Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/219663F0962E11ECB4011066C4F9AE02.roa
File: 219663F0962E11ECB4011066C4F9AE02.roa (raw, json)
Hash identifier: OjItoxgJobSDs2nAFO6xmLcu8WaKZb7ITUrYdbcbXRw=
Subject key identifier: 62:BF:FE:57:C4:6C:75:FC:9B:FA:4E:68:AA:D4:22:20:99:04:C4:C7
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 068B
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/219663F0962E11ECB4011066C4F9AE02.roa
Signing time: Wed 01 Jun 2022 11:27:06 +0000
ROA not before: Wed 01 Jun 2022 11:27:06 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 4826
IP address blocks: 139.190.0.0/21 maxlen: 21
139.190.8.0/21 maxlen: 21
139.190.16.0/21 maxlen: 21
139.190.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jun 1 11:27:06 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62974d09-bd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:57:3d:57:9f:8b:05:94:a8:30:9f:b5:36:
19:89:f3:59:c5:54:fb:45:83:53:7c:07:fe:70:73:
c7:6a:38:86:17:41:f4:55:7a:8a:9f:64:08:5e:f9:
c6:ee:57:91:e9:9e:9a:42:9c:51:64:1a:9a:73:a3:
82:75:9a:49:9f:03:0f:2a:f8:6a:50:cd:84:b0:b0:
67:9c:63:24:f1:5f:c9:7d:98:55:ac:fe:c7:31:56:
32:82:68:4a:c0:6d:5f:ba:b6:ff:f7:88:2e:10:1a:
e0:18:fe:68:07:ca:31:c8:b8:d3:ee:1d:f7:5a:33:
8d:4f:27:80:dc:3a:05:c3:c4:5d:c2:b8:66:db:91:
7f:66:9f:31:09:26:c9:21:a3:fa:70:01:f3:47:dd:
1e:cb:dd:d0:9c:77:03:4d:27:12:b6:89:50:de:e7:
98:d5:d1:b0:41:a6:be:cc:7b:13:92:d5:c2:2e:1e:
5f:c6:9c:2d:6f:87:9b:fc:80:4d:b6:f7:32:a6:ba:
b4:89:7f:72:65:0e:fc:75:1a:20:73:03:f0:50:c1:
97:54:a1:2b:35:84:05:56:81:b2:bd:5d:1b:14:c6:
5a:05:4e:2f:df:cd:07:e3:db:e5:a0:77:c4:3f:0f:
93:9b:ce:06:32:2b:8c:5f:69:16:ee:4e:d6:20:af:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BF:FE:57:C4:6C:75:FC:9B:FA:4E:68:AA:D4:22:20:99:04:C4:C7
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/219663F0962E11ECB4011066C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:5b:51:7b:70:8e:ab:9c:65:d1:fa:69:f4:14:f9:f9:bd:a8:
85:94:de:c1:6a:ec:dd:73:b9:b1:39:f6:b3:07:83:de:ea:1b:
ab:db:a7:02:ad:82:da:38:30:e2:7f:88:9d:82:d1:9d:1c:72:
70:fc:95:8d:62:09:91:f0:15:c2:0c:79:b8:1f:14:b2:32:c8:
f2:07:a0:f3:c9:87:a3:85:fb:22:c4:1e:b7:b8:6e:32:7c:cc:
5e:5a:04:c4:c6:53:d0:8f:80:12:6d:75:89:c2:83:18:ac:36:
78:16:a9:13:5f:52:8a:14:d4:d6:e5:7b:bc:8d:73:57:22:19:
cf:51:d3:70:97:eb:be:63:5e:b1:c1:08:18:b0:f0:5c:c6:6a:
98:49:4d:26:57:87:75:bd:2c:16:72:51:34:b9:ed:c1:fb:de:
46:d7:c7:4d:f1:21:c1:0d:d2:bf:c9:52:5b:0a:a9:01:6b:0e:
2c:f0:ff:19:36:cd:95:3b:7e:e1:de:da:dc:29:79:d9:a3:ca:
20:2d:07:70:df:9b:cd:b8:82:74:11:6f:30:1d:64:37:d3:09:
dd:39:89:ac:fa:e6:37:1f:b7:3d:0b:6a:27:0d:7b:f6:49:95:
e6:1f:4d:4f:e8:c2:52:ec:49:29:cf:da:c3:c2:32:d4:91:ed:
85:b2:00:dc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjIwNjAxMTEyNzA2WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjk3NGQwOS1iZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA16hXPVefiwWUqDCftTYZifNZxVT7RYNTfAf+cHPHajiGF0H0VXqKn2QIXvnG
7leR6Z6aQpxRZBqac6OCdZpJnwMPKvhqUM2EsLBnnGMk8V/JfZhVrP7HMVYygmhK
wG1furb/94guEBrgGP5oB8oxyLjT7h33WjONTyeA3DoFw8Rdwrhm25F/Zp8xCSbJ
IaP6cAHzR90ey93QnHcDTScStolQ3ueY1dGwQaa+zHsTktXCLh5fxpwtb4eb/IBN
tvcyprq0iX9yZQ78dRogcwPwUMGXVKErNYQFVoGyvV0bFMZaBU4v380H49vloHfE
Pw+Tm84GMiuMX2kW7k7WIK+TyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGK//lfE
bHX8m/pOaKrUIiCZBMTHMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMjE5NjYzRjA5
NjJFMTFFQ0I0MDExMDY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAWLvgAwDQYJKoZIhvcNAQELBQADggEBACtbUXtwjqucZdH6
afQU+fm9qIWU3sFq7N1zubE59rMHg97qG6vbpwKtgto4MOJ/iJ2C0Z0ccnD8lY1i
CZHwFcIMebgfFLIyyPIHoPPJh6OF+yLEHre4bjJ8zF5aBMTGU9CPgBJtdYnCgxis
NngWqRNfUooU1Nble7yNc1ciGc9R03CX675jXrHBCBiw8FzGaphJTSZXh3W9LBZy
UTS57cH73kbXx03xIcEN0r/JUlsKqQFrDizw/xk2zZU7fuHe2twpedmjyiAtB3Df
m824gnQRbzAdZDfTCd05iaz65jcftz0LaicNe/ZJleYfTU/owlLsSSnP2sPCMtSR
7YWyANw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:16 2025 by rpki-client