Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/CD969DA809DE11EEBBBAAF86C4F9AE02.roa
File: CD969DA809DE11EEBBBAAF86C4F9AE02.roa (raw, json)
Hash identifier: bgCqNMLrFPVmD25S8GYs+YNhk4JGipBTECPCn8iOMcA=
Subject key identifier: C6:16:6B:64:4D:03:D2:3D:CE:E6:60:4C:C6:05:D4:78:24:D7:BE:7A
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 08A6
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/CD969DA809DE11EEBBBAAF86C4F9AE02.roa
Signing time: Tue 13 Jun 2023 11:38:23 +0000
ROA not before: Tue 13 Jun 2023 11:38:23 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 139.190.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jun 13 11:38:23 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6488552f-83f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:76:f4:ae:90:cd:9f:ec:b4:55:72:91:1f:
e3:41:a8:5a:41:2e:58:3e:e0:a0:04:35:51:41:e6:
30:91:38:98:be:a0:be:40:f0:ec:45:d1:73:b9:40:
3a:b1:a8:d5:c9:22:6d:d7:3e:a2:e0:c9:81:b2:29:
d7:ba:00:88:3c:05:12:e0:81:42:1e:38:3a:ec:e1:
85:34:35:8a:71:d3:aa:9a:85:bc:2c:43:76:ed:ee:
17:e3:96:f4:e8:61:9c:73:0a:41:c4:e1:3e:3f:b9:
3a:1e:81:2a:c5:91:f6:5e:e3:64:9c:72:bf:7d:c4:
41:00:57:c1:55:55:7a:cf:0a:f0:ed:21:24:5f:1f:
52:c1:6e:ab:fa:ad:e6:e7:20:f3:6e:9a:a4:07:a5:
a3:de:20:4e:a1:92:2e:0d:5e:02:6b:83:fd:46:60:
1d:a3:ca:e3:75:5c:37:05:ab:06:0f:8c:8b:82:3a:
8f:70:ef:e0:1c:b4:2b:de:15:52:5c:70:df:57:78:
d4:63:18:e0:51:a0:0f:2d:5f:bd:64:41:35:82:c5:
3e:3d:b8:08:e2:c3:9d:e8:20:9b:60:c9:73:51:89:
6b:fb:8b:bf:cb:b0:50:83:c9:09:50:4c:27:ef:77:
83:8a:65:bc:2e:2b:f7:f8:ef:d5:e9:ac:d9:89:fe:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:16:6B:64:4D:03:D2:3D:CE:E6:60:4C:C6:05:D4:78:24:D7:BE:7A
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/CD969DA809DE11EEBBBAAF86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.60.0/22
Signature Algorithm: sha256WithRSAEncryption
18:f1:5a:cf:f1:03:cb:7e:f1:e2:a9:3b:b8:40:2f:01:35:fe:
53:5b:55:c1:33:5a:0d:81:ec:56:3f:ab:ff:fd:1f:29:7b:2f:
1b:7a:b2:97:3c:7f:57:60:c4:44:f5:79:f3:1b:af:58:7d:db:
c0:63:60:88:a9:63:8c:3e:77:7f:a4:c8:66:75:1d:9d:c5:13:
84:34:c0:c5:13:aa:b8:17:0a:ab:b3:a6:c4:b2:cc:71:ba:77:
3b:3d:80:49:4d:72:1b:34:a2:39:c9:f5:12:f8:7f:af:72:f8:
69:5c:ee:8c:1b:bd:e3:31:e0:e8:e8:f3:58:18:13:d8:ee:34:
6b:c0:7a:dd:e1:b6:d9:14:43:a0:9b:e2:66:ff:c3:81:00:3c:
36:14:40:7b:a5:d5:56:44:55:51:b5:23:0c:4a:76:81:1c:2a:
e5:37:3b:bd:74:86:bf:57:ef:17:47:24:cb:c9:bf:ba:35:4e:
04:cb:7e:67:3a:a7:a9:c0:fd:76:7a:46:8f:4d:40:96:17:1e:
88:fb:52:b7:21:85:66:9b:6e:c5:c5:0a:f2:84:5e:c8:9d:3f:
b7:26:f7:a1:f7:61:0e:7f:e7:80:0d:a0:25:2e:bf:9d:da:f5:
7c:3c:57:9f:ca:5e:e9:75:2a:c7:0d:09:ed:2f:5a:c1:29:e3:
9b:f1:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:20 2025 by rpki-client