Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/C4DFC25ACC0811EF89B82F24C4F9AE02.roa
File: C4DFC25ACC0811EF89B82F24C4F9AE02.roa (raw, json)
Hash identifier: 1276/1Fnd0lQeEgc52l1chvoqpkzyIPSHse2KCDYUeI=
Subject key identifier: 41:84:20:67:AF:4F:B9:13:F3:8B:CD:B9:D2:3D:1C:72:AA:9F:05:5E
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 181C
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/C4DFC25ACC0811EF89B82F24C4F9AE02.roa
Signing time: Mon 06 Jan 2025 08:32:31 +0000
ROA not before: Mon 06 Jan 2025 08:32:31 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 17911
IP address blocks: 122.129.64.0/24 maxlen: 24
122.129.66.0/24 maxlen: 24
122.129.69.0/24 maxlen: 24
122.129.72.0/24 maxlen: 24
122.129.73.0/24 maxlen: 24
122.129.74.0/24 maxlen: 24
122.129.75.0/24 maxlen: 24
122.129.76.0/24 maxlen: 24
122.129.77.0/24 maxlen: 24
122.129.78.0/24 maxlen: 24
122.129.79.0/24 maxlen: 24
122.129.80.0/24 maxlen: 24
122.129.81.0/24 maxlen: 24
122.129.82.0/24 maxlen: 24
122.129.84.0/24 maxlen: 24
122.129.85.0/24 maxlen: 24
122.129.89.0/24 maxlen: 24
122.129.90.0/24 maxlen: 24
122.129.91.0/24 maxlen: 24
122.129.92.0/24 maxlen: 24
122.129.93.0/24 maxlen: 24
122.129.94.0/24 maxlen: 24
203.128.0.0/24 maxlen: 24
203.128.1.0/24 maxlen: 24
203.128.3.0/24 maxlen: 24
203.128.4.0/24 maxlen: 24
203.128.5.0/24 maxlen: 24
203.128.6.0/24 maxlen: 24
203.128.7.0/24 maxlen: 24
203.128.8.0/24 maxlen: 24
203.128.9.0/24 maxlen: 24
203.128.11.0/24 maxlen: 24
203.128.12.0/24 maxlen: 24
203.128.13.0/24 maxlen: 24
203.128.14.0/24 maxlen: 24
203.128.15.0/24 maxlen: 24
203.128.16.0/24 maxlen: 24
203.128.17.0/24 maxlen: 24
203.128.18.0/24 maxlen: 24
203.128.19.0/24 maxlen: 24
203.128.21.0/24 maxlen: 24
203.128.22.0/24 maxlen: 24
203.128.25.0/24 maxlen: 24
203.128.26.0/24 maxlen: 24
203.128.27.0/24 maxlen: 24
203.128.28.0/24 maxlen: 24
203.128.29.0/24 maxlen: 24
203.128.30.0/24 maxlen: 24
203.128.31.0/24 maxlen: 24
2400:4f00::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6172 (0x181c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Jan 6 08:32:31 2025 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=677b951e-5953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:28:2f:73:2f:1e:f9:cc:e2:21:40:d9:19:
55:6b:1e:1d:9e:05:9e:3d:0f:49:e0:36:60:fd:c1:
11:73:5b:68:b4:af:0c:8e:78:bf:3b:66:21:7d:cd:
be:89:32:58:9f:8d:af:cb:1a:4d:b4:22:e0:20:9e:
99:eb:f8:20:c7:e9:59:71:fc:85:7a:26:a3:5b:86:
c2:ef:72:a5:47:d4:84:ef:ca:50:f1:a8:fe:21:da:
cf:42:3a:99:66:97:36:f6:af:f2:47:12:d6:fb:ce:
1b:91:63:96:31:49:0c:1e:f2:bc:29:60:6b:63:42:
16:38:9c:51:c9:49:24:cc:4c:4a:98:e0:6e:60:81:
56:f0:4f:c3:da:ea:17:83:9d:8c:02:01:1d:bd:82:
67:f9:aa:1a:7d:96:de:bd:78:2c:de:56:b7:28:02:
28:30:0b:b4:e5:c8:a4:83:a4:60:c3:17:63:9b:5e:
ac:b9:5a:d0:e8:31:3a:87:5c:e1:e9:cd:c7:72:d5:
f4:d3:39:94:08:02:1e:0f:af:6e:07:e2:19:fd:15:
4a:be:d8:63:a1:59:29:99:58:cf:1e:99:fc:ef:3a:
76:f0:2a:53:45:81:c6:41:aa:64:2e:7e:c2:0c:fe:
e6:ae:bc:08:8b:65:cc:4e:f1:5d:43:f9:2d:62:ec:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:84:20:67:AF:4F:B9:13:F3:8B:CD:B9:D2:3D:1C:72:AA:9F:05:5E
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/C4DFC25ACC0811EF89B82F24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.129.64.0/24
122.129.66.0/24
122.129.69.0/24
122.129.72.0-122.129.82.255
122.129.84.0/23
122.129.89.0-122.129.94.255
203.128.0.0/23
203.128.3.0-203.128.9.255
203.128.11.0-203.128.19.255
203.128.21.0-203.128.22.255
203.128.25.0-203.128.31.255
IPv6:
2400:4f00::/36
Signature Algorithm: sha256WithRSAEncryption
ba:06:d4:9a:ba:f8:9c:29:b0:18:c1:d3:d3:a1:1e:28:4e:3a:
6a:e5:c3:dc:a0:b7:b4:a4:38:9a:8f:77:78:f0:9e:55:76:7f:
9a:be:ec:7e:8c:1d:6f:55:f5:89:40:16:f0:78:c2:0a:74:ae:
b7:e6:58:82:46:18:74:24:6e:b3:fe:d9:6c:23:5c:12:25:3e:
cd:bf:40:2a:54:6c:19:35:07:a9:d1:c1:27:f8:79:8f:a3:d3:
c3:af:f1:ef:38:0b:95:cb:f8:11:c9:39:19:66:c0:2c:a7:57:
26:14:f3:6b:cd:1b:9b:bf:09:0b:a9:a0:19:46:94:7b:d8:33:
8e:b6:26:29:b0:f3:4f:7a:99:a8:31:3e:27:fc:e4:8c:b1:4f:
7d:01:e6:e3:61:2d:76:8f:1b:86:89:ba:6d:54:e3:cb:2f:8f:
ff:70:80:88:c1:ff:c7:5e:8b:b3:7c:d8:13:ec:07:b9:88:14:
cc:d1:6c:ef:21:75:e1:2e:26:d2:d2:7f:b9:cb:71:8d:b3:1c:
9e:4c:f8:24:73:cf:d3:fa:28:fa:d6:47:00:39:c8:b6:c5:43:
f5:7c:59:5e:fc:90:b5:65:bf:f0:27:d1:cf:f2:5f:08:86:b2:
18:1d:d2:5b:10:21:5f:5c:c6:81:37:ba:35:a4:eb:a0:f5:e4:
b8:52:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:35:15 2025 by rpki-client