Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D31E4CF2ADE011EEB7301477C4F9AE02.roa
File: D31E4CF2ADE011EEB7301477C4F9AE02.roa (raw, json)
Hash identifier: U4jS5XxZ6YnMZ4o5tMZq0dRrIdhU76YvFdiq6Cn55ps=
Subject key identifier: E6:CE:18:AE:E3:75:D7:7C:EC:88:5D:E2:BD:E0:74:38:F6:A7:C8:4C
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 09A8
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D31E4CF2ADE011EEB7301477C4F9AE02.roa
Signing time: Tue 20 Feb 2024 04:34:47 +0000
ROA not before: Tue 20 Feb 2024 04:34:47 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.0.0/22 maxlen: 22
139.190.8.0/22 maxlen: 22
139.190.12.0/22 maxlen: 22
139.190.16.0/22 maxlen: 22
139.190.20.0/22 maxlen: 24
139.190.24.0/22 maxlen: 22
139.190.28.0/22 maxlen: 24
139.190.44.0/22 maxlen: 22
139.190.56.0/22 maxlen: 24
139.190.100.0/22 maxlen: 24
139.190.112.0/22 maxlen: 22
139.190.116.0/22 maxlen: 22
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2472 (0x9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Feb 20 04:34:47 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65d42be7-a52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:61:5d:9f:f5:49:69:48:6a:a1:f0:73:fa:
a9:b4:55:6f:7b:9a:c1:55:b9:80:18:08:e2:92:5c:
44:f8:ab:b4:49:fe:73:51:b8:63:b0:73:03:bf:97:
3a:5d:e3:46:cf:fc:b4:cc:2d:d7:87:65:11:1c:f0:
34:39:8a:92:1b:70:ed:9b:87:be:83:a2:1c:ec:07:
ea:e4:ca:53:3e:57:f6:a7:ac:32:9f:26:a6:d1:46:
3c:46:55:b8:15:c9:7a:ae:29:a1:39:2e:92:05:7e:
82:6d:e8:89:47:25:9c:d5:17:07:bb:dd:98:68:6e:
23:0d:d5:dd:09:3c:36:b1:fa:e3:0f:f9:5a:7a:cc:
65:e3:01:80:be:d2:60:1a:67:c6:78:08:e8:c2:e0:
e5:fb:85:f3:ea:44:73:e0:19:0b:aa:27:09:b5:78:
06:5f:e4:5d:83:13:3c:2a:41:1f:6a:bb:4b:22:9b:
cd:88:c6:fa:03:02:55:49:72:de:8e:90:3b:77:ef:
af:c2:fe:cb:83:fa:37:5a:dd:74:04:fa:40:9e:37:
f6:7a:17:83:9c:d1:78:7b:2e:a3:f2:89:76:21:a0:
3f:30:6f:14:2e:a9:1f:ec:a1:8f:fe:d0:7b:fb:a8:
d4:94:45:a0:2e:4e:1d:82:f7:15:be:27:e8:fe:b4:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CE:18:AE:E3:75:D7:7C:EC:88:5D:E2:BD:E0:74:38:F6:A7:C8:4C
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D31E4CF2ADE011EEB7301477C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/22
139.190.8.0-139.190.31.255
139.190.44.0/22
139.190.56.0/22
139.190.100.0/22
139.190.112.0/21
139.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4f:9d:54:0e:71:a9:ab:44:7d:50:35:04:35:0e:e0:f0:b5:
1e:1b:b1:1d:1b:6a:5c:1d:6e:f9:91:99:be:52:11:a5:49:0c:
a5:b7:cf:fd:8d:f1:13:3c:f5:e4:d1:fc:b0:1a:fa:c5:e3:88:
78:da:70:e3:a3:37:88:db:ef:c0:a7:d3:db:4c:63:82:78:58:
0c:8d:40:fb:cf:04:63:d7:33:67:01:5e:f5:54:44:ff:05:65:
bb:93:7f:ce:07:1b:4f:7a:79:f7:19:c9:f8:50:89:c9:ed:ab:
d1:2a:d0:78:f9:f0:50:fa:3e:87:fc:7f:5a:b0:8a:59:71:14:
65:4e:9c:f2:21:b0:ce:75:d6:4b:c3:a8:a5:47:ca:e5:c3:31:
74:3b:d2:04:8c:ec:d0:ed:ed:ee:2b:84:f7:d3:c5:94:f6:e9:
96:b5:f6:23:13:b0:3c:f0:47:45:39:a3:f2:0d:12:57:ac:66:
3a:0e:98:e2:48:62:96:5f:d7:d1:07:c1:1b:80:94:7e:cd:71:
c1:87:17:28:2e:ea:56:63:4c:ef:1b:eb:55:85:51:b8:e0:77:
fa:52:cb:c3:d6:d1:d5:5c:6a:90:eb:34:cf:d7:ee:09:99:fb:
34:d0:36:46:c1:78:79:bd:30:40:da:d0:2a:63:22:2b:98:d6:
4b:94:3a:69
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgICCagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjQwMjIwMDQzNDQ3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQ0MmJlNy1hNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwc1hXZ/1SWlIaqHwc/qptFVve5rBVbmAGAjiklxE+Ku0Sf5zUbhjsHMDv5c6
XeNGz/y0zC3Xh2URHPA0OYqSG3Dtm4e+g6Ic7Afq5MpTPlf2p6wynyam0UY8RlW4
Fcl6rimhOS6SBX6CbeiJRyWc1RcHu92YaG4jDdXdCTw2sfrjD/laesxl4wGAvtJg
GmfGeAjowuDl+4Xz6kRz4BkLqicJtXgGX+RdgxM8KkEfartLIpvNiMb6AwJVSXLe
jpA7d++vwv7Lg/o3Wt10BPpAnjf2eheDnNF4ey6j8ol2IaA/MG8ULqkf7KGP/tB7
+6jUlEWgLk4dgvcVvifo/rSEAQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFObOGK7j
ddd87Ihd4r3gdDj2p8hMMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRDMxRTRDRjJB
REUwMTFFRUI3MzAxNDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E
PDA6MDgEAgABMDIDBAKLvgAwDAMEA4u+CAMEBYu+AAMEAou+LAMEAou+OAMEAou+
ZAMEA4u+cAMEAIu+7zANBgkqhkiG9w0BAQsFAAOCAQEAp0+dVA5xqatEfVA1BDUO
4PC1HhuxHRtqXB1u+ZGZvlIRpUkMpbfP/Y3xEzz15NH8sBr6xeOIeNpw46M3iNvv
wKfT20xjgnhYDI1A+88EY9czZwFe9VRE/wVlu5N/zgcbT3p59xnJ+FCJye2r0SrQ
ePnwUPo+h/x/WrCKWXEUZU6c8iGwznXWS8OopUfK5cMxdDvSBIzs0O3t7iuE99PF
lPbplrX2IxOwPPBHRTmj8g0SV6xmOg6Y4khill/X0QfBG4CUfs1xwYcXKC7qVmNM
7xvrVYVRuOB3+lLLw9bR1VxqkOs0z9fuCZn7NNA2RsF4eb0wQNrQKmMiK5jWS5Q6
aQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:26 2025 by rpki-client