Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7A728220043111EEA1E46862C4F9AE02.roa
File: 7A728220043111EEA1E46862C4F9AE02.roa (raw, json)
Hash identifier: JEHiTGOf5jA+y/aYO9G+cu/XSHzAtjEz/JM+IJZ7j8I=
Subject key identifier: CF:EE:44:C9:C1:A0:AC:1D:B0:1C:3F:7E:14:72:6A:B6:A8:6E:DE:A1
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 08BD
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7A728220043111EEA1E46862C4F9AE02.roa
Signing time: Thu 13 Jul 2023 04:11:33 +0000
ROA not before: Thu 13 Jul 2023 04:11:33 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 139.190.100.0/22 maxlen: 24
139.190.104.0/22 maxlen: 24
139.190.120.0/22 maxlen: 24
139.190.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jul 13 04:11:33 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64af7975-612f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:c7:e5:69:d6:3b:b7:74:15:a2:88:25:a0:
b1:3c:2b:b0:cc:2d:e3:d0:09:f8:81:40:bf:8d:10:
4d:7b:39:4a:5a:37:bd:be:66:ef:07:ac:d0:6b:72:
a7:50:e8:59:b3:38:0a:44:be:b8:b8:4f:4e:aa:b6:
bb:a9:34:4a:4d:0e:18:fe:ae:d5:f4:21:13:8b:fc:
b2:fd:ac:fc:9a:8a:c5:08:f9:c1:ec:7a:75:a2:38:
91:6a:e1:1d:51:5e:9d:42:39:e0:77:45:98:6e:39:
83:23:cc:a2:4f:78:4b:93:99:82:73:bb:81:ea:5e:
d9:63:2e:a4:1e:a0:f1:e8:e0:47:b0:8e:60:77:9b:
3e:c2:65:5f:ae:ed:ab:c9:a6:30:fd:e5:85:9d:6a:
87:0d:55:f6:a4:28:46:c5:67:51:d1:27:6e:b4:9a:
11:b5:a3:0d:f0:42:5e:2a:4d:33:74:06:dd:c3:0f:
de:97:99:ff:5a:25:fc:b8:28:4a:f7:98:f7:ad:5b:
8b:ec:25:6d:c0:5c:15:20:38:d1:98:9b:e0:ab:f3:
a3:f5:ff:fd:d9:11:4f:7d:2f:33:2d:73:92:0f:52:
3c:23:1e:7d:e9:cd:ef:74:99:8f:3f:b4:cf:12:33:
aa:99:da:bf:fd:ee:f7:16:e8:ae:96:99:3e:f9:e1:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:44:C9:C1:A0:AC:1D:B0:1C:3F:7E:14:72:6A:B6:A8:6E:DE:A1
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7A728220043111EEA1E46862C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.100.0-139.190.107.255
139.190.120.0/22
139.190.234.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:10:29:fb:0f:88:18:2f:e8:2a:d9:59:03:e9:33:b6:65:2f:
8e:c6:bd:92:51:6a:c6:25:84:bf:a6:4e:23:0e:d6:5f:03:b6:
b2:61:e8:69:5e:ea:e1:5c:86:91:e7:a6:4c:d1:19:ca:34:15:
8c:f4:c4:fa:eb:bb:5b:f0:a5:51:06:78:0d:31:c4:06:43:69:
64:52:80:b7:f4:4d:a8:8a:f4:50:06:2a:2a:47:30:fc:ca:7c:
64:cd:ec:a0:d5:14:f3:72:57:03:87:cd:ff:d4:0e:0c:5c:2f:
a2:93:f1:5c:10:b2:04:c8:90:72:0f:52:6e:4f:a6:4d:ff:9c:
fc:1b:b8:b8:f8:46:4d:3a:00:15:cf:b7:df:1a:9a:df:e3:50:
4d:b2:78:a6:46:b4:f5:a2:24:0f:7e:84:7b:0e:a0:c1:b9:ee:
f6:2c:e9:b8:d3:62:cd:9d:a1:48:da:36:72:5b:96:bf:c9:88:
c0:ad:a6:ed:be:a1:fc:a1:36:41:33:e7:e6:07:ee:ba:9a:f2:
91:57:10:f2:24:bb:e9:ce:26:85:f7:15:b5:7f:74:65:88:8e:
98:2c:0a:91:d3:27:cb:39:0b:59:bf:c0:d5:00:7e:e3:2d:09:
9c:68:43:22:4c:b5:f6:c7:66:c2:c9:67:be:b8:01:43:15:c6:
11:45:f7:b0
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjMwNzEzMDQxMTMzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGFmNzk3NS02MTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAot3H5WnWO7d0FaKIJaCxPCuwzC3j0An4gUC/jRBNezlKWje9vmbvB6zQa3Kn
UOhZszgKRL64uE9Oqra7qTRKTQ4Y/q7V9CETi/yy/az8morFCPnB7Hp1ojiRauEd
UV6dQjngd0WYbjmDI8yiT3hLk5mCc7uB6l7ZYy6kHqDx6OBHsI5gd5s+wmVfru2r
yaYw/eWFnWqHDVX2pChGxWdR0SdutJoRtaMN8EJeKk0zdAbdww/el5n/WiX8uChK
95j3rVuL7CVtwFwVIDjRmJvgq/Oj9f/92RFPfS8zLXOSD1I8Ix596c3vdJmPP7TP
EjOqmdq//e73Fuiulpk++eFRVQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFM/uRMnB
oKwdsBw/fhRyaraobt6hMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvN0E3MjgyMjAw
NDMxMTFFRUExRTQ2ODYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBowDAMEAou+ZAMEAou+aAMEAou+eAMEAIu+6jANBgkqhkiG9w0B
AQsFAAOCAQEADhAp+w+IGC/oKtlZA+kztmUvjsa9klFqxiWEv6ZOIw7WXwO2smHo
aV7q4VyGkeemTNEZyjQVjPTE+uu7W/ClUQZ4DTHEBkNpZFKAt/RNqIr0UAYqKkcw
/Mp8ZM3soNUU83JXA4fN/9QODFwvopPxXBCyBMiQcg9Sbk+mTf+c/Bu4uPhGTToA
Fc+33xqa3+NQTbJ4pka09aIkD36Eew6gwbnu9izpuNNizZ2hSNo2cluWv8mIwK2m
7b6h/KE2QTPn5gfuuprykVcQ8iS76c4mhfcVtX90ZYiOmCwKkdMnyzkLWb/A1QB+
4y0JnGhDIky19sdmwslnvrgBQxXGEUX3sA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:11 2025 by rpki-client