Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/22FE36A295EB11EC9715DA5BC4F9AE02.roa
File: 22FE36A295EB11EC9715DA5BC4F9AE02.roa (raw, json)
Hash identifier: 8CWGjnjUov2ybg32FeWCWvnbeqzNpHVoKUcOJMD4U6I=
Subject key identifier: 20:EC:A6:E9:12:BD:11:EC:96:E7:5D:6C:1D:D4:D9:60:EB:B8:AA:5A
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0686
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/22FE36A295EB11EC9715DA5BC4F9AE02.roa
Signing time: Wed 01 Jun 2022 11:27:01 +0000
ROA not before: Wed 01 Jun 2022 11:27:01 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 142617
IP address blocks: 139.190.0.0/21 maxlen: 21
139.190.8.0/21 maxlen: 21
139.190.16.0/21 maxlen: 21
139.190.24.0/21 maxlen: 21
139.190.224.0/21 maxlen: 24
139.190.232.0/24 maxlen: 24
139.190.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1670 (0x686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jun 1 11:27:01 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62974d04-752d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:31:34:73:da:3c:b2:2e:2a:48:a1:bd:ec:04:
8c:05:2b:16:47:ce:e2:d8:40:1e:45:d4:92:16:f6:
23:d7:d4:36:60:db:75:61:80:2a:0d:ec:47:a3:76:
a5:3c:72:a6:3c:34:d7:db:d0:9d:08:23:61:2c:e6:
40:b4:81:ee:be:a4:7c:33:40:8e:80:18:2c:79:aa:
31:8c:5d:c1:c1:49:61:86:09:df:92:55:5d:fa:ae:
15:08:2c:df:fb:92:a7:27:21:5c:8a:b5:e6:84:cd:
0b:95:4a:5d:64:c0:f2:87:6a:1d:30:85:d3:ed:91:
d4:bc:f5:e0:f0:b9:ba:31:c3:8f:ca:2f:a1:bb:7f:
fe:46:5d:93:99:46:c9:df:63:c1:2e:c1:c0:df:0d:
c5:a4:31:c5:b5:30:eb:a5:b2:66:3d:70:26:cb:c8:
6b:5c:d9:46:6f:66:0d:29:bc:25:a0:2b:70:87:ec:
2a:32:6b:7a:d2:c9:c5:6e:68:74:85:67:56:bf:17:
b9:40:f6:d0:ac:6b:1e:d5:7c:29:af:23:3f:3e:18:
64:3f:58:f1:66:52:d1:9a:24:5e:14:db:f1:ba:57:
b9:d4:2c:6b:29:d4:e4:3f:96:78:96:5f:d7:3d:56:
9f:f0:b7:fd:72:b4:14:e3:f8:9b:fe:5b:21:87:1f:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:A6:E9:12:BD:11:EC:96:E7:5D:6C:1D:D4:D9:60:EB:B8:AA:5A
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/22FE36A295EB11EC9715DA5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/19
139.190.224.0-139.190.233.255
Signature Algorithm: sha256WithRSAEncryption
03:ba:6b:a2:73:8d:8d:a6:0a:c3:98:59:85:b6:40:16:37:3b:
ab:79:cc:d7:f8:9b:58:6f:8a:f8:dc:f0:ff:57:ca:41:28:cc:
4b:ab:85:fb:00:6d:40:91:c7:9c:41:db:1c:b3:50:5e:8d:99:
38:4d:83:8a:ec:6c:0b:04:97:77:93:e7:65:12:a3:eb:7c:ac:
6f:57:cc:2d:c8:cc:95:f4:04:84:3d:d1:2c:47:8e:ac:e1:fd:
4e:69:62:bc:15:ab:b3:8a:91:fc:e6:46:66:09:93:14:64:fa:
b7:2e:de:5a:07:8b:5a:32:b2:00:82:bd:39:9a:74:bf:dc:90:
47:60:01:c4:33:6b:0a:5e:cc:22:68:90:3b:fc:f9:9a:4d:c3:
f7:61:2c:98:0a:c7:49:34:6d:7b:21:28:ed:aa:61:d9:0b:35:
7a:01:df:e7:56:13:98:e9:9f:46:1a:4b:3d:29:d8:e9:82:1b:
6a:f3:14:3c:d1:54:bf:68:5d:c5:ab:e1:a0:09:df:4a:c9:dc:
db:25:15:57:1f:5b:9a:77:25:6a:19:ca:79:7b:00:02:f4:8e:
9f:16:8e:93:ad:f1:84:f3:a5:50:fa:ac:8c:44:53:22:ab:f3:
45:45:3c:25:51:03:22:2d:31:fd:f0:89:ab:01:b1:fa:6a:a3:
53:9e:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:16 2025 by rpki-client