Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa
File: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (raw, json)
Hash identifier: uPpnoQZGZKxbY1tDf1IppgOlALrQMUGFd/gQhZLvnlg=
Subject key identifier: 1A:9C:0A:9A:06:10:BF:60:47:00:13:D3:9B:0F:27:92:6E:04:EB:84
Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial: 16BB
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa
Signing time: Sun 22 Dec 2024 16:54:13 +0000
ROA not before: Sun 22 Dec 2024 16:54:13 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 56207
IP address blocks: 139.135.192.0/22 maxlen: 22
139.135.196.0/22 maxlen: 22
139.135.200.0/22 maxlen: 22
139.135.204.0/22 maxlen: 22
139.135.208.0/22 maxlen: 22
139.135.212.0/22 maxlen: 22
139.135.216.0/22 maxlen: 22
139.135.220.0/22 maxlen: 22
139.135.224.0/22 maxlen: 22
139.135.228.0/22 maxlen: 22
139.135.232.0/22 maxlen: 22
139.135.236.0/22 maxlen: 22
139.135.240.0/22 maxlen: 22
139.135.244.0/22 maxlen: 22
139.135.248.0/22 maxlen: 22
139.135.252.0/22 maxlen: 22
139.135.252.0/23 maxlen: 23
139.135.254.0/24 maxlen: 24
139.135.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5819 (0x16bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B
Validity
Not Before: Dec 22 16:54:13 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67684435-0042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:89:31:ed:82:b3:7c:23:3e:74:a4:2d:5e:e5:
93:7b:64:05:e0:38:ea:18:57:f0:ba:66:99:9d:2a:
67:48:e7:8b:be:84:9f:f6:74:f4:59:8e:6b:38:96:
43:04:44:53:cc:57:86:83:6c:fa:61:fd:33:b1:45:
83:49:c3:71:40:8e:8b:a3:1a:2c:5e:2c:cd:db:6c:
2f:69:c5:64:7d:f8:93:9f:b4:3a:e6:a0:47:56:e9:
5b:00:26:1d:54:44:a6:97:5e:f0:b4:bd:79:e3:9d:
f5:c7:c9:a9:bc:98:a0:7f:21:92:5a:73:49:06:cf:
b4:8b:15:42:f7:9a:d0:28:a4:21:17:c3:fb:ee:4f:
4f:f3:70:e6:6b:04:22:86:cc:71:5f:b7:47:ff:f3:
d3:ab:86:60:da:8c:ba:e4:b3:80:db:b1:71:84:2e:
6a:72:dc:de:62:83:6a:9e:9b:95:f1:83:a7:bf:cf:
71:81:cf:4e:a9:ba:3e:61:c4:7e:e3:c8:53:28:04:
cc:bf:25:a6:88:0f:c5:dc:40:be:2a:01:42:d0:a5:
db:5c:c4:39:c2:74:68:3e:0d:c6:2f:aa:72:84:48:
df:6c:3c:83:89:48:9e:f2:6e:fc:1c:81:04:e2:e0:
3b:2a:cb:ac:c6:ab:a5:66:7a:d9:da:87:71:ad:f2:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:0A:9A:06:10:BF:60:47:00:13:D3:9B:0F:27:92:6E:04:EB:84
X509v3 Authority Key Identifier:
keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.135.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:8d:e8:c0:6d:12:36:85:56:0e:ae:df:d5:b7:ca:c5:89:db:
ea:41:51:40:39:f6:f2:f8:fe:0f:40:d9:61:08:d5:14:2c:d9:
2c:13:c4:98:f1:0a:49:9b:27:26:66:73:87:5b:86:8a:43:f5:
b8:42:22:1e:86:04:08:87:ff:f9:4e:41:1c:a5:0b:81:90:bd:
53:48:28:d1:df:b3:0d:ac:81:b4:ce:39:9f:0d:3a:4e:6c:22:
36:e4:a2:3e:7f:b3:6b:d2:9a:1f:f6:df:c7:ea:70:50:6c:c6:
92:2d:51:64:31:01:5d:e5:97:77:88:38:49:af:8a:ab:5a:a7:
df:3c:cd:78:cb:fb:bf:ca:cd:e4:76:bd:60:6e:dc:68:cd:cb:
69:5d:ab:22:8c:47:05:b1:04:0c:b5:16:c5:85:bb:49:88:fa:
fd:8a:2f:6d:b4:55:c9:ad:e0:3c:52:7e:2b:54:fc:97:7e:de:
dc:e9:29:76:d1:e4:18:30:49:2c:4b:8f:e0:e2:55:44:e1:cd:
01:8a:4d:5a:03:63:9e:a5:f4:2b:97:4d:39:68:da:59:f8:95:
ed:b0:9f:1a:6d:2a:d4:56:7a:f6:0c:98:0c:5d:63:88:15:81:
2d:d6:1c:71:28:6f:56:16:38:04:7e:d8:3b:06:4c:c5:67:3b:
6d:4e:45:77
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICFrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG
Q0ZFOTFFN0UwHhcNMjQxMjIyMTY1NDEzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY4NDQzNS0wMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8Ykx7YKzfCM+dKQtXuWTe2QF4DjqGFfwumaZnSpnSOeLvoSf9nT0WY5rOJZD
BERTzFeGg2z6Yf0zsUWDScNxQI6LoxosXizN22wvacVkffiTn7Q65qBHVulbACYd
VESml17wtL154531x8mpvJigfyGSWnNJBs+0ixVC95rQKKQhF8P77k9P83DmawQi
hsxxX7dH//PTq4Zg2oy65LOA27FxhC5qctzeYoNqnpuV8YOnv89xgc9Oqbo+YcR+
48hTKATMvyWmiA/F3EC+KgFC0KXbXMQ5wnRoPg3GL6pyhEjfbDyDiUie8m78HIEE
4uA7KsusxqulZnrZ2odxrfLJUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBqcCpoG
EL9gRwAT05sPJ5JuBOuEMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx
RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI
bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIxOEIvRjk4QjVGMEMyMUY5MTFFODk2QzFERDIzQzRGOUFFMDIvRUMwNjVBNTJD
MjhEMTFFQkJDQUJDQTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAaLh8AwDQYJKoZIhvcNAQELBQADggEBAJyN6MBtEjaFVg6u
39W3ysWJ2+pBUUA59vL4/g9A2WEI1RQs2SwTxJjxCkmbJyZmc4dbhopD9bhCIh6G
BAiH//lOQRylC4GQvVNIKNHfsw2sgbTOOZ8NOk5sIjbkoj5/s2vSmh/238fqcFBs
xpItUWQxAV3ll3eIOEmviqtap988zXjL+7/KzeR2vWBu3GjNy2ldqyKMRwWxBAy1
FsWFu0mI+v2KL220Vcmt4DxSfitU/Jd+3tzpKXbR5BgwSSxLj+DiVUThzQGKTVoD
Y56l9CuXTTlo2ln4le2wnxptKtRWevYMmAxdY4gVgS3WHHEob1YWOAR+2DsGTMVn
O21ORXc=
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:46:05 2025 by rpki-client