Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D713F1BC24A211EE9869CE4BC4F9AE02.roa
File: D713F1BC24A211EE9869CE4BC4F9AE02.roa (raw, json)
Hash identifier: JzdEExzzGoCn1KQo6TLCqxYYTpBfSkBSeEiZbu/1054=
Subject key identifier: B0:51:54:21:86:41:EC:07:A2:B8:23:9C:17:1E:2D:18:D4:74:9B:41
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 08CA
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D713F1BC24A211EE9869CE4BC4F9AE02.roa
Signing time: Mon 17 Jul 2023 13:07:11 +0000
ROA not before: Mon 17 Jul 2023 13:07:11 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 139.190.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jul 17 13:07:11 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64b53cfe-0e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:87:9c:aa:38:79:d1:be:61:38:eb:aa:02:
58:68:60:3f:e6:f2:c0:c4:7f:f5:af:f5:86:5b:7a:
bf:a7:e2:bd:c5:eb:7a:39:bd:da:37:d1:76:ac:4b:
92:57:5b:6a:0b:47:3a:27:42:c8:15:53:2b:49:f1:
eb:bf:d4:16:65:6d:ae:0d:b8:15:32:82:5b:03:b1:
3d:49:b7:ec:9d:fd:32:cf:d7:2f:73:06:a1:78:88:
ec:6f:61:2a:97:67:7e:e0:29:73:a4:b8:b0:84:11:
a4:ca:e7:6f:a3:96:23:65:b5:a2:6c:b0:65:eb:b4:
62:b6:c7:6c:84:11:7a:44:91:b2:5c:2c:48:2a:15:
50:a0:b6:af:28:a3:6c:fb:ce:d2:8e:e0:b6:44:92:
59:1d:06:18:b7:b7:a8:ca:c4:5a:af:d4:d0:d4:f4:
02:85:94:b9:41:0e:dc:2c:14:1d:b4:f1:09:09:a8:
c6:4b:98:68:1b:dd:6c:bb:de:9e:87:37:05:ec:6b:
5d:66:b8:ae:97:92:f3:78:b6:a6:7c:a4:73:bb:81:
d6:89:5a:dd:54:9e:c2:66:89:d6:6b:b1:a1:09:f9:
b6:a4:d2:1d:a0:d5:12:c4:59:fc:2e:c8:2e:5c:f9:
c2:8e:98:6c:f5:7b:52:ce:5d:2e:c9:2a:65:dc:0e:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:51:54:21:86:41:EC:07:A2:B8:23:9C:17:1E:2D:18:D4:74:9B:41
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D713F1BC24A211EE9869CE4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.100.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:88:7f:95:5f:b1:e4:5c:e7:b0:10:dd:88:47:a1:8c:18:bd:
56:c1:66:97:e6:9c:b0:90:bc:c5:95:5e:89:15:a2:1a:14:3a:
cb:2f:52:6f:2f:6a:a3:0b:97:ca:2d:a1:d1:57:6b:d3:41:20:
bd:83:a3:28:67:dc:0a:84:da:d7:d4:18:33:c7:43:a1:4f:9a:
20:ce:c2:1c:1b:02:71:a6:2d:f1:08:62:7f:22:ab:de:de:bd:
8c:f7:63:e4:6e:0b:21:75:4d:1b:54:0c:de:66:c4:e9:9c:9f:
ab:3e:68:d9:ba:32:96:b4:f5:6e:39:02:80:68:5c:a1:2d:18:
28:04:ff:1a:71:1c:5c:e4:02:f4:c5:95:66:2b:76:6b:4d:9f:
fd:72:78:c7:5e:03:01:60:07:bc:be:c1:46:0a:19:9e:74:d1:
0b:0a:e6:ee:aa:df:74:5d:9a:93:11:89:66:f9:a9:ca:d8:58:
27:99:29:c2:51:3a:86:27:db:16:b3:ec:fd:2a:a5:9c:7d:ce:
05:87:54:f9:bb:ce:82:aa:0e:07:ef:ec:2c:bd:a3:8f:02:b8:
39:08:44:9d:4a:21:59:d2:0a:4f:7a:b4:2c:7f:62:74:89:de:
e7:19:a1:7e:ad:1c:c8:c2:fc:84:5a:da:00:96:5b:73:cd:fc:
dd:24:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:12 2025 by rpki-client