Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/BE633CD283A611EE804BB319C4F9AE02.roa
File: BE633CD283A611EE804BB319C4F9AE02.roa (raw, json)
Hash identifier: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=
Subject key identifier: E6:B1:F7:16:2F:D3:F6:AE:68:25:EA:9A:1E:D7:C9:F2:D1:19:79:10
Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial: 0A3B
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/BE633CD283A611EE804BB319C4F9AE02.roa
Signing time: Wed 08 Jan 2025 19:38:20 +0000
ROA not before: Wed 08 Jan 2025 19:38:20 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 135341
IP address blocks: 103.127.2.0/24 maxlen: 24
103.127.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2619 (0xa3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CBD7
Validity
Not Before: Jan 8 19:38:20 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677ed42c-aa83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:09:eb:af:6f:cd:5b:28:42:10:53:0e:aa:
1b:48:4f:7b:38:68:4c:fa:53:12:c9:21:6f:5f:62:
01:ab:82:64:f9:45:74:71:d5:f7:27:73:1c:3e:f8:
4e:41:f7:c5:28:3f:9f:91:a5:09:7f:56:47:af:8e:
a5:ed:26:a1:32:67:8e:30:b8:0a:99:a9:bc:49:7c:
6e:14:6b:af:2d:c2:26:c8:b6:96:81:30:a1:98:bc:
69:13:5a:88:f9:d2:04:6f:6f:ec:83:a2:81:83:ef:
b6:40:96:db:23:00:62:7a:27:15:74:e9:d1:e6:72:
3b:e9:90:63:77:4d:9d:49:9e:06:77:ff:9f:9c:74:
31:8c:fb:6b:fb:13:31:34:29:eb:66:f3:58:e3:9a:
3a:8d:00:99:78:f8:48:7e:58:e1:99:b5:89:7e:b1:
5b:e6:cb:21:ca:e3:75:9e:9f:c9:d9:ad:4c:6d:c7:
78:7c:23:58:48:72:f0:39:73:df:d3:37:f1:36:40:
92:62:9b:23:90:1f:79:b9:b6:4d:c9:b5:e9:94:36:
25:8d:fb:56:d3:bc:8c:ad:f3:8e:1b:55:e6:34:d3:
d1:1a:49:c7:d1:c4:cc:f4:ca:86:b4:1a:ed:75:4b:
8e:fe:b7:04:e4:43:96:32:e3:02:b7:a9:4b:1e:14:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:F7:16:2F:D3:F6:AE:68:25:EA:9A:1E:D7:C9:F2:D1:19:79:10
X509v3 Authority Key Identifier:
keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/BE633CD283A611EE804BB319C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.2.0/23
Signature Algorithm: sha256WithRSAEncryption
02:19:6a:e6:85:3a:f8:fb:3a:c3:98:70:ff:55:17:9a:1f:df:
eb:f2:79:8d:ec:3e:15:68:7a:29:ea:d3:22:99:c3:8f:20:24:
85:3d:f6:d9:6e:d2:12:7e:2a:27:50:96:15:40:a2:82:fc:99:
41:14:61:17:34:8c:6e:19:63:4d:b7:92:6f:ab:93:ba:fe:6f:
35:68:df:a4:61:8f:ce:22:1f:a6:97:23:46:e7:73:ba:ab:98:
69:0e:70:40:ca:87:c0:18:23:91:47:a4:7e:44:e9:ea:66:23:
0f:8e:02:ed:9f:85:54:7f:91:af:1d:c5:30:a1:34:d8:9b:9c:
b2:12:e3:24:92:f0:d8:64:a4:16:32:33:dd:c9:c2:7b:fa:87:
70:af:f2:60:53:71:a3:a7:f7:bb:76:fe:32:5a:ee:af:ec:08:
ca:d2:cd:78:81:93:1b:f0:13:9f:b6:85:ff:03:45:5b:dc:c4:
6e:10:17:41:f9:c8:03:49:96:34:49:f7:07:20:55:ec:a1:cf:
c8:32:c5:b0:ac:83:3c:67:6e:e0:92:ec:94:c9:ff:73:53:e8:
9d:a6:7a:84:76:2a:ad:7c:d4:01:66:94:aa:1d:b0:19:7f:b6:
2e:84:4f:b8:6f:7a:e1:b7:56:cf:ab:9a:35:42:c9:5e:b9:4d:
fc:e0:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:55 2025 by rpki-client