Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C52B78AC03BE11EFBA0A7F54C4F9AE02.roa
File: C52B78AC03BE11EFBA0A7F54C4F9AE02.roa (raw, json)
Hash identifier: qcd6Y4H4UttbBehexbLoJYgH0ip8McNf660+5zgomL8=
Subject key identifier: 22:F9:64:F9:9E:34:B3:0B:36:6D:4A:AC:97:95:D5:DC:4F:00:FF:30
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0A70
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C52B78AC03BE11EFBA0A7F54C4F9AE02.roa
Signing time: Fri 03 May 2024 09:37:02 +0000
ROA not before: Fri 03 May 2024 09:37:02 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.0.0/22 maxlen: 24
139.190.8.0/22 maxlen: 24
139.190.12.0/22 maxlen: 24
139.190.16.0/22 maxlen: 24
139.190.20.0/22 maxlen: 24
139.190.24.0/22 maxlen: 24
139.190.28.0/22 maxlen: 24
139.190.44.0/22 maxlen: 24
139.190.52.0/22 maxlen: 24
139.190.56.0/22 maxlen: 24
139.190.100.0/22 maxlen: 24
139.190.112.0/22 maxlen: 24
139.190.116.0/22 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2672 (0xa70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: May 3 09:37:02 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6634b03d-348a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:12:69:78:b5:ee:c5:39:84:74:f4:1a:f0:
3c:6a:8f:e0:7b:e3:19:01:0a:f8:4f:d2:a8:43:17:
37:2b:9a:51:c7:57:3d:b8:a3:ab:3e:8a:fa:fb:97:
8e:12:c5:98:cc:6f:53:56:8a:66:31:e2:72:6e:e1:
7c:1b:b0:96:9e:73:c5:d8:76:00:0e:1b:5e:a6:b9:
b9:07:71:9f:1d:94:c7:5a:30:9a:78:69:31:a4:8f:
5e:78:8d:7b:07:cd:0f:d0:d3:c2:8a:33:88:a4:50:
61:9d:41:7e:a6:0c:56:97:bd:5e:5b:13:6c:60:6f:
37:97:e9:57:4b:dc:13:03:64:56:a7:0a:6d:d2:69:
7d:72:17:2b:f4:d7:7b:c4:9e:64:0e:e9:67:79:59:
bd:37:12:c3:c9:a3:89:32:66:36:ca:e2:c8:8a:cd:
d2:e7:37:36:c9:12:75:e8:13:af:75:13:d6:e2:94:
43:86:b0:35:95:b7:b2:97:16:21:a9:14:78:5e:2f:
46:c9:de:92:65:f2:0a:9f:d3:72:6d:12:5b:be:39:
cc:28:38:b6:c7:55:c7:8d:bd:37:73:0a:3d:1a:69:
2f:a7:20:5a:0b:5f:e3:88:86:c1:3b:a7:21:21:5f:
c6:35:08:5e:93:4f:5f:ec:5b:bb:ad:3c:ac:07:e6:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F9:64:F9:9E:34:B3:0B:36:6D:4A:AC:97:95:D5:DC:4F:00:FF:30
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C52B78AC03BE11EFBA0A7F54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/22
139.190.8.0-139.190.31.255
139.190.44.0/22
139.190.52.0-139.190.59.255
139.190.100.0/22
139.190.112.0/21
139.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:31:5f:7a:ab:aa:c1:10:89:74:f7:2f:08:88:15:dc:b4:af:
df:ef:ff:f6:fc:97:7e:cc:ee:40:7f:e3:31:26:30:24:82:9c:
ee:da:78:b8:7a:4b:fd:19:e1:24:9a:ce:b0:5c:53:41:73:27:
0c:be:dd:b2:9a:78:9a:b6:66:7c:c1:36:7e:84:01:2e:35:c2:
92:9c:c6:02:57:4f:f2:ec:fb:e0:9f:f9:67:0a:77:a8:68:05:
06:55:24:0f:a2:de:58:03:86:cc:47:24:46:03:ad:0d:37:9f:
51:9d:24:8e:8b:ff:f8:cf:69:1a:fd:cc:00:f6:14:e8:14:15:
b9:10:9e:c2:f2:aa:47:24:02:47:52:5d:12:38:fb:38:1b:e7:
42:5c:d5:e0:58:d8:75:44:7c:58:17:29:ce:96:88:cf:79:de:
39:59:69:95:f3:9b:a0:fb:59:e7:97:ad:7e:58:97:96:01:c1:
ff:50:dd:b4:eb:fe:ea:e0:7d:cb:b6:6a:e9:5b:ec:d1:fa:13:
17:f9:c7:86:62:41:47:bb:6b:29:58:83:1a:c9:42:80:bd:af:
02:30:94:57:14:57:b1:ba:5f:73:b3:cf:e6:c4:62:d9:5b:fa:
90:da:d6:3b:1c:55:36:18:e4:e7:3e:e8:1d:13:77:d3:f7:d6:
03:ea:6d:6d
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgICCnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjQwNTAzMDkzNzAyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM0YjAzZC0zNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttQSaXi17sU5hHT0GvA8ao/ge+MZAQr4T9KoQxc3K5pRx1c9uKOrPor6+5eO
EsWYzG9TVopmMeJybuF8G7CWnnPF2HYADhteprm5B3GfHZTHWjCaeGkxpI9eeI17
B80P0NPCijOIpFBhnUF+pgxWl71eWxNsYG83l+lXS9wTA2RWpwpt0ml9chcr9Nd7
xJ5kDulneVm9NxLDyaOJMmY2yuLIis3S5zc2yRJ16BOvdRPW4pRDhrA1lbeylxYh
qRR4Xi9Gyd6SZfIKn9NybRJbvjnMKDi2x1XHjb03cwo9GmkvpyBaC1/jiIbBO6ch
IV/GNQhek09f7Fu7rTysB+Y7ZwIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFCL5ZPme
NLMLNm1KrJeV1dxPAP8wMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQzUyQjc4QUMw
M0JFMTFFRkJBMEE3RjU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUwYIKwYBBQUHAQcBAf8E
RDBCMEAEAgABMDoDBAKLvgAwDAMEA4u+CAMEBYu+AAMEAou+LDAMAwQCi740AwQC
i744AwQCi75kAwQDi75wAwQAi77vMA0GCSqGSIb3DQEBCwUAA4IBAQDSMV96q6rB
EIl09y8IiBXctK/f7//2/Jd+zO5Af+MxJjAkgpzu2ni4ekv9GeEkms6wXFNBcycM
vt2ymniatmZ8wTZ+hAEuNcKSnMYCV0/y7Pvgn/lnCneoaAUGVSQPot5YA4bMRyRG
A60NN59RnSSOi//4z2ka/cwA9hToFBW5EJ7C8qpHJAJHUl0SOPs4G+dCXNXgWNh1
RHxYFynOlojPed45WWmV85ug+1nnl61+WJeWAcH/UN206/7q4H3LtmrpW+zR+hMX
+ceGYkFHu2spWIMayUKAva8CMJRXFFexul9zs8/mxGLZW/qQ2tY7HFU2GOTnPugd
E3fT99YD6m1t
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:53 2025 by rpki-client