Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C74C5F8C0AA111EE8FB5CC3AC4F9AE02.roa
File: C74C5F8C0AA111EE8FB5CC3AC4F9AE02.roa (raw, json)
Hash identifier: zbRv/rIc+fGHnZ2bv9HtvVVirIugoX1A3md3zNNrF6g=
Subject key identifier: 89:06:54:8F:28:61:31:50:ED:0F:9C:2E:81:72:8A:95:8D:C3:EE:74
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 08A8
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C74C5F8C0AA111EE8FB5CC3AC4F9AE02.roa
Signing time: Wed 14 Jun 2023 10:54:05 +0000
ROA not before: Wed 14 Jun 2023 10:54:05 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jun 14 10:54:05 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64899c4c-2868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:ff:b0:98:2d:30:32:49:94:00:62:85:0c:
9a:5b:96:d0:72:19:58:79:db:cf:30:2b:12:75:5a:
74:8f:d3:6f:09:db:7d:fa:66:fc:74:b0:28:18:1e:
18:69:fc:fa:55:4a:e5:90:e5:fe:25:22:1d:48:e5:
7a:7b:52:03:95:78:f5:b8:b6:05:a2:6f:f6:c0:bb:
41:78:a9:5d:03:a4:cf:75:ef:d5:ac:5f:3f:b2:47:
8c:39:88:96:2e:25:1b:a3:9e:c4:fa:a3:0d:a8:20:
6f:1b:00:79:05:29:61:69:81:8e:44:e2:bc:f0:8f:
62:97:c4:cc:f5:be:f8:0d:39:2d:ac:c6:6f:52:54:
36:dc:e3:7f:e6:e6:12:72:f6:23:15:ca:c3:06:ca:
25:17:a4:e0:fc:f7:92:9a:2d:19:17:53:55:3b:88:
ad:85:54:d2:4f:5a:dd:32:61:98:07:fd:cd:21:0a:
e8:78:ef:42:53:4b:65:f9:98:4e:8a:1c:e8:fd:24:
92:79:de:b8:3a:c6:22:ec:21:82:5a:30:68:21:a2:
fb:d5:6b:0f:f3:f0:37:4f:d2:07:8b:52:49:42:1e:
b7:ef:04:ee:d4:69:73:b1:07:08:ef:04:03:75:26:
15:69:f3:2d:c2:24:25:06:2c:ff:3b:cf:49:59:ef:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:06:54:8F:28:61:31:50:ED:0F:9C:2E:81:72:8A:95:8D:C3:EE:74
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C74C5F8C0AA111EE8FB5CC3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.104.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:91:7b:16:f4:03:2b:e9:2a:b1:99:04:da:07:9d:c3:a4:b0:
91:6a:3d:6c:16:85:b5:5a:b4:40:cd:88:ce:4b:41:a3:e7:66:
9d:1c:ac:30:f2:6c:e8:db:47:54:3e:fb:0d:64:28:ae:a2:e3:
0b:01:cd:d2:d4:09:8b:51:2b:92:69:70:15:f0:ab:29:d1:90:
03:2a:f7:34:6e:1e:d8:76:f1:2b:2c:e7:ad:6b:b4:b0:f7:12:
f1:b0:d5:b2:ec:39:c9:c7:ec:af:63:8c:9d:1b:6e:58:97:84:
0f:26:ac:b2:bb:5f:39:8b:c7:c1:a8:21:ec:f4:b6:9a:3f:61:
4e:9e:c0:52:88:26:a1:39:42:d5:0a:f3:79:a6:ab:d9:ae:aa:
f5:66:6e:8e:51:8e:aa:35:d6:90:04:28:78:07:fc:3c:4d:16:
57:cd:ce:73:ba:26:dd:c6:52:da:67:d8:62:6a:f9:e0:1a:0e:
53:c7:b8:bd:de:be:a1:2e:84:38:f5:26:29:b6:22:60:b5:eb:
b8:d4:ba:fe:e4:a5:67:52:13:bc:4f:75:7b:47:f4:1d:6d:a3:
ae:26:80:20:0c:32:84:9f:8f:ba:4c:04:07:7e:8f:96:ed:33:
6a:47:7f:00:3a:25:47:e6:87:87:40:79:6d:e8:a0:88:45:8e:
88:f4:63:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:41 2025 by rpki-client