Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/BAA6E77E852D11ED9A1A8D47C4F9AE02.roa
File: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (raw, json)
Hash identifier: LpYZeCMqtoq3Zi6VrSOzNbUcfWQzSLEFLO1bEbqVHyo=
Subject key identifier: 64:AF:51:93:CB:49:26:65:D4:52:55:E8:CE:78:16:FE:10:E0:A7:FB
Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial: 094F
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/BAA6E77E852D11ED9A1A8D47C4F9AE02.roa
Signing time: Fri 06 Dec 2024 20:09:17 +0000
ROA not before: Fri 06 Dec 2024 20:09:17 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 138523
IP address blocks: 103.127.180.0/24 maxlen: 24
103.127.181.0/24 maxlen: 24
103.127.182.0/24 maxlen: 24
103.127.183.0/24 maxlen: 24
2404:2640:4000::/34 maxlen: 34
2404:2640:8000::/36 maxlen: 36
2404:2640:9000::/36 maxlen: 36
2404:2640:a000::/36 maxlen: 36
2404:2640:b000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2383 (0x94f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Validity
Not Before: Dec 6 20:09:17 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675359ed-da57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:73:a1:47:bb:c0:07:29:62:17:95:59:bf:
56:d3:ef:5a:94:05:ab:b1:bd:c8:25:bd:0d:fb:fb:
7b:11:73:27:a4:2a:7e:82:02:e3:8a:0a:c6:49:67:
d4:9d:06:f3:21:46:98:99:a5:52:a6:2e:53:84:a7:
3e:69:5b:d5:38:48:5e:b0:98:a7:2e:b2:b2:ae:e3:
7b:e5:ed:35:a9:e8:3f:d3:0c:d2:ae:f4:e7:2e:b2:
8a:63:ad:95:29:97:0f:68:b4:22:5e:c8:4b:1e:35:
67:e8:a1:ce:c0:16:8b:b6:b8:8b:63:8b:5e:68:c7:
d3:22:57:a9:62:31:a8:ad:d2:8c:37:2d:15:ff:4d:
60:46:fe:bd:50:0e:de:cb:2e:87:e4:d4:8d:a5:9c:
dc:63:4d:b2:3a:2d:13:bf:dc:bb:25:90:0a:29:36:
42:6e:cf:a9:d1:5d:ec:3e:ee:82:83:3f:22:63:4f:
ce:d4:cd:2d:3a:f3:3b:4d:34:26:0c:5a:3f:c9:37:
32:f4:39:08:ed:5a:a2:0e:9e:4c:9a:f0:44:1b:b3:
70:33:ad:f7:40:22:21:ac:77:b3:72:21:a4:ad:8a:
60:5f:18:1a:fb:ed:05:08:0d:f7:ce:44:aa:55:0f:
45:ca:c4:05:10:b0:92:fc:fc:6b:28:53:47:03:a7:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:51:93:CB:49:26:65:D4:52:55:E8:CE:78:16:FE:10:E0:A7:FB
X509v3 Authority Key Identifier:
keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/BAA6E77E852D11ED9A1A8D47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.180.0/22
IPv6:
2404:2640:4000::-2404:2640:bfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:a1:fe:ee:b7:d0:a4:c0:da:7d:05:d7:3f:6d:05:4f:f5:38:
94:c8:13:f0:17:58:c3:1f:49:38:1d:8c:54:2f:16:83:20:61:
9c:d9:d1:99:9d:4a:a8:db:ac:ff:6b:e1:17:58:be:db:8e:f6:
45:9d:d1:49:82:4f:65:81:6e:e0:e6:e8:66:46:c0:f9:53:db:
da:87:a2:2a:f9:8d:1c:6e:d4:01:51:ab:ff:1f:28:16:9b:8e:
94:b3:90:ac:14:8f:09:36:02:bd:ee:da:73:bb:6f:72:d4:af:
8c:02:11:51:a8:44:11:97:03:21:dc:c1:74:05:e9:be:4a:1c:
29:92:de:a0:e1:04:f0:6b:d6:b2:ef:56:cb:3c:97:58:32:b6:
ca:92:78:44:71:ff:e8:d7:e6:7f:a7:07:d5:6f:7c:4f:ff:d0:
d9:5a:0b:aa:e9:5e:06:e6:53:ee:57:7a:79:b7:f3:bf:40:91:
5e:0d:41:8a:66:6f:14:05:15:eb:ee:b0:6c:c8:a4:3c:56:0c:
6c:0e:7b:d1:68:a0:dd:ff:4c:05:6d:7c:91:8c:40:de:d5:ed:
c6:60:93:00:a0:54:b9:31:de:64:34:a3:dc:07:c0:5c:6b:d2:
53:66:94:4c:e1:e0:36:5e:bd:b5:ff:24:c9:e1:18:28:02:a0:
0b:a7:92:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:45:47 2025 by rpki-client