Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/918809B81C9111EDB7CECA3FC4F9AE02.roa
File: 918809B81C9111EDB7CECA3FC4F9AE02.roa (raw, json)
Hash identifier: W9wz6zHVQfDeplDlsc6oxPW35ZnRkA34vILGcjg7R3o=
Subject key identifier: 57:5D:96:98:2E:E2:D9:CE:EC:16:F9:5B:E5:84:F9:52:BA:D1:1D:4B
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0742
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/918809B81C9111EDB7CECA3FC4F9AE02.roa
Signing time: Mon 15 Aug 2022 11:58:26 +0000
ROA not before: Mon 15 Aug 2022 11:58:26 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 139.190.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858 (0x742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Aug 15 11:58:26 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62fa34e2-e572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:f0:cc:3c:4d:0c:d8:88:45:06:93:16:d4:
2f:cf:5e:7e:2d:5a:3b:32:e1:f3:cc:9c:bb:57:e1:
e2:6f:f6:99:8a:e6:bc:54:0b:95:e6:17:4f:2f:92:
80:2e:6c:98:cc:49:a9:74:fb:49:59:3a:9f:d8:f0:
80:ad:75:0c:ca:8e:69:cb:b7:0d:35:41:29:c6:24:
a1:6b:60:4c:0f:2c:8b:58:cb:72:46:23:18:f5:06:
ef:84:3f:99:c0:cd:92:b9:32:ee:15:fd:63:f3:0f:
dd:9a:9d:2c:43:cb:2a:f8:7a:46:9d:1b:02:cb:dc:
e6:11:9e:7a:e0:cd:5c:8a:b9:77:20:97:d7:7f:b1:
79:ee:72:1d:e2:5e:ae:d9:fa:a1:f8:a9:12:08:ab:
bf:fb:c7:48:f4:85:04:80:74:89:36:6b:61:33:86:
51:89:5b:f7:ef:3d:3d:5c:67:68:08:72:c6:62:9f:
ea:fd:29:21:90:b3:07:fc:b5:56:4a:95:f1:b2:a9:
20:6f:6b:83:b7:b0:8b:02:a6:cc:eb:5a:bc:19:63:
50:df:39:ec:c1:89:c6:0f:73:5a:36:fe:1a:83:53:
36:4f:10:52:61:95:db:42:52:af:05:31:13:01:d5:
36:10:a5:a2:42:8a:24:cc:27:40:08:89:8a:bc:b4:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5D:96:98:2E:E2:D9:CE:EC:16:F9:5B:E5:84:F9:52:BA:D1:1D:4B
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/918809B81C9111EDB7CECA3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.234.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b5:12:13:4d:76:ee:a7:f0:79:5d:e6:5c:72:de:53:a0:db:
52:cc:fb:ef:a3:ff:99:3f:45:b7:51:a8:fa:e6:13:39:0b:9e:
e5:01:84:dc:b2:85:75:27:38:86:30:28:32:1d:0f:5e:b3:1b:
42:33:06:7a:63:ac:59:ec:55:f8:cf:37:82:ad:35:e5:ec:7f:
bc:7b:f1:e1:ee:0e:35:08:49:be:37:e7:10:08:47:8e:3a:1f:
9a:65:28:2e:c5:7d:3a:55:06:43:47:69:88:27:7c:1f:41:2e:
83:f1:4a:3e:b1:61:99:aa:bd:06:fd:aa:16:8f:af:f5:e2:24:
d6:47:4b:bd:0a:7d:11:76:8e:00:4f:36:06:a5:0d:4a:9c:2d:
fe:ef:9e:26:d0:80:62:70:0d:10:e8:6b:e8:33:3b:fb:80:e5:
c0:f5:c1:10:1d:7c:c9:6a:dc:f6:e2:50:cd:ba:fb:08:76:d2:
97:54:1a:45:da:8a:1a:dd:47:57:98:21:33:bf:af:18:64:bc:
00:ea:cd:62:40:20:56:c0:25:97:bf:0b:48:9e:5f:a3:47:b1:
5c:a4:43:f4:7f:e1:e0:d2:68:66:c0:82:b2:51:f6:5e:eb:08:
46:65:d0:80:bd:c5:4d:25:66:dd:0c:1a:d8:b9:77:56:40:94:
14:f4:13:58
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjIwODE1MTE1ODI2WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmZhMzRlMi1lNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBXwzDxNDNiIRQaTFtQvz15+LVo7MuHzzJy7V+Hib/aZiua8VAuV5hdPL5KA
LmyYzEmpdPtJWTqf2PCArXUMyo5py7cNNUEpxiSha2BMDyyLWMtyRiMY9QbvhD+Z
wM2SuTLuFf1j8w/dmp0sQ8sq+HpGnRsCy9zmEZ564M1cirl3IJfXf7F57nId4l6u
2fqh+KkSCKu/+8dI9IUEgHSJNmthM4ZRiVv37z09XGdoCHLGYp/q/SkhkLMH/LVW
SpXxsqkgb2uDt7CLAqbM61q8GWNQ3znswYnGD3NaNv4ag1M2TxBSYZXbQlKvBTET
AdU2EKWiQookzCdACImKvLSiIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFddlpgu
4tnO7Bb5W+WE+VK60R1LMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOTE4ODA5Qjgx
QzkxMTFFREI3Q0VDQTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACLvuowDQYJKoZIhvcNAQELBQADggEBACO1EhNNdu6n8Hld
5lxy3lOg21LM+++j/5k/RbdRqPrmEzkLnuUBhNyyhXUnOIYwKDIdD16zG0IzBnpj
rFnsVfjPN4KtNeXsf7x78eHuDjUISb435xAIR446H5plKC7FfTpVBkNHaYgnfB9B
LoPxSj6xYZmqvQb9qhaPr/XiJNZHS70KfRF2jgBPNgalDUqcLf7vnibQgGJwDRDo
a+gzO/uA5cD1wRAdfMlq3PbiUM26+wh20pdUGkXaihrdR1eYITO/rxhkvADqzWJA
IFbAJZe/C0ieX6NHsVykQ/R/4eDSaGbAgrJR9l7rCEZl0IC9xU0lZt0MGti5d1ZA
lBT0E1g=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:12 2025 by rpki-client