Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/ACFA076483A611EE9C62DE0CC4F9AE02.roa
File: ACFA076483A611EE9C62DE0CC4F9AE02.roa (raw, json)
Hash identifier: UXZGPFGx5K1K2En4RO8pdMRDQAjiCK9Xmb4lr7fdWWA=
Subject key identifier: 84:3B:4E:17:F5:5F:03:8A:87:10:7E:F0:9A:00:50:C7:E3:20:95:BF
Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial: 0A3D
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/ACFA076483A611EE9C62DE0CC4F9AE02.roa
Signing time: Wed 08 Jan 2025 19:38:22 +0000
ROA not before: Wed 08 Jan 2025 19:38:22 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 138492
IP address blocks: 103.127.0.0/24 maxlen: 24
103.127.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2621 (0xa3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Validity
Not Before: Jan 8 19:38:22 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677ed42d-7d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:ad:e1:89:ac:46:cf:c1:65:1b:f3:c5:3a:
91:24:9c:a8:42:2e:67:65:2b:76:43:f4:fa:32:45:
e8:a9:db:25:c4:60:f7:eb:c5:7d:7a:91:92:89:6c:
90:c7:41:3c:43:27:64:54:51:67:47:b0:82:7c:05:
24:ee:62:1d:74:a4:ab:14:ce:68:3d:8c:d7:89:05:
93:d6:46:66:5f:11:ca:ce:c2:9f:cd:49:c5:ac:1f:
59:45:ea:c2:4e:2f:b3:1c:c1:11:d6:a9:1b:53:e2:
5d:6b:6e:5c:a3:a5:dd:57:c5:bb:e7:5a:b4:55:5b:
f7:8a:8d:22:ff:22:70:e9:9d:83:b6:8d:00:4a:5c:
8f:fc:f1:2c:46:fb:62:88:a0:ac:84:aa:11:08:e5:
a7:1d:0e:ad:cc:49:ad:12:07:ff:eb:f8:eb:62:27:
22:67:8d:fe:a2:f7:ed:8d:a1:b8:e6:d7:94:94:95:
08:92:5c:f1:f7:d6:33:a1:d7:72:c0:6a:4d:7e:35:
0f:32:47:0a:7f:18:49:f3:9c:18:22:5c:1e:5b:89:
f8:51:6b:a0:3a:9b:b4:82:d8:0f:b5:07:d1:a8:fa:
4b:8e:75:87:87:9d:56:df:79:eb:36:a7:c0:94:d0:
bb:31:7f:37:e5:87:df:f5:87:11:25:41:46:89:df:
96:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:4E:17:F5:5F:03:8A:87:10:7E:F0:9A:00:50:C7:E3:20:95:BF
X509v3 Authority Key Identifier:
keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/ACFA076483A611EE9C62DE0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.0.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:7e:f3:fb:9d:43:95:45:11:86:dc:8d:e8:e6:b2:eb:6f:65:
80:f0:12:7d:15:71:b8:1b:e0:0b:75:c5:f8:4f:59:c8:fe:27:
37:2e:4b:96:82:ad:6f:88:e7:0c:a9:78:8c:de:06:eb:b4:9e:
a5:47:dd:b2:73:ae:93:e5:ec:39:9b:5b:14:8b:4a:bf:56:d0:
1b:36:9f:d3:0e:c0:5c:4c:0e:12:42:c6:2c:34:01:c5:68:9f:
33:3b:34:8b:41:15:bb:e9:3a:b7:97:a4:1b:98:67:0e:fe:96:
aa:2f:cd:72:10:64:8b:23:de:f5:18:30:cb:74:28:3a:65:e9:
99:03:df:16:41:94:6a:c9:3e:cc:c6:a8:0f:93:04:d9:c1:e7:
13:a2:cc:cc:e7:12:c0:ca:42:24:af:15:fb:44:6c:9b:c0:61:
25:34:3e:48:52:ed:8f:40:f8:ab:6a:ef:4d:8f:c7:70:8e:85:
ef:a3:16:83:bd:0c:6d:e4:1a:ce:dd:5b:98:b0:5d:c9:25:5e:
58:e8:11:a1:38:5a:75:62:7b:0d:9f:8e:73:ef:79:14:a2:5e:
61:31:bd:bb:4c:ab:5a:4d:7f:2d:9b:b1:25:32:31:95:08:93:
15:82:2d:91:19:52:41:b7:5e:df:50:ee:ad:03:c5:e8:0f:13:
36:e4:86:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:46:33 2025 by rpki-client