Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/225FCCFE955711EC8E5B6A59C4F9AE02.roa
File: 225FCCFE955711EC8E5B6A59C4F9AE02.roa (raw, json)
Hash identifier: sCx+WSI7eouS3HJZlJ9obGn+M13BtclRnnnbtJQpSA4=
Subject key identifier: 18:F4:F4:C1:CE:A6:A0:95:80:3B:1E:96:42:0A:D2:C6:BF:AF:3C:19
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 05AE
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/225FCCFE955711EC8E5B6A59C4F9AE02.roa
Signing time: Thu 24 Feb 2022 09:50:01 +0000
ROA not before: Thu 24 Feb 2022 09:50:01 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 211936
IP address blocks: 139.190.0.0/19 maxlen: 24
139.190.224.0/21 maxlen: 24
139.190.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1454 (0x5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Feb 24 09:50:01 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=621754c9-6cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:b9:88:c0:08:eb:db:5b:f8:c6:3d:e9:33:
90:ca:00:a3:93:a1:e4:fb:8f:36:a6:fd:8b:86:45:
63:66:03:9c:ef:83:ad:3a:c5:fe:a7:1b:62:e8:11:
39:8d:26:a1:74:de:e9:4a:e0:33:c8:c4:d0:df:ab:
d7:65:d8:58:6d:76:a0:9e:ff:0f:9d:61:39:4a:2e:
93:72:6b:cc:47:7a:fa:4b:e8:35:6d:be:f1:83:e2:
1b:72:3a:09:46:d0:c8:6f:d8:11:8c:02:46:3c:91:
b4:2f:bf:7b:fc:4c:20:c8:df:b1:87:dd:9b:dd:48:
34:83:0b:bd:57:6f:1f:2d:fa:c1:91:94:79:2e:b0:
18:67:44:cb:3e:e5:8f:ba:df:d2:20:bb:66:d8:bd:
da:cc:74:20:f4:f7:4a:37:83:6d:72:da:0d:05:80:
c1:a9:ab:6d:b0:71:84:53:99:92:91:0a:5e:98:6d:
c7:e0:9f:e4:70:2e:3f:8a:ed:bd:bb:42:4f:c0:4c:
8c:6a:75:d3:d6:ae:e5:34:b2:75:6c:a4:83:27:00:
42:87:d3:54:92:96:0a:b8:97:8b:60:45:59:2a:85:
02:55:98:77:0b:fd:de:e9:1d:b8:6e:43:83:cb:a5:
e5:28:99:42:25:63:6b:71:15:ac:2c:43:6d:86:8f:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:F4:C1:CE:A6:A0:95:80:3B:1E:96:42:0A:D2:C6:BF:AF:3C:19
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/225FCCFE955711EC8E5B6A59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/19
139.190.224.0-139.190.232.255
Signature Algorithm: sha256WithRSAEncryption
37:b8:d7:a1:b4:36:2b:c1:71:e3:ca:c0:3b:4f:b4:f0:5b:85:
f1:1a:70:9c:71:64:fb:13:f3:c5:b8:1f:d1:e3:f2:65:7f:76:
de:5c:0b:b8:36:a8:ad:61:69:d6:b1:b8:32:ed:f0:f4:ea:47:
04:bc:2c:6b:65:1f:7b:21:10:ae:de:3e:65:9a:3f:c0:3e:9b:
39:69:1a:44:19:f0:5b:fa:bf:f5:c1:ad:0d:b0:dc:0d:af:e1:
c4:03:10:a9:7c:e2:c0:9c:37:71:a5:95:14:88:70:f0:b3:52:
46:df:7f:79:62:6e:d9:37:16:f1:5c:74:5d:3f:46:86:51:49:
99:58:59:03:17:9d:a5:1b:b8:da:df:84:9d:da:f1:57:c1:83:
6c:92:b6:6d:58:5a:ed:ea:89:92:f9:4b:1b:7d:f9:d1:e0:bc:
c2:d1:0e:ee:12:df:89:88:0a:08:0e:c4:28:4d:51:f2:de:df:
ab:dc:4c:78:58:e7:4d:a1:04:79:fc:30:0f:31:9a:20:7d:ce:
65:b8:35:c8:9f:b3:08:ea:7a:0f:f9:1a:cf:d3:43:09:22:b9:
08:52:f9:a7:70:c4:a8:70:02:c5:3b:c1:03:db:11:de:cc:6c:
f3:f2:cb:42:4d:e2:2e:51:d3:58:64:b3:8b:a7:e0:fb:e9:9e:
d6:05:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:15 2025 by rpki-client