Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/1760C2F0DE0F11EFBC253748C4F9AE02.roa
File: 1760C2F0DE0F11EFBC253748C4F9AE02.roa (raw, json)
Hash identifier: tIhA970mB8V674A9eF2J4dUS1X9LR4sZGYWwNUTXbIU=
Subject key identifier: 55:AC:29:63:39:ED:9B:C2:40:8C:EB:21:E6:A6:68:46:23:52:BF:02
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 182F
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/1760C2F0DE0F11EFBC253748C4F9AE02.roa
Signing time: Wed 29 Jan 2025 08:58:34 +0000
ROA not before: Wed 29 Jan 2025 08:58:34 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 134489
IP address blocks: 122.129.86.0/24 maxlen: 24
122.129.88.0/24 maxlen: 24
203.128.2.0/24 maxlen: 24
203.128.10.0/24 maxlen: 24
203.128.20.0/24 maxlen: 24
203.128.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6191 (0x182f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Jan 29 08:58:34 2025 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6799edba-926f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:e1:27:4e:9a:a2:39:c2:03:be:eb:fa:e1:
1f:72:5a:d5:31:0a:4b:28:c1:bc:38:2d:11:05:86:
d1:ab:ef:1a:2c:56:ff:e5:36:f8:71:51:e7:0a:ab:
68:8a:3a:1d:15:77:e8:11:2e:b6:d6:a9:1f:5b:2c:
6e:8b:7b:6e:ea:0e:92:97:96:85:9a:2a:52:e0:de:
36:ff:b3:e4:49:e5:e0:0e:3d:a4:ad:05:ff:46:7d:
c4:27:6d:31:cb:90:c1:54:b1:41:19:01:2a:1a:81:
67:35:83:7c:ed:44:e4:d3:fd:4a:a7:84:1c:63:ab:
23:e2:b0:41:11:64:98:5d:91:18:44:3e:d9:a2:f9:
dc:b5:89:20:93:b0:e4:17:e6:c3:36:b8:7b:c8:32:
5e:c6:a2:dc:9b:96:2a:ab:44:b9:cd:c9:e3:8f:f4:
ac:29:f7:c8:77:ce:a6:64:dd:c4:98:8e:41:6d:0c:
e5:74:eb:99:e5:66:90:29:d4:44:83:1e:44:28:27:
08:de:f4:4a:ff:99:de:3d:8f:fa:cd:e4:6a:b7:31:
0f:2d:8c:16:14:fb:d7:08:98:a7:f9:89:85:5d:67:
39:fa:a3:65:fe:97:56:9b:7d:0b:e3:17:bd:8c:42:
a5:7f:0a:7d:26:b7:a8:04:73:7e:2d:aa:ab:f0:51:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AC:29:63:39:ED:9B:C2:40:8C:EB:21:E6:A6:68:46:23:52:BF:02
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/1760C2F0DE0F11EFBC253748C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.129.86.0/24
122.129.88.0/24
203.128.2.0/24
203.128.10.0/24
203.128.20.0/24
203.128.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:df:26:7f:f7:20:ee:3a:c1:cc:8e:33:76:fd:77:24:4a:d6:
3f:20:c2:9f:b7:c5:8b:75:30:dc:7a:4e:3d:49:bd:87:47:3a:
09:86:b4:29:39:bf:0a:4e:7c:41:96:fd:80:9b:5b:b8:ba:98:
21:c1:81:7d:8f:5e:11:9d:c0:00:93:25:2a:46:a2:5b:34:ed:
3f:b7:67:de:a4:a5:db:e5:d1:19:79:7c:d5:89:ba:be:1b:7c:
e6:fe:8d:8b:2f:6b:f4:77:b6:46:9e:4f:16:13:01:18:26:39:
58:86:21:f0:98:1c:da:58:d1:21:35:ad:01:02:07:61:3f:66:
3b:02:1b:3b:15:d0:e8:c3:bb:36:78:ff:80:f1:78:46:14:a8:
62:2d:3c:9d:77:22:7b:a8:33:8a:9b:23:0f:c7:f4:76:5a:07:
f6:05:60:5c:68:55:19:08:6f:2e:ea:24:13:11:e8:51:d0:a6:
24:a0:35:22:c2:dc:cf:5c:97:29:99:9b:0a:e4:dd:b8:b0:44:
00:d8:ac:ce:f0:c3:0e:d4:24:bb:55:83:cc:b5:4b:af:11:90:
4a:2f:56:48:30:02:40:d8:14:d0:02:03:b8:7b:50:63:10:18:
df:7a:f9:17:c6:f8:03:08:68:27:1c:3d:07:8a:7a:e0:c4:b6:
60:2b:38:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:20 2025 by rpki-client