Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/21725474955711EC8E5B6A59C4F9AE02.roa
File: 21725474955711EC8E5B6A59C4F9AE02.roa (raw, json)
Hash identifier: S8fi7kof8r2ybX2lKlUnF5MP15B0g1Ev2ORP/3Geu+8=
Subject key identifier: F4:99:C6:73:13:05:1D:62:47:07:A4:5F:FF:FC:42:68:F3:6E:C2:C2
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 05AD
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/21725474955711EC8E5B6A59C4F9AE02.roa
Signing time: Thu 24 Feb 2022 09:50:00 +0000
ROA not before: Thu 24 Feb 2022 09:50:00 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 142617
IP address blocks: 139.190.0.0/19 maxlen: 24
139.190.224.0/21 maxlen: 24
139.190.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Feb 24 09:50:00 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=621754c8-9ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:ce:16:a2:eb:a6:eb:22:82:88:60:b5:a1:
82:f6:8b:b4:5f:59:9d:65:3e:d5:72:3f:b5:79:9c:
6e:a6:5f:d8:6a:49:76:df:e1:09:62:1e:3a:43:b6:
0f:e8:51:fc:c7:72:4a:e0:b9:76:25:e6:38:0c:99:
57:13:c0:86:54:9c:4a:0e:e0:6e:e0:0d:ff:a3:f5:
af:d0:68:d1:c4:93:98:c2:d9:50:1d:13:66:8c:fe:
af:c2:0a:f2:54:8c:f9:c6:57:75:f6:66:a6:20:ac:
e9:4b:70:9f:07:27:fc:a9:b5:c0:e6:78:93:91:7b:
0e:4e:7a:f9:70:3c:11:3c:d2:4b:7f:83:ff:e3:0d:
10:4c:7f:4b:96:83:69:c8:de:1f:96:18:6e:88:35:
bf:e4:bf:8d:d2:f3:c4:6e:3e:74:00:91:64:be:a1:
7d:8a:82:45:f8:70:07:93:7a:b5:13:80:8c:5f:0e:
00:eb:7e:56:1d:09:fb:4e:22:19:ab:7f:90:6d:56:
9c:cc:cf:1c:33:ce:d8:6d:48:16:af:ac:2d:9c:87:
c7:ae:05:c5:66:97:da:83:01:15:50:a2:ab:0d:19:
3f:93:5e:17:99:6e:18:18:62:be:0b:ef:7b:16:2e:
4c:65:65:be:ee:0c:25:74:ac:28:06:22:91:9b:e0:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:C6:73:13:05:1D:62:47:07:A4:5F:FF:FC:42:68:F3:6E:C2:C2
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/21725474955711EC8E5B6A59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/19
139.190.224.0-139.190.232.255
Signature Algorithm: sha256WithRSAEncryption
b8:a4:9b:06:53:b4:e4:00:23:5a:fc:87:98:3f:07:06:22:1e:
3b:4c:ad:77:e4:1c:8a:f7:7c:db:f4:23:d6:fd:f7:7c:e5:a2:
9a:1b:04:93:d5:17:fb:ad:12:d1:41:bd:2d:bf:1c:03:92:78:
37:8e:2f:0b:5c:31:89:9c:ee:0d:c7:7b:5d:92:f0:e7:7b:62:
68:59:87:76:66:bf:78:ee:36:a7:b5:dd:1f:b0:7c:cb:a3:77:
f4:41:3f:25:e9:7b:10:44:3f:bf:90:5d:ab:17:94:35:cd:8c:
a4:ed:8b:d3:37:29:da:b3:a0:84:93:0f:f7:a0:b9:e3:47:80:
d8:c4:56:c8:dc:38:52:81:48:75:f2:40:f6:8a:c9:78:b3:b7:
d1:b3:dc:62:cc:02:84:8c:f8:27:81:df:55:a0:29:69:9d:ca:
84:17:ed:47:8d:42:b9:eb:1b:65:7f:be:24:27:cb:81:d7:08:
91:d9:8d:ce:b3:e0:bf:49:41:1b:12:99:ed:3d:3b:b4:08:b1:
df:c4:a1:8e:35:42:dc:eb:7b:b8:f1:64:fe:87:69:53:19:c0:
75:13:f4:f3:cb:88:11:5c:5c:57:2a:cb:25:cc:47:3e:35:36:
d0:79:11:ce:b4:dc:de:aa:25:28:df:08:97:f0:d1:18:ed:51:
2a:4c:c1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:56 2025 by rpki-client