Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/83D55EB0C69E11EFB4C2C95CC4F9AE02.roa
File: 83D55EB0C69E11EFB4C2C95CC4F9AE02.roa (raw, json)
Hash identifier: BmQkrLzJUHxNkqYxu0I6TUbE9VmrTPcSMS+T35J/AL4=
Subject key identifier: 1B:B3:5F:98:F8:5C:1B:FC:C8:70:F2:26:E6:A4:EF:2F:F4:52:D6:0E
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 1811
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/83D55EB0C69E11EFB4C2C95CC4F9AE02.roa
Signing time: Mon 30 Dec 2024 11:09:19 +0000
ROA not before: Mon 30 Dec 2024 11:09:19 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 17911
IP address blocks: 122.129.64.0/24 maxlen: 24
122.129.66.0/24 maxlen: 24
122.129.69.0/24 maxlen: 24
122.129.72.0/24 maxlen: 24
122.129.73.0/24 maxlen: 24
122.129.74.0/24 maxlen: 24
122.129.75.0/24 maxlen: 24
122.129.76.0/24 maxlen: 24
122.129.77.0/24 maxlen: 24
122.129.78.0/24 maxlen: 24
122.129.79.0/24 maxlen: 24
122.129.80.0/24 maxlen: 24
122.129.81.0/24 maxlen: 24
122.129.82.0/24 maxlen: 24
122.129.84.0/24 maxlen: 24
122.129.85.0/24 maxlen: 24
122.129.89.0/24 maxlen: 24
122.129.90.0/24 maxlen: 24
122.129.91.0/24 maxlen: 24
122.129.92.0/24 maxlen: 24
122.129.93.0/24 maxlen: 24
122.129.94.0/24 maxlen: 24
203.128.0.0/24 maxlen: 24
203.128.1.0/24 maxlen: 24
203.128.2.0/24 maxlen: 24
203.128.3.0/24 maxlen: 24
203.128.4.0/24 maxlen: 24
203.128.5.0/24 maxlen: 24
203.128.6.0/24 maxlen: 24
203.128.7.0/24 maxlen: 24
203.128.8.0/24 maxlen: 24
203.128.9.0/24 maxlen: 24
203.128.11.0/24 maxlen: 24
203.128.12.0/24 maxlen: 24
203.128.13.0/24 maxlen: 24
203.128.14.0/24 maxlen: 24
203.128.15.0/24 maxlen: 24
203.128.16.0/24 maxlen: 24
203.128.17.0/24 maxlen: 24
203.128.18.0/24 maxlen: 24
203.128.19.0/24 maxlen: 24
203.128.20.0/24 maxlen: 24
203.128.21.0/24 maxlen: 24
203.128.22.0/24 maxlen: 24
203.128.25.0/24 maxlen: 24
203.128.26.0/24 maxlen: 24
203.128.27.0/24 maxlen: 24
203.128.28.0/24 maxlen: 24
203.128.29.0/24 maxlen: 24
203.128.30.0/24 maxlen: 24
203.128.31.0/24 maxlen: 24
2400:4f00::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6161 (0x1811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Dec 30 11:09:19 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=67727f5f-182c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:03:f8:40:a0:41:a6:87:d9:cd:ec:bb:d3:0d:
85:56:b2:c0:83:76:a4:52:58:29:21:95:72:6d:79:
88:13:14:ab:36:e6:90:31:80:e3:b2:ed:17:9a:25:
ba:f8:89:07:43:3a:8d:01:83:b9:13:5e:9a:30:bd:
d1:7f:82:e3:8a:a7:8d:fa:0e:1f:a7:88:65:06:6b:
12:97:2f:20:e0:46:ed:d8:7f:4c:c9:b8:3c:0b:bb:
22:21:a2:32:a6:96:04:2c:7c:07:8c:98:5d:b3:22:
e7:db:f9:d7:03:67:c7:6b:f2:2c:d2:ee:9d:2e:f8:
07:54:34:c2:5e:73:b7:b1:bc:8b:ec:11:d6:f0:82:
25:b8:88:6e:34:c7:96:82:a9:75:b9:3d:52:b7:a1:
ec:d3:bf:ca:d2:60:1b:e0:21:d2:6e:49:1a:ed:42:
11:f1:a6:e5:ba:99:76:ee:30:7b:0d:ef:4a:69:40:
3b:8c:1e:d4:b3:d1:2d:ec:06:78:7c:4d:59:29:43:
7e:6a:54:bc:9e:40:68:1d:26:9a:02:a7:38:18:e1:
b5:1a:a2:35:fd:03:1e:36:e4:65:ae:7b:b6:76:bc:
6b:fa:e2:3b:93:14:81:05:f2:15:35:c3:71:3b:ae:
83:8a:e6:ee:a1:ce:08:3a:bc:4b:e1:6d:61:a6:e7:
61:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B3:5F:98:F8:5C:1B:FC:C8:70:F2:26:E6:A4:EF:2F:F4:52:D6:0E
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/83D55EB0C69E11EFB4C2C95CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.129.64.0/24
122.129.66.0/24
122.129.69.0/24
122.129.72.0-122.129.82.255
122.129.84.0/23
122.129.89.0-122.129.94.255
203.128.0.0-203.128.9.255
203.128.11.0-203.128.22.255
203.128.25.0-203.128.31.255
IPv6:
2400:4f00::/36
Signature Algorithm: sha256WithRSAEncryption
6b:af:ca:c0:3a:de:5e:13:18:9a:78:00:96:84:28:2c:53:25:
4c:8f:2c:23:a4:15:9c:5e:bc:10:3b:5a:76:3d:06:bd:ae:a9:
3a:b4:38:27:87:46:b8:22:0d:a7:3b:d2:f9:6f:ff:7a:d8:1f:
29:f3:b8:3d:41:65:4a:45:db:1f:06:8c:6d:52:dc:df:a4:11:
4d:42:07:95:49:38:db:bd:a2:39:ab:5c:28:4d:a6:bc:be:f7:
d4:dd:84:54:15:5b:4b:e9:c2:07:2f:bc:f0:de:72:0d:76:ce:
4f:4b:cc:8e:c4:77:d1:da:08:b1:2e:79:91:af:34:d5:bc:77:
4f:84:b9:f4:16:33:5f:a8:a8:92:bf:3c:d7:6a:58:57:c4:26:
37:cb:90:99:27:59:96:97:87:c1:14:3a:f5:25:a3:0a:79:03:
85:c7:50:3e:ca:cd:be:56:d9:c7:62:d4:31:2a:7e:25:f0:c5:
fe:01:34:7f:da:23:91:08:99:61:5e:8b:36:a7:5a:d1:b5:b2:
ad:68:08:a4:98:0b:b6:d1:f1:b9:64:93:de:0a:b4:b7:30:87:
60:78:61:fa:89:bf:f7:9b:cc:1a:02:c4:25:11:1e:6e:d3:66:
92:46:f1:f8:24:e9:6e:a7:d0:ee:ba:ee:ce:d0:e7:0c:88:e5:
6f:f7:53:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:02 2025 by rpki-client