Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C4644AFE948D11EC97A27C47C4F9AE02.roa
File: C4644AFE948D11EC97A27C47C4F9AE02.roa (raw, json)
Hash identifier: udfNXUuCxdd5dMcnI4eOVd71iAsOvaDEk9NFmaQSG5w=
Subject key identifier: 3D:7B:83:5D:62:9D:9E:06:13:6A:1C:16:20:40:9A:7D:F9:3C:86:CE
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 05A2
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C4644AFE948D11EC97A27C47C4F9AE02.roa
Signing time: Wed 23 Feb 2022 09:48:35 +0000
ROA not before: Wed 23 Feb 2022 09:48:35 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 7018
IP address blocks: 139.190.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1442 (0x5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Feb 23 09:48:35 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=621602f3-d9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:b2:a3:21:21:7b:02:9f:74:98:b1:42:90:
92:38:66:6c:8c:46:d2:ad:c0:e5:6f:04:61:ad:4b:
8f:d0:bb:ce:3f:3d:87:b7:2b:68:6d:24:04:27:b2:
a0:5d:be:61:98:b0:6d:2e:a5:ec:d0:11:02:4b:41:
71:14:45:70:0c:ab:9c:85:fe:71:1c:eb:cc:c6:47:
b0:a9:d6:bc:88:1c:d2:54:75:b8:34:8f:b8:6c:67:
4e:ea:fc:ab:9d:2d:b1:89:9d:8f:a3:e7:7e:30:c9:
8d:60:d8:19:a0:32:b2:3f:5c:7d:b6:05:b2:42:e8:
eb:45:d7:68:ed:9c:8e:0d:c4:70:62:8b:70:38:81:
24:2d:34:c2:3a:f4:e7:90:62:d3:7a:75:cd:fb:82:
49:89:8f:34:f9:52:31:e1:69:2b:0e:9f:fd:24:10:
7d:02:85:a3:27:fe:83:98:32:db:aa:05:c9:4d:e6:
88:bc:89:6b:9f:62:47:46:e2:16:08:72:59:9e:24:
fe:75:0c:1a:d2:6e:dd:a5:19:b6:e8:2a:c8:7d:c5:
c2:29:8e:8e:84:24:c9:27:1e:8e:5d:d5:6a:4b:3d:
15:4d:51:06:bd:43:d1:47:49:1a:33:ce:60:70:74:
8b:d1:57:3e:c5:5a:bc:13:86:aa:03:b3:e9:50:a4:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7B:83:5D:62:9D:9E:06:13:6A:1C:16:20:40:9A:7D:F9:3C:86:CE
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C4644AFE948D11EC97A27C47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/19
Signature Algorithm: sha256WithRSAEncryption
c1:bb:66:f1:b1:f4:6f:8c:25:12:4d:23:a7:63:cc:35:25:e6:
96:76:dc:bd:60:5f:51:01:a6:c1:06:eb:77:fb:c4:88:c9:4d:
bd:57:c4:fd:4e:e9:d6:00:85:87:18:a5:a0:1f:74:c4:c7:f9:
3d:54:ee:2e:fe:aa:bc:34:5b:20:8e:57:f4:dc:4e:57:a7:37:
ec:ce:03:f3:d8:42:27:a2:bf:ed:a5:f7:63:3a:f7:a9:81:fa:
df:7a:cd:27:8c:d6:aa:24:23:03:c7:6e:55:24:37:eb:a7:22:
e2:40:2d:76:9a:90:ae:e1:fa:c3:5a:b0:55:16:c0:15:cf:eb:
9b:63:38:9f:e7:b6:6b:1d:08:78:dc:44:51:8c:1c:e2:a8:36:
f7:e6:8f:d8:be:d1:ae:04:08:61:4d:4e:54:a3:02:ba:f3:6f:
ec:76:fa:ef:0b:c3:06:2b:75:9c:ce:44:de:6b:45:1b:56:4d:
58:91:60:59:b5:e3:12:31:92:f6:4b:9c:ba:6e:4b:fc:8a:1e:
0f:89:4f:64:7b:7e:28:e9:39:59:f6:e8:27:fb:a8:c7:d2:05:
b7:f1:46:a9:ad:41:14:dc:df:f1:a7:52:eb:8e:b6:51:af:8a:
de:83:cb:6b:5b:84:bc:90:8e:ff:f5:f6:50:10:83:d8:f8:e7:
b2:67:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:41 2025 by rpki-client