Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa
File: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (raw, json)
Hash identifier: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=
Subject key identifier: 6F:C6:2B:04:4A:14:00:98:98:C4:08:C5:73:1A:6D:15:A2:E1:65:41
Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Certificate serial: 22C7
Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa
Signing time: Sat 04 Jan 2025 16:06:11 +0000
ROA not before: Sat 04 Jan 2025 16:06:11 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134839
IP address blocks: 103.222.238.0/24 maxlen: 24
103.245.176.0/24 maxlen: 24
103.247.180.0/24 maxlen: 24
2001:df7:a401::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8903 (0x22c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127342
Validity
Not Before: Jan 4 16:06:11 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67795c72-ad1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:7a:58:fe:d4:4e:ad:26:fc:ae:da:9e:2f:
2a:bf:56:fb:c4:92:97:34:76:b2:17:92:bd:5c:00:
d3:5f:9c:24:96:82:97:a2:06:c2:a1:47:08:66:e4:
e3:19:81:33:a2:a4:63:0b:f8:6f:78:1b:e2:e3:8c:
ec:3d:2b:9a:4d:0b:d5:30:03:e9:04:e1:3b:6d:f2:
86:ed:ac:45:91:d7:1f:91:20:5c:7e:91:ab:a1:62:
36:8c:64:a8:60:42:a1:8c:94:1c:fb:94:b5:ce:f2:
0e:ba:38:c0:ee:71:28:1f:77:df:ce:36:7d:9d:4c:
69:86:3d:de:a6:fb:63:53:8f:e6:55:82:d2:bb:69:
ac:77:74:2e:18:5d:45:cc:fa:56:61:ed:96:30:45:
7a:ff:bc:75:73:81:e1:4c:5e:52:e1:18:22:77:2f:
9e:85:b7:62:96:6c:ab:01:68:dc:96:d0:40:84:d8:
a8:d7:c9:08:68:f5:aa:99:68:49:01:f3:19:a1:c7:
e8:37:62:dd:e8:af:27:19:54:0c:e4:6e:3f:4a:5d:
7c:95:43:e4:71:83:c3:27:d8:12:a3:44:90:14:cc:
58:1d:18:78:7d:d5:20:fd:db:8c:26:59:b5:9f:d2:
f7:db:37:25:e0:1c:f1:ad:b5:46:bc:3e:0c:f0:ff:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C6:2B:04:4A:14:00:98:98:C4:08:C5:73:1A:6D:15:A2:E1:65:41
X509v3 Authority Key Identifier:
keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.222.238.0/24
103.245.176.0/24
103.247.180.0/24
IPv6:
2001:df7:a401::/48
Signature Algorithm: sha256WithRSAEncryption
1b:21:5c:b7:31:e6:cf:5b:eb:f7:6d:eb:fa:1e:55:6a:c1:55:
47:dc:00:90:e2:d1:51:b0:06:7e:c2:a2:6d:4a:5a:79:c1:d1:
db:3e:b6:2b:84:e6:d1:5e:d3:c6:29:70:cd:c7:1a:e8:33:ff:
3e:25:54:b1:a6:86:3c:94:b4:c0:f0:11:b7:f4:28:2a:e7:b4:
be:3c:67:95:0e:3b:c2:36:97:dd:75:4b:04:71:66:5d:ec:3e:
c7:25:db:a8:be:8f:1e:de:38:6e:7c:04:00:ef:f7:ad:a0:d0:
70:d3:fc:bb:70:b1:52:a0:e1:95:f4:0d:8c:04:3d:13:9d:f0:
5b:80:69:3c:09:2f:87:4e:fb:76:fc:64:73:4c:98:35:3f:76:
b8:3b:65:f4:29:fa:94:ab:d8:ec:53:fa:ff:a0:94:3d:76:25:
65:ef:df:07:51:d4:c3:45:50:98:83:7d:20:45:51:2c:e0:6e:
5f:5c:fd:3c:06:96:d0:89:ce:bb:f9:cd:ce:b7:1a:a0:95:f4:
e0:5c:4b:2c:4e:db:ac:d2:92:0d:69:29:ab:13:34:f0:95:b2:
f5:d3:52:f0:b7:c4:dc:01:9f:66:3e:20:43:aa:c8:d7:29:1a:
8f:ea:d1:a3:4b:af:5f:52:16:d3:1c:40:21:c6:ca:e7:e1:4e:
d6:f8:3d:c1
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgICIscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4
RTAxNTQ2N0MwHhcNMjUwMTA0MTYwNjExWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc5NWM3Mi1hZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsod6WP7UTq0m/K7ani8qv1b7xJKXNHayF5K9XADTX5wkloKXogbCoUcIZuTj
GYEzoqRjC/hveBvi44zsPSuaTQvVMAPpBOE7bfKG7axFkdcfkSBcfpGroWI2jGSo
YEKhjJQc+5S1zvIOujjA7nEoH3ffzjZ9nUxphj3epvtjU4/mVYLSu2msd3QuGF1F
zPpWYe2WMEV6/7x1c4HhTF5S4Rgidy+ehbdilmyrAWjcltBAhNio18kIaPWqmWhJ
AfMZocfoN2Ld6K8nGVQM5G4/Sl18lUPkcYPDJ9gSo0SQFMxYHRh4fdUg/duMJlm1
n9L32zcl4BzxrbVGvD4M8P8SbwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFG/GKwRK
FACYmMQIxXMabRWi4WVBMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz
MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjczNDIvNkREQkM3RkM5MzI3MTFFNUE4MUYzMDNFQzRGOUFFMDIvQ0JGOUFENTQ0
OUU4MTFFNkJBRjQ1MjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E
LTArMBgEAgABMBIDBABn3u4DBABn9bADBABn97QwDwQCAAIwCQMHACABDfekATAN
BgkqhkiG9w0BAQsFAAOCAQEAGyFctzHmz1vr923r+h5VasFVR9wAkOLRUbAGfsKi
bUpaecHR2z62K4Tm0V7Txilwzcca6DP/PiVUsaaGPJS0wPARt/QoKue0vjxnlQ47
wjaX3XVLBHFmXew+xyXbqL6PHt44bnwEAO/3raDQcNP8u3CxUqDhlfQNjAQ9E53w
W4BpPAkvh077dvxkc0yYNT92uDtl9Cn6lKvY7FP6/6CUPXYlZe/fB1HUw0VQmIN9
IEVRLOBuX1z9PAaW0InOu/nNzrcaoJX04FxLLE7brNKSDWkpqxM08JWy9dNS8LfE
3AGfZj4gQ6rI1ykaj+rRo0uvX1IW0xxAIcbK5+FO1vg9wQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:30:02 2025 by rpki-client