Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/F12668D88A8611EEA26CB71AC4F9AE02.roa
File: F12668D88A8611EEA26CB71AC4F9AE02.roa (raw, json)
Hash identifier: ta6FT5FWk5z7TBLpGFz72LSwIN2wjqvrWSYYCD+H4RM=
Subject key identifier: 4F:01:83:F1:69:E4:00:1F:AC:EA:24:4E:B3:A2:C0:4B:F8:1A:50:82
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 093B
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/F12668D88A8611EEA26CB71AC4F9AE02.roa
Signing time: Fri 24 Nov 2023 05:04:27 +0000
ROA not before: Fri 24 Nov 2023 05:04:27 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 54600
IP address blocks: 139.190.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2363 (0x93b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Nov 24 05:04:27 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65602edb-c3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:86:7e:06:cd:fc:21:26:f2:e6:65:c1:e9:
dc:d0:7a:d5:23:38:20:01:8f:fd:81:9d:e7:74:db:
71:e8:cc:ff:8f:05:75:92:6e:88:4f:04:d3:ca:fc:
78:8b:76:77:95:80:28:4b:5a:00:a3:08:77:99:1e:
41:7a:ba:43:f2:8f:fe:d9:cb:55:a3:2f:b7:5c:13:
9b:55:7f:52:aa:3c:88:b9:71:81:b7:b2:00:41:65:
52:b9:bc:a9:99:64:c4:ae:1e:e1:8b:eb:95:9f:21:
df:e1:ee:ce:f9:65:76:e3:9c:ab:75:9f:cd:ac:19:
21:26:f9:61:a1:f7:05:f2:e1:43:b0:16:99:b8:4f:
3e:f8:9c:5d:fc:f9:a8:4b:a7:d1:d8:45:a6:5e:bb:
12:e9:92:ef:a5:c4:14:1b:b2:fc:26:ba:a0:aa:de:
f9:76:69:09:ca:90:3f:ae:fb:87:d5:53:85:af:13:
14:aa:d9:ef:78:39:7f:a6:2e:d0:53:0b:32:6b:8a:
2f:dd:1c:7e:15:23:1c:10:a5:c9:b2:28:85:6e:d6:
74:30:ac:3b:48:6d:f0:c2:09:ef:23:b2:18:6e:2d:
18:69:d6:3f:74:3c:79:5f:9e:1f:65:17:93:7a:e7:
57:aa:ed:a6:09:5a:71:76:ea:4b:f6:9e:44:ad:83:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:01:83:F1:69:E4:00:1F:AC:EA:24:4E:B3:A2:C0:4B:F8:1A:50:82
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/F12668D88A8611EEA26CB71AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.112.0/22
Signature Algorithm: sha256WithRSAEncryption
27:e2:7d:e7:77:8e:69:b6:64:1c:1a:02:e8:94:78:35:a7:be:
a4:a5:85:ce:c4:b9:db:ae:12:db:d2:e1:f3:16:5d:b5:f9:0f:
60:f2:c4:1e:29:71:0a:a5:58:2e:96:b5:ed:6d:7a:fd:34:a7:
3e:09:70:92:75:f4:b9:1d:6c:c0:7d:b7:d0:3a:77:e8:59:67:
82:8f:19:cd:47:4c:ee:6f:35:1e:89:fd:d4:cd:24:54:0f:e6:
0b:97:2d:51:0f:7f:66:37:84:97:d7:6c:b7:51:f3:70:3b:1b:
01:dc:f8:d0:8b:09:f5:bd:97:e2:4d:c1:ad:37:5c:ff:6e:8b:
16:15:8e:1e:22:5c:50:d7:4e:12:2e:f9:5c:d4:3b:d3:56:a4:
29:3d:60:bf:52:d5:de:7d:32:d6:6b:de:ed:a7:12:dd:f7:1f:
72:f9:6a:0e:9d:54:d6:f3:73:41:5f:d4:b8:5f:e9:a4:5e:62:
61:64:ac:bc:e9:52:3b:bd:24:f8:5d:d0:20:d2:6d:63:4b:c7:
f4:88:6d:3f:9a:4b:1c:01:16:18:43:a8:ca:63:8d:d3:ab:db:
0f:ea:57:29:8f:79:e4:87:cb:43:29:d7:62:f5:e9:7f:11:4f:
79:e5:c4:d9:76:c5:22:db:38:14:74:10:4f:07:6e:18:10:e2:
7d:7d:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:39 2025 by rpki-client