98:dc:1a:de:c6:90:63:
ea:0c:a5:b7:c4:92:7c:90:de:bd:29:8f:ac:f4:d7:b7:7a:dd:
65:82:c6:6e:14:b5:91:69:4f:b5:8b:cc:90:c9:8a:96:ac:ac:
5e:4c:e3:d8:7c:cb:1b:2d:db:0c:bb:f3:41:1a:61:0a:a6:41:
9a:57:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:43 2025 by rpki-client