Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/271F3E9CFFE011EDA35F8946C4F9AE02.roa
File: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (raw, json)
Hash identifier: fDZa3ruyI4VluhDMo0toVdiGueuR7vLetk94+XTO6ag=
Subject key identifier: 32:55:6C:F5:A5:BD:26:A2:44:F5:E2:3F:00:5C:10:AA:EA:E2:CC:CA
Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Certificate serial: 0430
Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/271F3E9CFFE011EDA35F8946C4F9AE02.roa
Signing time: Thu 27 Mar 2025 00:36:59 +0000
ROA not before: Thu 27 Mar 2025 00:36:59 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 150750
IP address blocks: 103.162.136.0/24 maxlen: 24
103.162.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124731
Validity
Not Before: Mar 27 00:36:59 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e49daa-b924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:62:4e:73:d8:a8:42:cb:34:ff:e5:de:97:
91:88:96:df:46:e6:a4:b0:57:73:40:2a:7d:99:51:
b2:25:a1:4f:8a:28:73:33:43:26:d2:04:83:16:4d:
72:64:c2:2e:5d:d9:a2:8a:75:74:83:c0:94:cd:59:
a8:0a:c2:a7:7c:25:b3:44:e2:fb:c7:07:05:e2:8e:
62:07:d7:0f:a3:32:d5:8b:34:6e:ff:5a:cf:55:51:
06:32:05:5c:1b:81:6b:e3:09:26:89:af:4b:08:d9:
08:c6:73:c2:c8:1c:ed:40:7b:f3:9f:d8:89:41:7a:
d2:3e:d3:89:14:d1:db:e4:8a:96:32:92:da:a5:30:
cd:62:85:86:de:83:39:51:41:32:97:45:e7:a0:63:
7e:c4:b9:f0:aa:a3:9a:ac:74:71:99:f2:63:a2:29:
a7:4c:05:18:aa:a2:e6:e2:52:41:b4:6e:84:89:0d:
f3:56:0a:3a:08:a6:b5:68:38:20:04:51:35:7d:e5:
2a:b1:02:9d:74:12:e6:9b:b3:6b:73:d1:a3:e1:2e:
93:86:e2:79:46:39:18:23:9d:d5:0f:db:17:ec:dc:
57:f4:79:4a:53:fe:de:53:62:ba:93:94:15:d3:e7:
06:b5:6d:32:a6:c3:7b:3b:52:ff:97:e8:5d:62:5b:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:55:6C:F5:A5:BD:26:A2:44:F5:E2:3F:00:5C:10:AA:EA:E2:CC:CA
X509v3 Authority Key Identifier:
keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/271F3E9CFFE011EDA35F8946C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.136.0/23
Signature Algorithm: sha256WithRSAEncryption
79:87:e2:89:53:93:13:2b:59:d2:12:ef:5f:28:d5:c2:0f:52:
9e:61:b4:47:7d:68:28:47:65:19:b9:e4:73:70:59:ae:4e:d6:
63:bf:ce:fe:9d:0a:d4:08:7c:20:6f:98:5c:71:96:b5:d9:7a:
e8:6a:4c:5d:94:a9:3d:de:55:3d:4c:15:e2:7d:f1:95:31:d4:
0a:01:e5:38:4c:65:eb:00:ec:41:78:ba:c3:72:a2:16:29:e1:
65:c0:53:24:03:5d:9c:63:74:4f:db:ed:77:53:4e:cc:15:2b:
f0:7f:e2:0e:40:ef:81:a0:d3:67:e6:77:1f:8a:13:f5:87:38:
13:9d:0e:ef:40:b6:24:12:d1:47:f4:7d:19:66:5e:68:59:16:
24:45:18:02:3a:9b:90:f7:60:63:48:7f:dc:9d:08:66:dd:66:
16:8a:2e:72:77:3b:cc:e7:e5:16:eb:0c:9c:5d:3e:54:5a:ad:
f6:5d:b4:fa:30:31:ee:d9:d9:c5:cc:8a:29:c2:c6:7c:7b:2d:
30:a1:3d:e2:e2:5b:e6:fd:bd:6a:82:c2:1b:75:84:d1:60:bf:
f4:f4:a6:38:ec:15:2f:9b:4b:9d:1a:a1:f5:a3:fe:ab:84:e6:
c5:9e:32:04:27:de:47:e1:f2:a4:69:25:76:9e:86:bb:69:27:
80:7c:f2:d9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ3MzExMTAvBgNVBAUTKDgwMTcwMkJDOUNERUY3M0RGNzM5QkZCN0Q0QkQyRjdC
ODg4NUUwNzcwHhcNMjUwMzI3MDAzNjU5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2U0OWRhYS1iOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApgtiTnPYqELLNP/l3peRiJbfRuaksFdzQCp9mVGyJaFPiihzM0Mm0gSDFk1y
ZMIuXdmiinV0g8CUzVmoCsKnfCWzROL7xwcF4o5iB9cPozLVizRu/1rPVVEGMgVc
G4Fr4wkmia9LCNkIxnPCyBztQHvzn9iJQXrSPtOJFNHb5IqWMpLapTDNYoWG3oM5
UUEyl0XnoGN+xLnwqqOarHRxmfJjoimnTAUYqqLm4lJBtG6EiQ3zVgo6CKa1aDgg
BFE1feUqsQKddBLmm7Nrc9Gj4S6ThuJ5RjkYI53VD9sX7NxX9HlKU/7eU2K6k5QV
0+cGtW0ypsN7O1L/l+hdYlt1lwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDJVbPWl
vSaiRPXiPwBcEKrq4szKMB8GA1UdIwQYMBaAFIAXAryc3vc99zm/t9S9L3uIheB3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDczMS9CNkIwMTRCMjVE
NkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6MzNPYi0zMUwwdmU0aUY0
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dCY0N2SnplOXozM09iLTMxTDB2ZTRpRjRIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQ3MzEvQjZCMDE0QjI1RDZEMTFFQzhGRjYxMzFFQzRGOUFFMDIvMjcxRjNFOUNG
RkUwMTFFREEzNUY4OTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnoogwDQYJKoZIhvcNAQELBQADggEBAHmH4olTkxMrWdIS
718o1cIPUp5htEd9aChHZRm55HNwWa5O1mO/zv6dCtQIfCBvmFxxlrXZeuhqTF2U
qT3eVT1MFeJ98ZUx1AoB5ThMZesA7EF4usNyohYp4WXAUyQDXZxjdE/b7XdTTswV
K/B/4g5A74Gg02fmdx+KE/WHOBOdDu9AtiQS0Uf0fRlmXmhZFiRFGAI6m5D3YGNI
f9ydCGbdZhaKLnJ3O8zn5RbrDJxdPlRarfZdtPowMe7Z2cXMiinCxnx7LTChPeLi
W+b9vWqCwht1hNFgv/T0pjjsFS+bS50aofWj/quE5sWeMgQn3kfh8qRpJXaehrtp
J4B88tk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:27:26 2025 by rpki-client