
Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/47660D4A488F11EFB89B763FC4F9AE02.roa
File: 47660D4A488F11EFB89B763FC4F9AE02.roa (raw, json)
Hash identifier: eI4UCoJeEzevXuPhkPqjuDi0BdhKf8YS6t00eoAv4wY=
Subject key identifier: 96:60:B2:C7:D5:B1:1A:A2:94:30:45:8C:A0:72:9C:57:5B:94:3C:E6
Certificate issuer: /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial: 04A3
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/47660D4A488F11EFB89B763FC4F9AE02.roa
Signing time: Wed 20 Nov 2024 23:43:12 +0000
ROA not before: Wed 20 Nov 2024 23:43:12 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 138521
IP address blocks: 103.127.162.0/23 maxlen: 24
2404:2440::/32 maxlen: 32
2404:2440:a0a0::/48 maxlen: 48
2404:2440:abcd::/48 maxlen: 48
2404:2440:b0b0::/48 maxlen: 48
2404:2440:beef::/48 maxlen: 48
2404:2440:c0c0::/48 maxlen: 48
2404:2440:cafe::/48 maxlen: 48
2404:2440:d0d0::/48 maxlen: 48
2404:2440:dada::/48 maxlen: 48
2404:2440:e0e0::/48 maxlen: 48
2404:2440:eeee::/48 maxlen: 48
2404:2440:f0f0::/48 maxlen: 48
2404:2440:face::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1187 (0x4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Validity
Not Before: Nov 20 23:43:12 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=673e7410-2c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:dc:80:2f:d2:6a:5f:5d:35:1b:3e:fc:c5:
61:9e:cd:50:fb:33:cc:21:38:e0:6b:1f:84:a4:f4:
6b:7b:f1:b1:96:c8:2e:b4:6a:5c:de:d9:09:f8:83:
c0:52:68:e6:bb:62:c2:48:34:76:b5:0f:40:7b:e2:
9e:04:bc:90:a3:17:8f:a8:5c:8a:d9:e6:8f:c6:e4:
c3:96:e5:ba:bd:9e:e9:5c:47:7d:10:eb:2f:3a:a6:
59:9a:ca:47:6c:47:05:0c:ef:d1:fe:af:7f:49:c6:
88:2b:51:91:41:b0:2a:59:f3:f3:11:fe:33:55:c1:
72:1a:19:e9:da:5f:d1:df:fa:9a:81:ae:84:3a:52:
5f:ff:d5:52:1a:5c:e3:2a:12:37:dc:58:f7:66:ce:
76:3e:ec:33:ea:25:d1:7d:29:28:23:d4:81:7b:58:
78:9c:18:18:6e:9d:89:87:05:4e:2b:dc:3e:18:fc:
c4:1a:4e:bb:a2:79:1e:3c:bb:27:36:27:e2:1c:e8:
e8:33:13:af:75:c7:8b:d5:09:7d:49:8e:f1:37:6c:
42:8c:2c:04:f8:2e:2c:00:63:d4:57:20:8d:23:74:
2d:22:10:66:dd:e1:c3:c4:7c:82:af:37:5c:d2:c1:
ce:a8:38:75:99:38:76:17:9b:0d:70:94:01:00:62:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:60:B2:C7:D5:B1:1A:A2:94:30:45:8C:A0:72:9C:57:5B:94:3C:E6
X509v3 Authority Key Identifier:
keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/47660D4A488F11EFB89B763FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.162.0/23
IPv6:
2404:2440::/32
Signature Algorithm: sha256WithRSAEncryption
a7:6f:ac:0c:52:a9:f4:ff:f0:12:f2:72:6f:11:4d:18:d8:17:
07:8a:a4:b9:23:f9:37:ed:70:74:bc:d2:a3:74:50:4c:3b:7e:
40:6b:32:96:62:81:42:e7:76:c4:e2:b8:18:b3:e0:64:9c:32:
e2:dd:8e:9b:60:ae:25:dd:01:19:86:83:95:30:5a:ae:9a:a1:
35:b8:6a:0f:f6:cc:ff:5c:d5:c8:bb:73:a7:a2:2d:67:15:ae:
1f:46:54:58:a0:e5:03:89:bc:58:64:a0:f7:37:3e:d2:bf:4e:
91:19:df:2b:9e:24:28:e3:c3:5a:08:1a:d8:08:1e:de:2b:47:
b9:6e:91:64:6a:e9:2c:7c:35:47:55:dc:a2:9d:4e:51:d0:b4:
3e:47:84:08:88:cb:4e:c3:c4:10:f4:1b:51:2d:60:8e:1a:ec:
4a:c0:7f:20:53:16:1d:a9:9e:49:a1:6e:a1:be:05:ab:c9:79:
1d:37:01:ff:f4:98:e5:d6:0a:63:2a:10:e6:a4:08:af:d4:7a:
c7:a2:99:16:3f:d9:6b:0f:d8:1e:e4:27:18:15:24:f6:22:87:
a5:7b:fd:e7:64:5d:a4:69:a5:57:4b:12:0a:ac:fa:b9:18:73:
d7:58:71:31:7a:cd:01:65:61:42:27:1f:48:f5:8f:29:72:fa:
e2:cb:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:38:43 2025 by rpki-client