Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E52DE90E82C911EDA369996AC4F9AE02.roa
File: E52DE90E82C911EDA369996AC4F9AE02.roa (raw, json)
Hash identifier: /gOY6/+M6/1ktPkbgzQcAldD4HjVNgF/6iH7O5Muf/E=
Subject key identifier: 3F:13:34:8F:A7:3E:F0:2C:95:90:7B:48:DD:F5:6C:6F:0C:C0:7A:65
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 085F
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E52DE90E82C911EDA369996AC4F9AE02.roa
Signing time: Tue 11 Apr 2023 06:19:42 +0000
ROA not before: Tue 11 Apr 2023 06:19:42 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 10753
IP address blocks: 139.190.36.0/22 maxlen: 24
139.190.40.0/22 maxlen: 24
139.190.52.0/22 maxlen: 24
139.190.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Apr 11 06:19:42 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6434fbfe-2034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:07:9d:1d:f1:8f:e8:d2:f7:90:7b:4e:4f:
be:33:0b:3c:17:fe:7f:a6:68:55:05:02:8a:44:0d:
ca:cc:5d:b0:c0:21:98:8a:1e:70:2f:29:28:5f:02:
b1:f7:3e:8f:40:6b:f6:4e:a8:eb:1a:bc:4f:16:fc:
ea:85:7d:b9:f7:15:5d:07:cd:19:dd:ea:20:02:a2:
b4:af:e1:f5:94:1d:cc:b8:87:c6:c4:2f:ae:02:37:
8a:53:26:14:78:e2:15:15:62:cd:09:3a:e2:d5:74:
02:42:80:9e:01:41:73:91:d2:f1:b7:fb:59:0b:c8:
6a:c7:72:74:79:5b:6d:bd:d3:ab:67:7b:1b:78:e1:
a3:0e:c4:e8:69:3c:6d:3d:45:0f:75:a4:ee:d0:1d:
c8:6f:64:4a:f1:54:f4:03:1c:95:2c:fc:c0:e1:5b:
7b:02:d0:2a:d5:a1:9b:f1:6d:05:44:5d:08:a1:20:
78:3f:0b:f0:24:75:90:8d:25:21:cd:eb:32:ee:81:
5f:47:90:11:73:9e:d2:a9:86:8b:c3:a6:99:f7:e7:
5c:ea:35:9c:d2:28:7a:c5:4f:fc:ed:9f:50:04:28:
10:94:ec:e4:a7:2a:1e:bc:6b:6a:6d:a0:68:5b:04:
c6:2a:61:8d:e7:f6:83:31:90:0a:45:52:75:a4:64:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:13:34:8F:A7:3E:F0:2C:95:90:7B:48:DD:F5:6C:6F:0C:C0:7A:65
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E52DE90E82C911EDA369996AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.36.0-139.190.43.255
139.190.52.0/22
139.190.108.0/22
Signature Algorithm: sha256WithRSAEncryption
68:97:0f:e1:8d:73:9e:59:82:08:de:1a:f6:12:9f:3f:df:40:
d7:61:fe:ed:cf:2d:22:07:8d:8c:f4:dd:3d:ad:bf:26:3d:ac:
82:51:9d:ac:87:44:24:20:80:78:ad:71:a8:18:6c:e2:d0:2e:
be:22:8e:4b:d3:63:ee:3d:96:75:9f:5e:28:35:ce:a1:d9:39:
0e:d3:21:84:6b:58:50:16:9a:4f:b2:4a:4a:52:f5:ff:e4:ca:
64:10:1a:9d:88:c6:57:96:1d:5b:30:4c:1b:4b:1b:64:e6:b9:
82:a0:7f:c9:42:27:b8:d8:13:52:05:8d:07:f3:88:af:69:4e:
c8:09:45:c0:7b:f6:28:8c:e3:6a:72:67:a1:59:e4:fa:50:a8:
2f:82:a2:fb:1c:3a:f7:28:1b:87:f2:45:10:8e:a4:37:aa:82:
9c:1e:cb:59:06:b5:84:b1:8a:15:17:08:2f:b2:ef:bc:b0:cf:
44:59:e6:0a:fd:1b:8c:76:4a:fd:49:3c:4f:98:bb:74:36:70:
d8:f5:31:4a:e2:cc:57:49:46:0c:5e:b0:5d:52:8c:25:b8:2c:
a1:e8:be:5e:0f:98:c1:6c:06:0d:f1:76:a2:13:ab:57:0f:b7:
0e:9a:26:7a:c2:b4:be:ac:b9:97:53:2d:5f:50:f9:61:8a:4f:
2b:81:10:65
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjMwNDExMDYxOTQyWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDM0ZmJmZS0yMDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVwHnR3xj+jS95B7Tk++Mws8F/5/pmhVBQKKRA3KzF2wwCGYih5wLykoXwKx
9z6PQGv2TqjrGrxPFvzqhX259xVdB80Z3eogAqK0r+H1lB3MuIfGxC+uAjeKUyYU
eOIVFWLNCTri1XQCQoCeAUFzkdLxt/tZC8hqx3J0eVttvdOrZ3sbeOGjDsToaTxt
PUUPdaTu0B3Ib2RK8VT0AxyVLPzA4Vt7AtAq1aGb8W0FRF0IoSB4PwvwJHWQjSUh
zesy7oFfR5ARc57SqYaLw6aZ9+dc6jWc0ih6xU/87Z9QBCgQlOzkpyoevGtqbaBo
WwTGKmGN5/aDMZAKRVJ1pGR5DwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFD8TNI+n
PvAslZB7SN31bG8MwHplMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRTUyREU5MEU4
MkM5MTFFREEzNjk5OTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBowDAMEAou+JAMEAou+KAMEAou+NAMEAou+bDANBgkqhkiG9w0B
AQsFAAOCAQEAaJcP4Y1znlmCCN4a9hKfP99A12H+7c8tIgeNjPTdPa2/Jj2sglGd
rIdEJCCAeK1xqBhs4tAuviKOS9Nj7j2WdZ9eKDXOodk5DtMhhGtYUBaaT7JKSlL1
/+TKZBAanYjGV5YdWzBMG0sbZOa5gqB/yUInuNgTUgWNB/OIr2lOyAlFwHv2KIzj
anJnoVnk+lCoL4Ki+xw69ygbh/JFEI6kN6qCnB7LWQa1hLGKFRcIL7LvvLDPRFnm
Cv0bjHZK/Uk8T5i7dDZw2PUxSuLMV0lGDF6wXVKMJbgsoei+Xg+YwWwGDfF2ohOr
Vw+3DpomesK0vqy5l1MtX1D5YYpPK4EQZQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:13 2025 by rpki-client