Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/414EA464DE1F11EF81B4222BC4F9AE02.roa
File:                     414EA464DE1F11EF81B4222BC4F9AE02.roa (raw, json)
Hash identifier:          x6uHYijSXpLGTRgr8xM0at/GHRKhhjtomTdgC6ItDOI=
Subject key identifier:   B6:2C:35:31:55:9B:0D:8E:5F:43:29:02:57:24:82:71:D9:30:05:3F
Certificate issuer:       /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial:       1833
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/414EA464DE1F11EF81B4222BC4F9AE02.roa
Signing time:             Wed 29 Jan 2025 09:00:49 +0000
ROA not before:           Wed 29 Jan 2025 09:00:49 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     17911
IP address blocks:        122.129.64.0/24 maxlen: 24
                          122.129.66.0/24 maxlen: 24
                          122.129.69.0/24 maxlen: 24
                          122.129.72.0/24 maxlen: 24
                          122.129.73.0/24 maxlen: 24
                          122.129.74.0/24 maxlen: 24
                          122.129.75.0/24 maxlen: 24
                          122.129.76.0/24 maxlen: 24
                          122.129.77.0/24 maxlen: 24
                          122.129.78.0/24 maxlen: 24
                          122.129.79.0/24 maxlen: 24
                          122.129.80.0/24 maxlen: 24
                          122.129.81.0/24 maxlen: 24
                          122.129.82.0/24 maxlen: 24
                          122.129.84.0/24 maxlen: 24
                          122.129.85.0/24 maxlen: 24
                          122.129.89.0/24 maxlen: 24
                          122.129.90.0/24 maxlen: 24
                          122.129.91.0/24 maxlen: 24
                          122.129.92.0/24 maxlen: 24
                          122.129.93.0/24 maxlen: 24
                          122.129.94.0/24 maxlen: 24
                          203.128.0.0/24 maxlen: 24
                          203.128.1.0/24 maxlen: 24
                          203.128.3.0/24 maxlen: 24
                          203.128.4.0/24 maxlen: 24
                          203.128.5.0/24 maxlen: 24
                          203.128.6.0/24 maxlen: 24
                          203.128.7.0/24 maxlen: 24
                          203.128.8.0/24 maxlen: 24
                          203.128.9.0/24 maxlen: 24
                          203.128.11.0/24 maxlen: 24
                          203.128.12.0/24 maxlen: 24
                          203.128.13.0/24 maxlen: 24
                          203.128.14.0/24 maxlen: 24
                          203.128.15.0/24 maxlen: 24
                          203.128.16.0/24 maxlen: 24
                          203.128.17.0/24 maxlen: 24
                          203.128.18.0/24 maxlen: 24
                          203.128.19.0/24 maxlen: 24
                          203.128.21.0/24 maxlen: 24
                          203.128.22.0/24 maxlen: 24
                          203.128.23.0/24 maxlen: 24
                          203.128.25.0/24 maxlen: 24
                          203.128.26.0/24 maxlen: 24
                          203.128.27.0/24 maxlen: 24
                          203.128.28.0/24 maxlen: 24
                          203.128.29.0/24 maxlen: 24
                          203.128.30.0/24 maxlen: 24
                          203.128.31.0/24 maxlen: 24
                          2400:4f00::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6195 (0x1833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
        Validity
            Not Before: Jan 29 09:00:49 2025 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6799ee41-b235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a4:5d:06:4a:c1:57:aa:85:fe:6c:f2:9f:4e:
                    ed:5f:45:65:22:ad:ab:83:9f:ef:9d:3f:b0:57:7a:
                    04:bd:74:d9:47:a7:12:f4:6f:62:65:15:12:3b:31:
                    5b:0f:e7:f7:ff:72:6d:15:43:3f:79:e0:2c:04:0d:
                    ec:31:04:24:37:e1:73:d3:2f:0a:b1:6d:ad:ed:ce:
                    27:3e:33:ff:9e:af:f8:e5:58:15:c4:8b:42:b8:15:
                    a7:68:ad:d8:4d:49:71:8b:ff:21:9c:38:73:3f:1d:
                    00:1a:b0:55:2c:97:bc:5c:50:46:24:09:36:bd:ee:
                    3c:6d:2e:0a:8d:88:d9:57:d0:66:7e:38:c0:f8:05:
                    23:7a:f8:26:32:fd:5a:3a:87:00:aa:3b:3c:68:4e:
                    04:e5:f8:7c:b9:e9:85:79:fb:4f:f1:c4:11:e7:dd:
                    21:9f:35:76:a3:67:2c:08:a2:f1:73:18:08:7f:7b:
                    af:5e:b4:8e:c0:5e:5d:08:f3:4c:a4:fe:38:bf:7f:
                    a5:f1:30:ef:21:0d:25:e0:08:58:cb:67:3e:2a:d3:
                    58:3d:66:a2:a3:af:55:e1:28:38:f8:ba:0c:c1:eb:
                    80:cc:90:74:0f:b7:8e:0d:8c:b5:c1:66:02:3f:1c:
                    e4:f4:98:1d:b8:43:74:ba:7a:3c:cf:98:0a:45:fa:
                    5c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2C:35:31:55:9B:0D:8E:5F:43:29:02:57:24:82:71:D9:30:05:3F
            X509v3 Authority Key Identifier:
                keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/414EA464DE1F11EF81B4222BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.129.64.0/24
                  122.129.66.0/24
                  122.129.69.0/24
                  122.129.72.0-122.129.82.255
                  122.129.84.0/23
                  122.129.89.0-122.129.94.255
                  203.128.0.0/23
                  203.128.3.0-203.128.9.255
                  203.128.11.0-203.128.19.255
                  203.128.21.0-203.128.23.255
                  203.128.25.0-203.128.31.255
                IPv6:
                  2400:4f00::/36

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:4a:15:7c:2e:db:da:6a:7c:9a:89:e7:8e:ba:b9:a0:ca:
         d0:0c:5c:54:74:47:2a:f4:93:5d:c8:62:b6:90:88:a4:f1:37:
         ec:b6:ba:e0:77:52:54:89:1a:86:13:bf:af:fb:1d:ec:82:5f:
         b6:3a:28:6f:e8:e6:f4:69:49:16:35:78:cc:ba:f3:f8:2d:62:
         e5:71:2a:ff:2b:a5:cc:87:04:57:4b:a9:20:4c:cc:9f:95:37:
         88:c0:4c:94:09:bf:46:bb:c1:bf:e9:5f:0a:96:d4:19:7d:aa:
         d3:fc:59:b4:e3:2d:2b:7c:88:6d:1d:53:58:de:fa:31:97:2f:
         13:cc:84:30:0e:d5:5c:0f:02:37:6f:15:2e:b7:9b:82:35:16:
         e6:43:e2:d3:31:d2:1b:6c:bd:42:d6:1b:34:b5:39:c5:f9:14:
         0c:4d:cc:42:03:f5:7a:6e:25:b8:0e:19:72:c2:ca:4a:89:ac:
         2d:55:d1:38:d5:23:3c:fe:ca:2f:63:2a:85:0e:f8:0b:f7:77:
         38:8f:08:38:0f:a5:95:99:8d:2e:23:71:65:d6:6d:72:0b:42:
         48:bc:9b:ec:8a:81:ae:ae:5f:1f:cf:df:68:5c:d2:2a:92:be:
         70:95:ab:3e:e7:a5:a6:4c:70:35:1e:89:70:c3:5e:2e:b1:4d:
         33:a7:24:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:26:41 2025 by rpki-client