Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/993BD7209E6811EE947FEF0DC4F9AE02.roa
File: 993BD7209E6811EE947FEF0DC4F9AE02.roa (raw, json)
Hash identifier: HfAO6w4ZrmA9L+QkjUaAnDuGRZE+9f93/+65SOwaVSI=
Subject key identifier: 55:59:E8:78:AC:0B:B0:F5:22:97:F2:9A:F3:4A:C0:4D:0C:F2:CE:E4
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0968
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/993BD7209E6811EE947FEF0DC4F9AE02.roa
Signing time: Wed 20 Dec 2023 13:02:53 +0000
ROA not before: Wed 20 Dec 2023 13:02:53 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 139.190.4.0/22 maxlen: 24
139.190.20.0/22 maxlen: 24
139.190.28.0/22 maxlen: 24
139.190.48.0/22 maxlen: 24
139.190.56.0/22 maxlen: 24
139.190.96.0/22 maxlen: 24
139.190.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408 (0x968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Dec 20 13:02:53 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6582e5fc-2170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c8:3a:5f:40:41:19:c8:33:ce:48:fe:ea:b1:
7b:84:87:04:6d:6e:6a:b1:2d:32:86:87:27:ca:0d:
68:c4:87:e1:c1:cd:dc:6c:4e:e8:dd:c6:9e:2f:05:
84:d9:b3:b9:69:b5:85:1b:95:41:d3:04:91:1d:0f:
53:f7:36:8a:d5:1d:69:00:8e:28:59:00:a9:74:e3:
66:8e:eb:61:09:17:02:21:09:d0:3e:2a:2d:fe:09:
b7:e4:d4:d9:93:76:c5:b3:2b:14:f6:bf:d1:49:d8:
5e:64:88:35:fa:36:34:dd:4f:58:51:a5:ed:62:3d:
fe:65:59:56:69:eb:8f:01:87:94:8e:69:e7:be:e9:
05:14:eb:86:8e:fd:18:48:85:f8:02:74:d5:7c:97:
5e:38:88:0a:ee:b9:97:9a:62:b7:26:6b:cc:a5:08:
86:eb:4d:73:0f:af:4f:c0:68:2d:7c:8d:90:1c:3a:
60:a9:70:8e:0e:79:ab:60:32:a8:77:12:15:d2:6e:
d0:6e:a6:7f:ae:cd:17:db:8e:72:77:35:fb:65:f0:
da:91:56:c3:22:5f:5e:b4:77:8e:25:73:31:8f:28:
50:65:5e:84:ef:21:9c:d1:ab:59:90:63:cb:1c:0b:
d4:12:82:21:f5:e4:be:97:5f:34:7f:b4:bd:52:82:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:59:E8:78:AC:0B:B0:F5:22:97:F2:9A:F3:4A:C0:4D:0C:F2:CE:E4
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/993BD7209E6811EE947FEF0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.4.0/22
139.190.20.0/22
139.190.28.0/22
139.190.48.0/22
139.190.56.0/22
139.190.96.0/22
139.190.116.0/22
Signature Algorithm: sha256WithRSAEncryption
02:15:39:b0:39:cc:25:68:2d:7e:fd:3e:cb:f8:6a:3f:ce:ae:
4c:ff:4d:2f:05:75:54:c2:a4:ae:de:93:6f:5b:4a:6c:eb:1d:
d9:16:b9:07:66:ba:54:af:29:5b:fb:5a:19:7e:fc:fe:7d:89:
e3:95:90:c5:bc:2f:e9:97:6e:1b:af:6e:f9:2e:28:6c:e4:aa:
28:59:52:03:40:34:d3:1e:3f:75:c9:e6:db:be:5f:8b:6c:2f:
22:62:06:60:70:96:51:66:d4:f6:59:0b:bf:8f:f8:c1:fc:1b:
40:d2:c3:2b:2d:f8:f4:b6:ee:47:08:f2:53:76:0c:58:ec:f3:
93:40:9d:92:a1:72:68:e0:b5:1a:94:a4:89:01:2b:43:e2:2c:
96:67:7c:64:76:ff:60:bf:dd:a4:90:03:90:7a:6e:d5:22:45:
68:c8:09:07:bf:34:4e:ed:2e:b2:46:e9:b1:d8:fe:e3:66:e4:
d0:cf:7f:e0:83:e3:18:20:17:9e:35:b2:56:e7:5e:fd:e2:a6:
2f:8e:59:f5:8d:66:92:79:90:2e:32:f3:5e:1a:fd:71:5b:c7:
b1:13:e0:8d:32:ea:c1:4d:25:dc:5e:9f:83:ec:7d:0e:7f:57:
32:d7:69:e6:2e:f5:9e:74:c1:16:33:75:23:09:29:bf:63:1e:
12:cc:2f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:58 2025 by rpki-client