Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DE2C70389BDF11ED989D3D35C4F9AE02.roa
File: DE2C70389BDF11ED989D3D35C4F9AE02.roa (raw, json)
Hash identifier: TXLVkAg0+2QTG2HLqUvWlgjP/xn3i4Ien9Dpa9fEaTI=
Subject key identifier: D9:CD:3F:5C:38:52:7F:58:B6:23:A8:78:92:F1:4E:D5:BF:A3:0C:EE
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0828
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DE2C70389BDF11ED989D3D35C4F9AE02.roa
Signing time: Tue 24 Jan 2023 12:08:53 +0000
ROA not before: Tue 24 Jan 2023 12:08:53 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 139.190.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jan 24 12:08:53 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63cfca54-721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:32:04:60:15:50:81:b2:fb:53:49:e4:5b:
48:1b:27:42:25:73:bd:91:87:bf:e5:97:3c:ed:0a:
3b:4e:3b:77:f2:4e:8c:d8:ab:09:b0:42:fc:c3:33:
f8:b2:34:d4:47:40:7c:08:71:13:16:f7:22:24:de:
11:9e:f0:d3:9f:a0:93:5a:dd:c5:75:3b:f0:67:f9:
c7:fd:47:f9:22:28:84:b0:61:0a:77:44:78:20:a0:
7a:ea:45:d7:15:dc:96:e6:b6:b5:57:7b:76:d7:c5:
f4:0f:6d:ef:3e:f8:eb:46:6c:be:ff:32:6f:29:b3:
ee:1a:81:48:11:d9:ae:7c:f8:52:89:23:e1:64:0c:
95:50:7a:27:bf:38:ca:d3:15:d5:f2:f3:e9:f1:92:
4d:94:e7:04:80:f5:c6:0f:39:ef:41:31:6c:30:95:
f6:3f:e8:7f:ed:e7:7a:78:35:c6:a3:89:d2:79:e8:
4c:73:81:42:f7:9f:f5:7a:b9:13:62:12:3d:8b:8d:
8a:d4:b2:d4:93:4c:e5:d1:bb:2a:56:ef:01:59:9a:
8e:30:2b:e0:59:27:58:42:1e:ca:5b:fe:2c:c0:9a:
5b:5f:ed:6b:fe:b0:f3:13:78:6d:e8:16:e2:85:7c:
aa:48:32:cb:00:6e:ec:08:bf:68:b9:91:71:a1:8b:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:3F:5C:38:52:7F:58:B6:23:A8:78:92:F1:4E:D5:BF:A3:0C:EE
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DE2C70389BDF11ED989D3D35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.124.0/22
Signature Algorithm: sha256WithRSAEncryption
02:68:88:0b:07:ca:99:5e:a3:55:08:32:10:b1:e9:ed:2a:7a:
ed:1d:0a:bd:f3:bd:52:02:d2:01:cb:4b:ca:9f:26:52:c3:17:
9a:d2:6b:16:d3:95:bc:b9:bb:db:99:43:32:69:53:85:ff:ad:
74:6c:56:51:e0:a4:32:61:9b:96:44:11:55:e0:ba:7d:ac:8a:
bb:61:ab:b5:b9:20:16:55:f1:90:7f:16:6e:40:89:d7:97:38:
a8:26:cf:4f:e2:7c:87:8f:37:8f:09:39:3a:8d:b6:9b:64:cc:
18:20:4a:9b:6f:24:4b:a1:c6:5a:51:04:c3:20:8a:32:25:e2:
d7:64:37:a8:26:3b:21:2e:cb:39:cc:3a:ab:33:58:f9:cf:a5:
74:bd:55:e2:af:f5:18:a6:eb:76:e1:10:08:2b:41:db:4b:58:
ed:a6:ad:72:18:43:bb:03:ca:a4:36:bd:cc:c0:f9:5d:29:b3:
da:8d:00:5c:05:22:fe:f1:5e:ef:20:6e:02:38:24:f5:ee:e7:
3e:81:0e:d5:8c:7c:22:b9:f7:26:92:1a:e6:7f:98:6c:97:0f:
82:aa:81:1a:2a:14:9a:50:0e:94:9f:02:cf:ca:f8:51:8b:64:
88:a8:ca:30:29:b5:71:da:a2:bb:b3:ac:58:57:1b:ec:74:2e:
9f:5a:32:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:17 2025 by rpki-client