Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/CDA4B4FC909411ECA58A6B17C4F9AE02.roa
File: CDA4B4FC909411ECA58A6B17C4F9AE02.roa (raw, json)
Hash identifier: bI6Sq+btIFm0+OshUq0QAB3f/O8+hIBDDxepq9vzT8E=
Subject key identifier: D0:88:E9:AC:A9:9A:EF:1D:70:73:E3:7B:B1:0E:6F:D9:3B:D2:0B:29
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0683
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/CDA4B4FC909411ECA58A6B17C4F9AE02.roa
Signing time: Wed 01 Jun 2022 11:26:58 +0000
ROA not before: Wed 01 Jun 2022 11:26:58 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 139.190.96.0/22 maxlen: 24
139.190.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1667 (0x683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jun 1 11:26:58 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62974d01-12ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:b6:b4:59:bc:d1:0d:f9:e0:97:78:3e:79:
cd:ea:94:ff:34:00:4d:ae:74:3b:60:47:14:99:d8:
de:30:29:2a:d6:4c:14:f4:c6:14:d3:cc:13:12:24:
6c:3f:40:3f:01:36:70:67:62:34:93:72:8e:8d:51:
54:91:8d:86:8f:b0:50:cb:6f:36:6f:51:76:c1:3f:
e2:86:2b:38:04:2f:e8:c3:99:e1:40:43:5e:b1:d0:
d0:51:21:89:04:4c:93:59:f3:6f:e4:ed:b1:bc:90:
3a:fe:37:16:9f:6e:43:63:88:12:a7:e9:42:e1:4a:
53:a5:df:64:26:d5:0c:ad:f0:b4:9c:2e:61:0f:ae:
e7:21:de:ae:4c:e4:62:a6:1a:94:98:59:89:8f:b7:
40:0c:df:1f:c4:e1:33:2f:29:02:8d:93:da:93:de:
89:dd:1b:5f:de:d6:fe:73:6b:62:5a:06:d3:86:48:
6a:2a:5e:52:4b:24:dc:0e:45:cd:c8:6a:24:5c:5f:
03:b4:1a:1b:f8:5c:80:4e:c6:be:e6:2a:5b:20:23:
32:16:a6:18:b4:99:bb:ea:e7:d0:61:1a:b7:9c:a7:
09:58:85:30:e8:a1:19:13:d1:e9:ab:b9:a0:19:bb:
ac:8e:ec:cb:ac:11:f0:08:3e:77:12:0f:5f:26:e8:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:E9:AC:A9:9A:EF:1D:70:73:E3:7B:B1:0E:6F:D9:3B:D2:0B:29
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/CDA4B4FC909411ECA58A6B17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.96.0/22
139.190.234.0/24
Signature Algorithm: sha256WithRSAEncryption
63:70:b2:cf:36:60:47:e4:55:77:a1:1a:21:fa:bd:e8:76:3b:
c3:8b:7c:83:37:1c:99:96:72:af:af:bb:78:b7:d1:f5:50:b7:
88:c4:4e:6a:b8:d9:69:eb:c1:91:6d:dd:7d:40:f1:55:d4:ae:
58:81:cd:2f:7c:f3:32:e3:e8:ad:7a:51:0b:a2:9d:12:13:0d:
96:6b:e2:f0:41:fa:41:06:65:a9:20:6e:b4:2f:88:7c:1c:bd:
11:5d:32:df:09:3d:79:5a:43:3c:43:45:91:11:7b:76:2d:f6:
c0:cc:1d:04:c8:64:32:e6:03:29:3d:5b:e7:35:0c:b5:2c:e4:
21:a7:f6:73:40:0e:85:3f:9d:18:6f:6e:3d:96:90:f7:51:31:
a0:29:67:76:c9:59:45:af:be:e5:cd:fc:ab:4f:e1:cf:fa:42:
46:dc:26:62:8e:16:cc:50:95:7a:17:02:0a:83:55:73:92:27:
11:72:27:48:ce:19:05:af:6d:5a:82:c9:8b:c8:8a:f3:c3:86:
38:5e:ae:48:c7:4a:d6:0d:f1:db:cc:07:4b:5a:ff:f5:a5:97:
92:41:fa:77:50:c1:f0:00:ec:3f:a0:4b:ee:17:8c:bc:cd:a7:
26:e4:b0:77:ee:96:67:12:37:00:d9:3d:dc:4e:9c:c9:be:db:
c3:86:5a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:54 2025 by rpki-client