Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DF545E1C9BDF11ED989D3D35C4F9AE02.roa
File: DF545E1C9BDF11ED989D3D35C4F9AE02.roa (raw, json)
Hash identifier: GQVqda240YK70jrApL7I1R74uf5bt0a3KCW8ORTqkwA=
Subject key identifier: 9C:F9:E5:8D:6F:88:CE:9C:BC:20:89:31:1E:A4:F5:CB:E3:86:C9:72
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 082C
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DF545E1C9BDF11ED989D3D35C4F9AE02.roa
Signing time: Wed 25 Jan 2023 06:30:40 +0000
ROA not before: Wed 25 Jan 2023 06:30:40 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 139.190.124.0/22 maxlen: 24
139.190.234.0/24 maxlen: 24
139.190.235.131/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jan 25 06:30:40 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63d0cc90-a946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:03:ab:ff:2d:69:f1:c2:23:d6:0b:81:70:
e1:91:04:23:81:91:6e:f3:76:7a:71:9f:a8:09:37:
a6:f9:24:e9:29:47:1a:04:20:17:4f:76:31:00:f9:
a8:9d:48:7a:fb:be:6e:02:71:6d:e1:7a:d5:c6:e6:
b2:c2:3e:58:9d:0c:5e:0d:0d:92:69:69:af:3a:86:
43:a3:0b:7c:05:63:87:84:c9:08:b9:ce:57:3f:89:
03:0b:00:48:93:1c:66:7f:e2:fc:05:18:aa:32:20:
1e:b2:0c:c8:bb:b9:17:bd:ad:17:d7:b9:3c:5d:d4:
3a:02:98:1d:bb:2d:2a:c3:84:f4:2a:02:8c:bb:ff:
b8:70:1e:e0:4f:e3:24:5e:7c:18:86:78:c3:45:97:
cf:32:59:16:c7:f8:f9:9d:70:06:2b:b2:79:02:e1:
9b:42:b5:9c:08:a3:d4:58:84:08:9b:b6:4f:58:4e:
7e:05:13:50:07:f2:9b:37:8f:f4:9a:ca:aa:35:56:
1d:d3:e0:53:74:02:ed:ee:cc:b7:03:1f:b9:c1:1c:
7f:81:bb:1c:90:74:c7:47:d1:22:9e:98:ad:64:8a:
db:5c:c2:98:83:4a:6d:15:6c:a9:4e:d9:4e:dc:44:
9e:e5:6a:03:f1:bb:7e:cd:97:ea:7d:60:b5:27:01:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F9:E5:8D:6F:88:CE:9C:BC:20:89:31:1E:A4:F5:CB:E3:86:C9:72
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DF545E1C9BDF11ED989D3D35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.124.0/22
139.190.234.0/24
139.190.235.131/32
Signature Algorithm: sha256WithRSAEncryption
a3:e1:fe:cc:f0:ef:05:9e:59:3c:32:8d:6a:6a:13:3e:44:d0:
54:ea:c6:62:9b:c8:ca:5d:dc:51:41:a2:aa:3f:5e:c6:2c:88:
a4:a3:ca:29:58:90:7e:78:1e:21:47:fa:df:74:c4:d0:1a:59:
1c:7b:ec:fc:5a:66:2f:4c:10:cf:35:32:08:de:c6:58:5c:78:
2a:82:6c:f2:9b:f0:95:93:dc:9b:a6:59:fb:e6:ee:dc:4b:cc:
1f:74:c2:f2:3e:68:dc:a5:77:1c:44:c4:81:26:23:5b:ed:1d:
11:ce:49:cf:89:54:77:54:89:9e:5b:24:22:46:1b:42:47:4d:
47:7e:db:ee:3d:60:f9:ce:a7:4e:39:a3:e4:2f:35:63:34:fd:
8b:9f:9f:a5:d3:5c:a6:92:90:1d:51:e7:c2:2e:da:c3:bc:be:
9c:e9:6a:7a:bc:4d:89:f2:cf:bc:bd:c6:7b:01:a1:eb:d6:72:
f0:94:a2:9a:7c:e9:16:f0:58:d0:cc:03:b9:d9:3b:b3:d4:3e:
87:e9:0a:19:51:2b:45:ae:89:72:57:16:81:e6:ff:b0:4c:77:
ad:d4:66:81:19:4d:67:ec:35:d7:f9:90:80:19:e4:00:0b:3e:
03:46:43:09:66:d0:ad:ed:97:fd:8b:14:10:8e:aa:05:76:5a:
ce:60:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:39 2025 by rpki-client