Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/26C760F002EA11F0836EF72FC4F9AE02.roa
File: 26C760F002EA11F0836EF72FC4F9AE02.roa (raw, json)
Hash identifier: 7mVuQ3E5O7SHzP2lHVSGMO1XS8RjhP+KUyO8u78EdqI=
Subject key identifier: 80:F0:D6:14:59:54:E3:38:11:FB:AC:00:2D:CF:5B:5A:CB:E3:6A:29
Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial: 011F
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/26C760F002EA11F0836EF72FC4F9AE02.roa
Signing time: Mon 17 Mar 2025 04:43:18 +0000
ROA not before: Mon 17 Mar 2025 04:43:18 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 151812
IP address blocks: 103.127.222.0/23 maxlen: 23
103.127.222.0/24 maxlen: 24
103.127.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BF1
Validity
Not Before: Mar 17 04:43:18 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67d7a866-9f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:bc:fc:a2:83:2c:1d:87:67:0e:3b:9d:6d:
ed:91:9c:8c:d1:dc:97:68:60:62:4b:dc:8a:05:6a:
84:03:5d:f6:21:8c:c3:7c:46:22:40:19:7b:1c:1e:
98:51:b4:a3:5b:0a:03:af:94:98:1a:95:34:fb:ec:
ff:81:8d:18:4f:12:26:d2:bb:2d:81:99:4e:77:c1:
78:7d:45:6d:60:00:29:fb:30:3a:13:d6:cc:c9:0a:
4c:be:f2:ec:f7:3d:ca:2a:0b:5e:e9:0e:87:5c:b5:
cc:c0:ea:f0:90:29:0b:d1:87:c2:41:6a:8a:b3:07:
92:f8:c6:80:ce:63:52:2e:eb:71:d3:c2:d8:08:2a:
22:66:d2:92:5c:6a:fe:bb:a2:46:55:24:e1:e1:5d:
90:b2:6f:95:7a:e2:51:b6:8f:09:cb:54:1c:ea:e2:
1b:53:7c:5c:d8:2f:b4:c0:b8:a7:71:86:92:05:ee:
90:6c:dd:5c:66:23:8a:28:e7:dc:a6:10:33:64:d2:
98:4c:33:67:46:12:62:70:1a:56:4b:92:66:06:0a:
d3:30:26:7b:e2:e5:b4:0c:4f:cd:fd:7a:c2:96:fd:
19:1d:3a:0d:49:d7:c4:d7:07:32:10:11:af:15:84:
04:49:1a:3b:b1:76:95:d4:56:fa:3e:c5:10:2b:20:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F0:D6:14:59:54:E3:38:11:FB:AC:00:2D:CF:5B:5A:CB:E3:6A:29
X509v3 Authority Key Identifier:
keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/26C760F002EA11F0836EF72FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.222.0/23
Signature Algorithm: sha256WithRSAEncryption
05:d1:a4:2c:9a:f0:40:0c:5c:99:38:7f:64:fa:d6:f0:08:b1:
9e:50:4e:90:ba:0e:b7:60:4e:25:5e:e8:5c:2c:1f:73:19:af:
69:19:f8:2b:97:56:44:02:a4:e0:f6:95:0e:50:db:d0:ca:f3:
d7:29:15:84:3c:0f:d4:3a:a8:d5:03:27:e1:68:b8:61:db:f4:
fa:8b:c9:1e:dc:0a:c9:9b:e3:5a:08:5d:a6:37:ab:3d:8e:6a:
09:76:0a:2a:75:27:27:55:27:fa:3f:22:dc:7a:ff:d8:8c:d1:
75:61:2f:d7:73:a0:ea:99:23:bb:e7:fc:df:39:a1:92:b0:df:
19:2c:b6:19:61:3a:75:0e:98:50:31:5e:a2:c6:e6:0f:f3:a5:
5c:9c:65:40:97:a3:65:31:89:d5:7c:cb:7e:51:6a:79:07:dd:
87:05:54:54:7d:28:b8:84:ed:1f:c3:3f:0d:f2:fe:d1:be:25:
e2:18:49:5a:c8:eb:a6:8b:93:2c:d0:60:0c:ed:f8:ae:9f:cc:
f2:e5:50:b7:3f:25:5e:86:05:b1:9a:f6:16:d0:08:d4:04:5d:
c5:91:c9:f6:88:1b:91:8b:57:11:84:78:3c:1f:d1:f2:bf:cc:
4d:e6:45:49:88:d7:26:1c:5f:24:df:74:43:48:e5:eb:b9:b7:
d7:a6:e6:de
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdCRjExMTAvBgNVBAUTKDk0QjAzN0Y3NkZBMjM3QTc4RUE5NTQ4RTM1NTdBNUUx
NkVENjI0OUEwHhcNMjUwMzE3MDQ0MzE4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Q3YTg2Ni05ZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwf68/KKDLB2HZw47nW3tkZyM0dyXaGBiS9yKBWqEA132IYzDfEYiQBl7HB6Y
UbSjWwoDr5SYGpU0++z/gY0YTxIm0rstgZlOd8F4fUVtYAAp+zA6E9bMyQpMvvLs
9z3KKgte6Q6HXLXMwOrwkCkL0YfCQWqKsweS+MaAzmNSLutx08LYCCoiZtKSXGr+
u6JGVSTh4V2Qsm+VeuJRto8Jy1Qc6uIbU3xc2C+0wLincYaSBe6QbN1cZiOKKOfc
phAzZNKYTDNnRhJicBpWS5JmBgrTMCZ74uW0DE/N/XrClv0ZHToNSdfE1wcyEBGv
FYQESRo7sXaV1Fb6PsUQKyBjuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIDw1hRZ
VOM4EfusAC3PW1rL42opMB8GA1UdIwQYMBaAFJSwN/dvojenjqlUjjVXpeFu1iSa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JGMS83RDE2RTRGQTU3
QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42ZU9xVlNPTlZlbDRXN1dK
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xMQTM5Mi1pTjZlT3FWU09OVmVsNFc3V0pKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDdCRjEvN0QxNkU0RkE1N0I4MTFFRUFFMThCNTY4QzRGOUFFMDIvMjZDNzYwRjAw
MkVBMTFGMDgzNkVGNzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnf94wDQYJKoZIhvcNAQELBQADggEBAAXRpCya8EAMXJk4
f2T61vAIsZ5QTpC6DrdgTiVe6FwsH3MZr2kZ+CuXVkQCpOD2lQ5Q29DK89cpFYQ8
D9Q6qNUDJ+FouGHb9PqLyR7cCsmb41oIXaY3qz2Oagl2Cip1JydVJ/o/Itx6/9iM
0XVhL9dzoOqZI7vn/N85oZKw3xksthlhOnUOmFAxXqLG5g/zpVycZUCXo2UxidV8
y35RankH3YcFVFR9KLiE7R/DPw3y/tG+JeIYSVrI66aLkyzQYAzt+K6fzPLlULc/
JV6GBbGa9hbQCNQEXcWRyfaIG5GLVxGEeDwf0fK/zE3mRUmI1yYcXyTfdENI5eu5
t9em5t4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:34:24 2025 by rpki-client