Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4D25F822D0C911EAA75CB975C4F9AE02.roa
File: 4D25F822D0C911EAA75CB975C4F9AE02.roa (raw, json)
Hash identifier: S5qt0+s7v/c3Ky2tEqNb26R/QdMIlk+/dme3JvjIHA4=
Subject key identifier: 7B:5C:34:EE:C9:CB:68:38:1C:32:79:BC:C3:3B:11:A2:49:E4:7A:69
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 088F
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4D25F822D0C911EAA75CB975C4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:06 +0000
ROA not before: Wed 24 May 2023 23:25:06 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 55453
IP address blocks: 139.190.236.0/24 maxlen: 24
139.190.237.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: May 24 23:25:06 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9cd1-fb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:5f:81:08:dd:8a:7d:6e:e6:34:28:97:72:
4e:5b:56:ac:7a:67:39:66:bf:0a:c6:38:98:cc:04:
eb:20:3e:60:f3:c5:4c:42:93:f9:ca:a4:3a:1b:cf:
87:df:af:dd:48:74:e5:7d:41:2e:91:a4:19:c8:44:
f6:6c:8e:ed:cc:b7:34:41:0c:c9:bb:5a:37:78:07:
34:49:83:5e:69:d3:bb:6b:52:fd:ee:a7:0a:56:6d:
b8:6a:3a:29:81:99:31:46:9d:40:b1:cc:fa:f9:d1:
a8:35:2f:83:a7:42:90:c4:4a:4e:56:04:53:e0:65:
6d:bc:9c:6a:81:20:1f:03:93:04:ed:ba:7e:82:9b:
96:d3:ff:97:36:34:da:7e:12:09:99:c1:a9:db:71:
f3:e0:e9:4e:06:69:57:17:27:24:58:aa:4b:d3:ad:
57:4f:5b:a1:19:cf:04:2b:15:16:7c:99:d7:fa:32:
6d:2a:85:80:4c:3b:08:7e:46:6b:07:cc:48:9e:05:
60:e0:f0:f7:aa:f0:cc:99:f7:73:e4:6f:d2:35:00:
ff:35:49:9f:6d:fe:6b:4d:ba:67:b0:2e:91:c2:4d:
ec:54:67:5a:21:ef:53:88:0b:d6:06:c3:de:ae:e7:
6e:b8:e9:83:93:1e:46:c7:32:7a:1c:a7:f9:cd:b9:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5C:34:EE:C9:CB:68:38:1C:32:79:BC:C3:3B:11:A2:49:E4:7A:69
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4D25F822D0C911EAA75CB975C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.236.0/22
Signature Algorithm: sha256WithRSAEncryption
10:8b:d2:42:a3:2c:c2:3d:50:6c:ae:80:39:f9:a1:f1:8a:53:
85:a9:8f:03:d3:9f:00:ce:71:5d:d7:3d:91:bc:26:08:3e:76:
5f:e9:f4:86:60:c9:8f:7f:42:2a:9f:d0:87:66:69:8b:88:2a:
db:90:d2:bd:a8:a7:0b:1c:57:34:59:cd:4c:70:11:50:13:65:
0c:ac:5d:0f:fb:68:cd:9c:ef:17:df:ff:8b:28:e8:58:c0:3e:
29:ea:53:03:b5:10:c3:46:e1:da:12:1f:07:7c:ad:89:f4:2a:
ee:ad:cc:65:0b:a7:40:77:1c:e1:8a:a8:c9:31:52:0c:da:1a:
5d:0c:87:68:a2:f6:2b:04:34:9f:9d:82:c8:bd:83:91:37:f5:
af:6e:f5:7b:0b:bb:3b:e4:3c:17:f0:30:9d:09:99:cc:39:3c:
13:69:62:00:92:4b:cb:b0:fd:62:01:3e:6f:09:e0:cc:a9:f8:
8b:37:6f:b5:87:8e:16:28:c5:e0:2c:96:ba:2b:6b:b3:c3:71:
52:bd:b9:c1:1d:4d:65:a9:cc:05:d4:4a:cc:ab:9d:2a:97:97:
5f:c9:f0:e4:e7:d7:82:aa:24:75:d3:67:2b:2f:cb:f0:24:8b:
b7:09:5f:9f:38:ae:d0:e6:41:e4:3d:ed:fc:b4:00:e7:db:f8:
eb:2d:d0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:27 2025 by rpki-client