Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/8BB62454AEAA11EA816DD75DC4F9AE02.roa
File: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (raw, json)
Hash identifier: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=
Subject key identifier: 52:69:CC:A7:61:0E:7B:D2:93:03:97:09:66:66:2B:6D:60:3E:CC:3B
Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial: 363D
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/8BB62454AEAA11EA816DD75DC4F9AE02.roa
Signing time: Mon 02 Dec 2024 14:30:33 +0000
ROA not before: Mon 02 Dec 2024 14:30:33 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 140618
IP address blocks: 122.154.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13885 (0x363d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475
Validity
Not Before: Dec 2 14:30:33 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674dc489-096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:7e:96:7a:eb:a6:f0:1c:85:9d:b5:38:3c:
97:58:1e:8a:e6:5e:4e:0b:5d:ef:46:2c:de:2f:7a:
c8:23:c6:b8:83:01:ec:fe:a9:07:2f:1f:42:81:c9:
51:fc:9e:74:2e:e4:e3:42:33:24:5b:92:ca:86:a8:
bc:27:d4:80:cc:5c:f2:d1:bb:84:59:f7:ea:7b:de:
bb:d4:17:cb:23:3b:79:ec:0e:f7:4a:8b:e1:0c:e8:
17:cc:39:1d:10:0e:03:03:0d:f5:f1:87:ec:7b:ef:
37:cb:48:a8:6c:71:9a:09:1b:4b:96:e0:c6:df:a8:
3e:9c:77:86:4e:d5:1a:42:51:fd:e3:b5:6c:9e:6f:
cc:13:5f:d7:e9:1a:8b:79:5f:58:7a:ca:52:8e:79:
d9:44:02:2f:36:56:39:c3:68:40:ba:73:2f:ef:73:
8c:6b:95:f0:df:b6:6f:e0:77:0b:ce:ea:20:5b:28:
ea:99:94:bf:a9:1b:96:54:b9:ec:aa:28:28:d8:ac:
d5:98:52:db:77:31:2a:59:ab:95:65:41:79:b5:ef:
53:f9:a0:b1:c7:66:ae:20:00:d0:e5:30:df:aa:40:
ad:32:b9:9c:ba:b8:91:e0:49:70:08:bb:e3:9d:e0:
14:b3:ff:f1:d5:77:55:d8:32:e5:d4:65:9e:a8:28:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:69:CC:A7:61:0E:7B:D2:93:03:97:09:66:66:2B:6D:60:3E:CC:3B
X509v3 Authority Key Identifier:
keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/8BB62454AEAA11EA816DD75DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.154.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e2:35:3f:5a:09:c0:79:9d:a6:e0:4b:65:08:71:ea:67:32:
b3:1b:f0:1d:0a:1d:93:ba:c7:79:d3:93:20:b7:56:20:51:c8:
c3:63:18:09:88:8d:47:fa:76:0a:db:44:c8:8d:9f:94:8f:81:
21:3a:24:0b:f1:47:e2:22:57:17:9d:76:07:79:6c:ab:76:0f:
90:fc:57:e1:ed:56:4c:d7:11:e6:59:0e:cc:6c:59:57:c6:32:
a9:4a:c6:ae:31:76:c1:b0:72:33:20:a9:98:17:3f:26:b2:bb:
e8:59:13:97:ee:78:2d:4f:6a:58:dc:7d:5a:03:07:8a:2b:b8:
3b:8f:36:f1:76:0a:39:30:4d:46:66:56:d6:0a:76:48:89:1b:
66:f1:4b:8d:2c:2c:88:52:cf:70:57:fc:6b:13:0b:b1:7f:9c:
04:a7:08:49:2e:0d:83:d1:b0:fc:8f:e1:22:6b:37:8d:18:2e:
bb:aa:1f:30:34:18:be:08:43:be:ae:32:83:1a:82:a5:af:dd:
ca:3d:32:00:fc:56:99:81:64:96:95:77:19:70:b1:e3:f0:b4:
5a:a3:bf:bd:1f:01:ed:93:39:39:04:f3:d2:fd:e1:3d:7c:a5:
ca:0f:88:cd:a1:89:08:ea:ec:8e:e1:ac:0b:74:a3:41:a1:0e:
7f:2d:01:c1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz
M0E4ODc1MEUwHhcNMjQxMjAyMTQzMDMzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRkYzQ4OS0wOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk0t+lnrrpvAchZ21ODyXWB6K5l5OC13vRizeL3rII8a4gwHs/qkHLx9CgclR
/J50LuTjQjMkW5LKhqi8J9SAzFzy0buEWffqe9671BfLIzt57A73SovhDOgXzDkd
EA4DAw318Yfse+83y0iobHGaCRtLluDG36g+nHeGTtUaQlH947Vsnm/ME1/X6RqL
eV9YespSjnnZRAIvNlY5w2hAunMv73OMa5Xw37Zv4HcLzuogWyjqmZS/qRuWVLns
qigo2KzVmFLbdzEqWauVZUF5te9T+aCxx2auIADQ5TDfqkCtMrmcuriR4ElwCLvj
neAUs//x1XdV2DLl1GWeqCgKXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFJpzKdh
DnvSkwOXCWZmK21gPsw7MB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE
NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvOEJCNjI0NTRB
RUFBMTFFQTgxNkRENzVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB6mlIwDQYJKoZIhvcNAQELBQADggEBAAziNT9aCcB5nabg
S2UIcepnMrMb8B0KHZO6x3nTkyC3ViBRyMNjGAmIjUf6dgrbRMiNn5SPgSE6JAvx
R+IiVxeddgd5bKt2D5D8V+HtVkzXEeZZDsxsWVfGMqlKxq4xdsGwcjMgqZgXPyay
u+hZE5fueC1PaljcfVoDB4oruDuPNvF2CjkwTUZmVtYKdkiJG2bxS40sLIhSz3BX
/GsTC7F/nASnCEkuDYPRsPyP4SJrN40YLruqHzA0GL4IQ76uMoMagqWv3co9MgD8
VpmBZJaVdxlwsePwtFqjv70fAe2TOTkE89L94T18pcoPiM2hiQjq7I7hrAt0o0Gh
Dn8tAcE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:18:00 2025 by rpki-client