Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa
File: 2F903356A40311EFBD995535C4F9AE02.roa (raw, json)
Hash identifier: uO169iwF7Z+iK825Wy21kUBoHTcQcMmcJT8QN4XB2IQ=
Subject key identifier: A5:A8:50:C8:44:63:BE:FB:12:C4:3B:69:36:18:C5:A1:8C:57:CF:79
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 1841
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa
Signing time: Wed 12 Feb 2025 17:24:25 +0000
ROA not before: Wed 12 Feb 2025 17:24:25 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 147302
IP address blocks: 122.129.65.0/24 maxlen: 24
122.129.67.0/24 maxlen: 24
122.129.68.0/24 maxlen: 24
122.129.70.0/24 maxlen: 24
122.129.71.0/24 maxlen: 24
122.129.83.0/24 maxlen: 24
122.129.87.0/24 maxlen: 24
122.129.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6209 (0x1841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49
Validity
Not Before: Feb 12 17:24:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67acd949-fc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:88:34:a7:4d:a5:94:93:b6:cf:a9:97:91:
c8:41:00:3e:55:41:02:43:4c:d1:29:46:28:69:3c:
5f:f7:0d:25:e8:d8:dc:28:c4:2b:e8:92:82:b5:3e:
1d:df:09:41:22:6e:9b:12:d0:6f:40:08:0c:c4:94:
1a:6e:7e:ac:b1:95:bc:15:49:00:ab:25:26:c5:9a:
2e:95:17:da:83:45:86:6c:92:cf:ee:0b:9b:b7:8a:
15:3f:73:c5:c9:8a:c2:82:a9:b2:c4:8e:1a:c9:1a:
a0:49:a8:69:6f:16:ff:b1:7d:f7:7d:11:e1:70:ae:
ae:cf:00:16:c8:8a:92:07:af:ad:b3:d4:54:ee:7a:
1a:ff:82:04:6b:46:67:48:d8:24:94:66:ae:8c:86:
8d:d1:c0:22:ec:b8:b4:7c:de:13:9d:b1:66:63:44:
aa:52:ab:9e:aa:c7:90:03:ab:8b:ae:e2:bc:f0:dd:
f4:48:08:71:88:dc:f1:59:2a:6c:b6:fe:17:5d:57:
5a:c7:a8:f0:05:1d:12:47:01:d2:a3:9c:a4:02:fc:
7e:67:ef:46:df:43:70:fc:0c:68:4e:fc:8b:49:b9:
9f:a9:22:cf:69:40:2a:cf:68:37:26:db:a2:66:2c:
0f:04:e5:98:ed:5a:4b:39:00:48:d1:e7:f3:64:28:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A8:50:C8:44:63:BE:FB:12:C4:3B:69:36:18:C5:A1:8C:57:CF:79
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.129.65.0/24
122.129.67.0-122.129.68.255
122.129.70.0/23
122.129.83.0/24
122.129.87.0/24
122.129.95.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e0:15:1e:9b:8a:62:c6:b9:bc:5a:34:2a:a5:e8:98:44:dd:
43:61:f7:4e:bd:b0:6d:02:9a:c6:53:91:71:e6:13:19:5d:32:
42:b0:0b:b4:21:f1:1d:90:9a:6d:7f:c8:6b:bb:13:0d:2c:34:
61:55:13:a0:4a:6e:5a:ee:45:15:4a:47:44:31:2f:84:d8:1c:
87:4d:bb:3e:3a:27:09:b6:68:bf:f7:57:4c:0d:d5:31:42:f0:
27:ec:c9:56:a2:2e:2f:21:1e:9c:04:73:43:d1:70:42:7e:e8:
a1:a3:be:37:88:e1:c2:e7:e4:2d:72:8d:10:84:2a:0a:aa:1d:
29:ca:06:ee:4c:07:2d:c2:ae:c7:60:e3:ca:98:3c:8b:8c:bc:
ea:bc:1d:03:e3:17:c3:a9:50:9f:c5:8b:3e:b2:81:5a:47:d2:
7f:94:2f:53:1e:99:4b:1d:b3:41:c2:c0:13:27:0c:24:a3:b8:
43:95:ff:9f:08:36:63:66:58:68:86:02:4e:d4:7c:35:42:45:
22:70:41:ad:51:4f:e4:ec:e5:e2:85:2c:6e:10:00:70:2a:75:
6a:6d:2c:15:08:92:eb:49:c7:a0:88:a6:5b:42:55:a6:c2:45:
59:8f:a6:c5:5c:a5:20:3f:5b:45:0a:5d:66:f9:5c:3f:60:cb:
75:30:ee:48
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgICGEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC
MEZCOTQ1QkUwHhcNMjUwMjEyMTcyNDI1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2FjZDk0OS1mYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3/SINKdNpZSTts+pl5HIQQA+VUECQ0zRKUYoaTxf9w0l6NjcKMQr6JKCtT4d
3wlBIm6bEtBvQAgMxJQabn6ssZW8FUkAqyUmxZoulRfag0WGbJLP7gubt4oVP3PF
yYrCgqmyxI4ayRqgSahpbxb/sX33fRHhcK6uzwAWyIqSB6+ts9RU7noa/4IEa0Zn
SNgklGaujIaN0cAi7Li0fN4TnbFmY0SqUqueqseQA6uLruK88N30SAhxiNzxWSps
tv4XXVdax6jwBR0SRwHSo5ykAvx+Z+9G30Nw/AxoTvyLSbmfqSLPaUAqz2g3Jtui
ZiwPBOWY7VpLOQBI0efzZCi1tQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFKWoUMhE
Y777EsQ7aTYYxaGMV895MB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5
RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvMkY5MDMzNTZB
NDAzMTFFRkJEOTk1NTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E
NjA0MDIEAgABMCwDBAB6gUEwDAMEAHqBQwMEAHqBRAMEAXqBRgMEAHqBUwMEAHqB
VwMEAHqBXzANBgkqhkiG9w0BAQsFAAOCAQEAI+AVHpuKYsa5vFo0KqXomETdQ2H3
Tr2wbQKaxlORceYTGV0yQrALtCHxHZCabX/Ia7sTDSw0YVUToEpuWu5FFUpHRDEv
hNgch027PjonCbZov/dXTA3VMULwJ+zJVqIuLyEenARzQ9FwQn7ooaO+N4jhwufk
LXKNEIQqCqodKcoG7kwHLcKux2Djypg8i4y86rwdA+MXw6lQn8WLPrKBWkfSf5Qv
Ux6ZSx2zQcLAEycMJKO4Q5X/nwg2Y2ZYaIYCTtR8NUJFInBBrVFP5Ozl4oUsbhAA
cCp1am0sFQiS60nHoIimW0JVpsJFWY+mxVylID9bRQpdZvlcP2DLdTDuSA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:47:25 2025 by rpki-client