Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/BACF0C72D46611ECA1A27035C4F9AE02.roa
File: BACF0C72D46611ECA1A27035C4F9AE02.roa (raw, json)
Hash identifier: fdhBG2PgKRzOOWoaGO9CMKkV56FciDHOHH5aMzw+kK0=
Subject key identifier: 9C:44:01:F4:F9:EF:EB:FA:2E:5A:02:28:CE:4F:82:A0:6F:F3:D0:F8
Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial: 0815
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/BACF0C72D46611ECA1A27035C4F9AE02.roa
Signing time: Fri 24 Jan 2025 20:40:29 +0000
ROA not before: Fri 24 Jan 2025 20:40:29 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 132325
IP address blocks: 103.127.80.0/22 maxlen: 22
103.127.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069 (0x815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914740F
Validity
Not Before: Jan 24 20:40:29 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6793fabd-f907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:d4:e6:d8:7c:3d:16:9b:60:56:f4:5d:92:
49:46:51:dc:06:c2:e9:f1:c2:e2:56:d1:4d:c6:c1:
0a:46:18:48:11:c1:9d:b8:f5:e9:14:61:e2:e4:06:
54:c1:b2:40:d2:f4:82:76:6d:36:52:bf:11:a1:b1:
e8:c0:b2:0d:16:a9:ad:f9:e5:d8:b0:2d:c4:a4:de:
de:29:a4:2a:f3:d9:10:ce:c6:4c:70:8d:df:27:98:
08:bf:57:9f:28:bc:96:38:8f:a1:63:1c:83:aa:85:
70:8b:20:a5:47:ff:21:01:50:f2:81:09:a6:76:c0:
52:2c:8d:6d:30:fd:50:97:b1:f3:c5:e8:83:d0:a3:
6e:dc:98:03:87:72:be:d4:ef:c1:37:13:d9:cf:d5:
2d:35:79:08:9e:91:c1:36:6d:32:19:8a:e1:b5:3c:
c4:21:df:11:06:f0:59:62:72:3b:cf:6a:d9:e9:78:
01:8e:44:70:50:57:55:f8:00:0f:a2:10:03:84:db:
37:99:5a:65:85:ee:1c:93:b9:ba:2e:75:76:d7:ad:
61:4e:b1:66:50:83:1c:81:b8:83:fc:c6:67:6a:87:
c4:4f:b8:74:5d:be:d8:32:6d:6c:84:7f:43:8b:22:
8c:1f:e9:86:c4:d9:fc:1e:34:30:88:27:d6:a3:6c:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:44:01:F4:F9:EF:EB:FA:2E:5A:02:28:CE:4F:82:A0:6F:F3:D0:F8
X509v3 Authority Key Identifier:
keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/BACF0C72D46611ECA1A27035C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:3f:92:e2:e4:8b:4b:8a:00:01:9d:6f:5e:28:27:e2:44:15:
11:e3:42:88:f3:69:5a:f7:33:8e:63:61:77:a1:ec:02:88:50:
97:2a:78:78:be:27:80:20:e3:e0:08:06:95:b7:fa:50:44:7f:
11:e4:14:df:e7:44:f4:15:2a:8a:aa:c7:7d:cd:bf:de:23:31:
71:99:8b:41:36:17:04:9f:86:28:19:ee:71:7e:6f:fa:06:b8:
8d:33:2d:c4:69:8e:fa:1a:6c:d9:76:51:11:13:e5:32:78:a8:
4f:91:db:b4:ff:0e:01:d2:67:0f:53:7e:02:4d:9a:c1:b9:f4:
d3:b7:03:b5:4f:43:10:2e:f5:cb:42:a0:1e:cc:54:fe:eb:8e:
ea:7b:31:f0:1c:71:83:4a:09:89:d4:ff:7a:49:9c:f8:a2:d5:
88:9d:d5:89:67:42:17:8b:c4:15:e4:e6:f7:20:4f:8c:90:f1:
f1:01:1d:4f:2f:cc:de:f2:23:b8:ee:15:55:fd:1f:8d:e7:22:
6b:1e:16:30:19:89:d5:b4:2f:9a:b2:85:23:a9:63:d9:6f:ce:
21:38:35:07:35:84:f3:df:fc:17:8f:80:6c:8a:13:12:66:ef:
46:4d:22:b2:f0:f8:69:56:91:05:b6:06:2f:66:a9:16:18:71:
05:0b:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:02:17 2025 by rpki-client