Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D0C30AAED19011EFB9DDF30DC4F9AE02.roa
File: D0C30AAED19011EFB9DDF30DC4F9AE02.roa (raw, json)
Hash identifier: wtOuXEEJjUYTWpY0E5t1TiUGzbI8GDejma2rE9RJ+hE=
Subject key identifier: F1:04:6D:A5:72:71:64:A5:6F:9F:70:60:C7:78:1A:B9:22:3D:97:D8
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0D7C
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D0C30AAED19011EFB9DDF30DC4F9AE02.roa
Signing time: Fri 17 Jan 2025 12:43:00 +0000
ROA not before: Fri 17 Jan 2025 12:43:00 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 398704
IP address blocks: 139.190.0.0/21 maxlen: 24
139.190.40.0/21 maxlen: 24
139.190.56.0/21 maxlen: 24
139.190.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3452 (0xd7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Jan 17 12:43:00 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=678a5053-af23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:b7:11:fe:02:60:86:e2:3b:21:cc:2a:5a:
60:4c:81:3b:b4:96:f5:5e:9f:66:14:d1:c3:54:8d:
ce:b1:53:9c:a4:a5:09:5c:e7:49:ed:db:6e:cc:d2:
4b:89:40:da:63:e3:ed:05:cb:ff:70:68:6a:c6:25:
5a:95:47:bd:46:32:ae:07:22:d8:88:fc:36:d9:7f:
e2:f2:5e:e2:dd:97:5b:d1:58:41:29:de:e1:62:1e:
39:43:60:1b:bf:5c:08:45:a6:b3:cf:9f:59:e9:2b:
c4:bd:9f:69:8b:7e:52:f0:77:69:60:40:6e:43:52:
9e:85:b0:17:d0:62:54:1c:73:50:6a:7f:6c:0a:cc:
0f:63:27:22:de:29:9f:79:52:2e:eb:00:24:8f:be:
51:f8:fc:13:dd:ea:66:e8:fb:82:4d:7d:40:11:55:
a2:a0:fa:1a:7e:48:e7:ce:6a:61:a8:5e:f9:2a:7c:
d1:74:c5:9b:97:00:a7:0a:d2:7c:56:da:5a:05:5f:
e6:55:2e:43:35:d2:98:f8:ce:e7:fa:f0:c5:80:53:
e9:28:ba:39:52:f5:aa:25:85:f5:ef:3c:93:d0:0c:
1e:c1:b2:8a:11:aa:a4:26:bc:ce:77:93:b0:f0:de:
28:b7:a5:ee:80:3f:a5:84:2b:d3:5b:12:f9:a7:08:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:04:6D:A5:72:71:64:A5:6F:9F:70:60:C7:78:1A:B9:22:3D:97:D8
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D0C30AAED19011EFB9DDF30DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/21
139.190.40.0/21
139.190.56.0/21
139.190.80.0/21
Signature Algorithm: sha256WithRSAEncryption
10:12:3d:87:d8:2a:5b:7f:4e:51:51:9d:3c:da:7f:3c:71:59:
fb:c3:b6:e2:4d:7c:0f:06:9c:4e:85:cc:34:93:4c:42:55:e5:
28:77:51:4b:8b:12:a1:6e:8a:ff:fe:6b:9c:1f:33:c7:32:cd:
b9:b9:87:16:03:bc:52:f3:40:75:82:a5:98:bd:9d:d9:26:67:
79:4d:46:43:54:b8:c3:95:bd:da:00:4a:08:18:ce:2e:a1:2a:
4f:14:46:cd:18:cd:95:fe:51:33:19:42:56:8d:6a:ba:16:4d:
7b:03:87:75:4a:9a:09:af:a0:d6:6b:e1:e4:66:84:9f:50:95:
11:5c:79:c1:38:95:11:9c:a4:7f:30:4a:78:54:53:36:eb:cd:
09:1b:30:37:d1:87:e4:bb:11:d6:c8:e7:61:6c:df:65:d4:ce:
c6:0c:f9:5d:b6:af:7c:19:d6:d0:a0:7d:82:6d:cd:ce:9d:3e:
db:c7:86:3c:aa:9b:1b:5b:fb:17:ef:c2:fc:2a:05:56:79:0c:
a8:75:da:6d:04:25:bc:9f:7b:65:32:78:de:b2:4c:52:69:77:
20:e2:75:89:73:0a:bf:ce:ae:27:ad:92:e7:5a:9e:bd:ad:1b:
62:77:8c:3a:0a:95:48:6d:c3:dc:cc:cf:2a:67:22:58:ab:b8:
e9:f7:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:24:01 2025 by rpki-client