Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/6C7AF8AC487811EDA48B7E5FC4F9AE02.roa
File: 6C7AF8AC487811EDA48B7E5FC4F9AE02.roa (raw, json)
Hash identifier: 4jyj87KWQjXnTAyqW4nxa7B6ahu2gJwiQj7sngNRji4=
Subject key identifier: 7F:3B:B1:96:27:E4:C3:CD:43:A5:E8:58:56:8E:B0:15:1F:2D:B0:FB
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 07BF
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/6C7AF8AC487811EDA48B7E5FC4F9AE02.roa
Signing time: Thu 13 Oct 2022 07:50:00 +0000
ROA not before: Thu 13 Oct 2022 07:50:00 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 54600
IP address blocks: 139.190.112.0/22 maxlen: 24
139.190.116.0/22 maxlen: 24
139.190.120.0/22 maxlen: 24
139.190.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1983 (0x7bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Oct 13 07:50:00 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6347c328-c5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:02:c5:11:ec:0d:4c:94:50:51:9d:f2:4c:c6:
56:11:a2:0d:5b:14:e3:87:8a:49:e4:5c:88:cd:87:
6a:d0:35:36:88:4c:34:e2:bf:b8:68:d2:f7:8f:c8:
2e:b2:f7:d0:2f:20:df:17:b4:fe:5b:d7:a9:8f:b6:
0e:4f:c5:8b:ff:f1:c5:9f:fc:03:55:55:15:19:2b:
f8:cd:97:a7:1a:b5:27:b6:49:9c:4f:62:2a:a4:b6:
14:9c:bb:10:cc:dc:cd:2d:e1:0d:44:bb:a2:aa:79:
6e:bf:91:1c:12:c8:14:cb:52:c3:96:cc:34:51:0e:
4e:9b:44:cd:40:78:45:ef:80:44:7f:f4:93:69:b9:
6b:0b:e7:9f:f5:e3:ea:e8:c6:b0:99:6f:7b:b6:f0:
c5:55:2f:42:6c:92:2a:a7:8d:90:ac:08:d4:fd:8e:
1a:55:d5:d6:bc:35:f7:a9:22:09:9f:0d:90:62:95:
c4:2d:64:c2:cf:53:b9:17:6e:c8:48:84:37:e7:49:
8c:3e:05:77:91:16:af:17:4e:5c:f0:6c:59:f1:b4:
13:ef:38:95:36:52:3f:74:b6:9d:c1:db:fc:91:e8:
64:55:41:38:55:38:90:32:fc:8f:f9:37:1c:7b:5f:
f7:8f:df:e1:9c:ec:98:63:dc:e1:08:84:62:14:16:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3B:B1:96:27:E4:C3:CD:43:A5:E8:58:56:8E:B0:15:1F:2D:B0:FB
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/6C7AF8AC487811EDA48B7E5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.112.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:5d:f1:33:b0:4d:46:d8:26:23:95:74:e5:ac:f5:fa:5f:86:
ee:24:4a:4e:1e:1b:5d:a1:a7:41:c2:bf:3c:7e:dc:86:a2:4f:
66:5b:18:18:66:94:d8:ef:d1:2e:51:50:c7:c0:11:e5:25:5c:
42:a0:54:e9:69:39:0a:3c:77:cd:43:e8:74:66:81:51:99:fc:
f4:9d:43:67:0b:f4:7f:1b:f1:c7:11:24:04:ff:2b:b1:85:71:
37:cc:e9:ba:df:e2:77:02:d7:46:52:ab:9f:34:48:c7:e2:07:
b5:30:2b:bb:89:c2:b0:f5:3a:c8:71:3d:af:46:93:a4:00:19:
98:f9:ff:a7:a8:f9:07:32:ed:19:a0:18:11:ee:72:e2:4f:b8:
e5:5b:51:ee:5a:bd:c3:17:5e:3c:c8:b0:f2:9e:54:86:0f:18:
b9:79:32:df:8e:b6:dd:ac:3e:46:f1:47:fa:a7:d9:b4:08:2f:
d7:13:35:fc:bf:e6:e2:ab:c1:51:d5:8b:ca:04:fa:d1:ff:45:
4b:54:db:a9:cf:88:e9:32:25:40:c5:90:50:88:9c:8f:85:e3:
6c:64:40:17:b2:20:5d:1c:b7:84:a5:3a:34:34:72:e5:c8:9c:
f5:38:4b:cc:b9:2d:c6:ab:65:f4:17:21:d3:16:0f:09:3a:9d:
9e:c4:f0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:10 2025 by rpki-client