Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/67FF7710E47611EBA280A428C4F9AE02.roa
File: 67FF7710E47611EBA280A428C4F9AE02.roa (raw, json)
Hash identifier: ZS18OpM+XqKdg29TqWLo9nUZKF8GGkc1hem/TT9LNHk=
Subject key identifier: C1:49:D2:B9:A0:42:EB:9A:B1:57:E9:36:94:BC:8C:50:5A:8F:E8:7A
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 03B4
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/67FF7710E47611EBA280A428C4F9AE02.roa
Signing time: Wed 14 Jul 2021 07:37:57 +0000
ROA not before: Wed 14 Jul 2021 07:37:57 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 62642
IP address blocks: 139.190.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948 (0x3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Jul 14 07:37:57 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=60ee9454-6796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:73:4a:17:24:8d:38:47:cf:12:74:42:b4:
70:00:59:78:2a:32:bf:90:31:c0:96:6f:fe:a2:96:
8b:17:da:e8:a2:07:3a:e6:2c:a0:1a:62:b5:9d:81:
75:02:e4:51:16:15:b0:5a:6c:97:fe:b8:8f:62:4f:
bc:23:50:e9:83:f8:1f:9f:69:1d:2a:19:80:f1:13:
8f:67:3f:f7:9e:69:c5:f2:01:e4:b6:a4:7f:64:af:
af:d4:dd:30:a4:f3:30:4c:17:60:80:a4:5f:5b:e6:
b7:62:48:cf:6e:44:d5:31:77:cf:62:3e:e0:3b:fd:
39:8d:77:34:7c:a1:d6:41:31:bd:6c:0a:28:f3:8f:
bb:20:fe:22:fd:03:71:02:9b:d8:88:79:2f:0f:d2:
26:92:44:17:28:03:98:3f:6b:ce:b4:8b:9a:35:2a:
00:dd:3a:77:be:70:d1:3f:d4:94:2c:40:c2:d5:e3:
28:57:41:22:45:2f:0b:d5:f7:61:59:54:4f:86:77:
89:44:f9:dd:76:7a:d7:88:74:c8:13:9e:9f:4d:30:
f6:bc:82:0b:45:b8:da:7c:cd:a0:bb:71:35:33:f9:
25:cc:e5:91:37:f4:13:41:e8:cf:9d:28:85:b0:ba:
1e:28:4e:3c:c8:a9:8a:93:44:2f:cb:9c:5b:c6:c0:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:D2:B9:A0:42:EB:9A:B1:57:E9:36:94:BC:8C:50:5A:8F:E8:7A
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/67FF7710E47611EBA280A428C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/19
Signature Algorithm: sha256WithRSAEncryption
23:3c:20:66:2c:8b:72:05:b5:ee:e9:df:92:ce:28:9c:45:c8:
18:4d:cd:30:75:b3:9f:8a:f9:e4:59:d8:cd:da:34:51:6b:63:
02:81:78:1e:9a:d8:0b:8c:8b:ec:fb:03:8b:dd:94:f5:05:dc:
d3:03:15:80:d9:b4:98:83:da:e3:5d:e0:33:57:24:04:84:74:
fd:1f:3a:45:69:2a:f3:6e:9e:86:e4:d4:90:5d:e6:b7:86:bc:
08:ca:a5:a8:c9:56:eb:9e:a1:94:e4:e1:d2:47:ec:3c:b4:56:
99:8e:d4:fb:07:09:b1:c1:75:49:37:81:fa:d7:f4:cd:c5:dd:
f8:8a:75:2e:b8:e0:52:ab:7c:af:ee:7b:ae:d5:3c:cf:2d:f8:
63:62:ae:06:81:68:99:23:42:96:a4:a0:92:00:5a:bd:42:5e:
f3:6c:44:a0:fe:07:68:8d:e2:06:10:66:06:aa:09:66:22:d9:
fb:77:37:87:1b:30:0d:98:a9:f9:14:51:db:a7:e7:24:fa:5b:
23:6d:2d:da:28:62:16:8e:1a:86:33:82:18:a9:a4:c2:91:e1:
a8:16:89:03:84:26:be:e7:77:43:21:09:ac:2e:05:43:86:67:
45:66:de:17:29:f3:77:4c:56:ef:05:71:7d:64:af:d2:b6:bc:
8d:63:f5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:31 2025 by rpki-client