Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34322e302f32342d3234203d3e2035303635.roa
File: 3130332e34392e34322e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: Nrg+ZCWK1yEqj1ha2/NLk4R/fdNToupZ4OgiAXeyHfY=
Subject key identifier: 4D:9F:7C:0F:C7:C8:A4:99:28:D7:D2:2C:96:80:D2:A1:A3:AA:D4:BC
Certificate issuer: /CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
Certificate serial: 4D33E7CFAEBABEA1F159C4821CE5E49B3B37BFB1
Authority key identifier: 13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34322e302f32342d3234203d3e2035303635.roa
Signing time: Tue 17 Dec 2024 10:33:56 +0000
ROA not before: Tue 17 Dec 2024 10:28:56 +0000
ROA not after: Tue 16 Dec 2025 10:33:56 +0000
asID: 5065
IP address blocks: 103.49.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:33:e7:cf:ae:ba:be:a1:f1:59:c4:82:1c:e5:e4:9b:3b:37:bf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB0000
Validity
Not Before: Dec 17 10:28:56 2024 GMT
Not After : Dec 16 10:33:56 2025 GMT
Subject: CN=4D9F7C0FC7C8A49928D7D22C9680D2A1A3AAD4BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:9c:28:e3:af:18:d6:e2:95:71:d5:7f:a8:
d6:f1:00:ad:9c:2f:12:8a:c9:5b:61:6d:a5:13:c0:
e4:c9:59:30:d2:46:68:cb:6d:a0:a0:22:01:7c:28:
4f:b5:d7:ea:aa:c0:63:01:d1:65:88:33:db:79:9b:
be:1f:b4:ff:48:fd:60:00:b8:25:d3:48:ae:87:b3:
ef:9f:b0:66:94:bc:e0:70:19:7a:80:6d:5b:23:c7:
37:46:9e:12:e2:e3:5d:3f:78:cf:4a:be:c0:ab:c0:
46:7c:c5:66:cd:39:26:ae:ff:f8:cd:3b:f0:be:1b:
a3:d5:83:4d:93:c6:b8:7d:07:14:b2:59:bf:71:53:
4c:1f:32:f7:b7:55:55:9b:95:3f:9f:d8:a3:91:49:
c5:22:f6:83:d3:ec:11:1a:06:a5:4b:e9:ff:7d:32:
b6:d8:59:6b:75:ec:43:5c:3e:08:5e:9b:57:46:7a:
63:c2:7d:a6:30:e8:e0:67:54:41:37:37:8c:32:ed:
97:0f:6d:8b:46:10:1f:1a:25:a7:1d:7c:40:11:24:
cd:1a:0d:53:8a:cf:71:fb:8d:03:20:82:3e:37:71:
6f:e7:c9:9e:ad:b4:d5:b9:13:ad:52:fb:7d:3b:79:
79:b0:48:d8:ec:af:79:55:73:47:aa:8f:10:d4:b6:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:7C:0F:C7:C8:A4:99:28:D7:D2:2C:96:80:D2:A1:A3:AA:D4:BC
X509v3 Authority Key Identifier:
keyid:13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34322e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.42.0/24
Signature Algorithm: sha256WithRSAEncryption
05:81:27:e6:02:ad:fd:d5:cd:75:5e:2a:b8:c4:31:09:14:bc:
27:d4:a8:37:e6:f9:4f:f0:ea:f6:94:30:56:3a:08:78:4b:b8:
ff:c2:15:57:86:65:ef:1e:e9:d2:3f:33:3c:c4:d3:ef:4f:3b:
3f:02:db:e6:eb:c4:13:dc:8b:30:6c:07:e3:0a:51:32:ea:63:
e3:ea:c0:7b:0c:7f:37:7d:96:74:33:9c:69:23:94:4f:94:b6:
3c:fb:da:7b:70:d6:1a:dc:60:26:2f:37:5e:70:31:c5:94:40:
d3:05:2f:45:45:5c:ef:a0:0a:b9:7b:10:78:0e:65:9f:8c:f6:
68:cb:65:6c:e2:26:a0:8a:9f:fe:07:cb:5e:72:d1:3b:e9:e9:
6d:3b:94:43:7b:0f:18:2e:31:62:93:c0:4e:1d:23:9f:92:ea:
1d:1d:38:6b:0a:cb:81:be:de:b7:8c:5f:9b:7e:2c:de:c1:17:
d1:9b:71:a7:a6:4a:1e:f6:23:fe:d0:9f:57:9d:40:3b:c5:d4:
c6:7e:d8:09:bd:78:b8:a4:1d:de:79:67:bf:f8:6d:6c:db:9f:
ea:a4:e3:aa:d3:6d:a4:eb:15:ab:72:d1:d5:97:08:6d:46:53:
2e:5b:81:7b:c2:0c:48:22:44:05:8e:fd:97:5a:a8:1c:37:be:
8b:95:b8:97
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIUTTPnz666vqHxWcSCHOXkmzs3v7EwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjdFRUIwMDAwMTEwLwYDVQQFEygxMzBGNTcxMjRB
ODkyMUYwMDA4M0EyMjhGRUJFMkI3ODM3MzAxNUUzMB4XDTI0MTIxNzEwMjg1NloX
DTI1MTIxNjEwMzM1NlowMzExMC8GA1UEAxMoNEQ5RjdDMEZDN0M4QTQ5OTI4RDdE
MjJDOTY4MEQyQTFBM0FBRDRCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKTmnCjjrxjW4pVx1X+o1vEArZwvEorJW2FtpRPA5MlZMNJGaMttoKAiAXwo
T7XX6qrAYwHRZYgz23mbvh+0/0j9YAC4JdNIroez75+wZpS84HAZeoBtWyPHN0ae
EuLjXT94z0q+wKvARnzFZs05Jq7/+M078L4bo9WDTZPGuH0HFLJZv3FTTB8y97dV
VZuVP5/Yo5FJxSL2g9PsERoGpUvp/30ytthZa3XsQ1w+CF6bV0Z6Y8J9pjDo4GdU
QTc3jDLtlw9ti0YQHxolpx18QBEkzRoNU4rPcfuNAyCCPjdxb+fJnq201bkTrVL7
fTt5ebBI2OyveVVzR6qPENS2xqcCAwEAAaOCAg0wggIJMB0GA1UdDgQWBBRNn3wP
x8ikmSjX0iyWgNKho6rUvDAfBgNVHSMEGDAWgBQTD1cSSokh8ACDoij+vit4NzAV
4zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyN0VFQjAwMDAvMC8xMzBGNTcx
MjRBODkyMUYwMDA4M0EyMjhGRUJFMkI3ODM3MzAxNUUzLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9FdzlYRWtxSklm
QUFnNklvX3I0cmVEY3dGZU0uY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH
MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMjdF
RUIwMDAwLzAvMzEzMDMzMmUzNDM5MmUzNDMyMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzUzMDM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBABnMSowDQYJKoZIhvcNAQELBQADggEBAAWB
J+YCrf3VzXVeKrjEMQkUvCfUqDfm+U/w6vaUMFY6CHhLuP/CFVeGZe8e6dI/MzzE
0+9POz8C2+brxBPcizBsB+MKUTLqY+PqwHsMfzd9lnQznGkjlE+Utjz72ntw1hrc
YCYvN15wMcWUQNMFL0VFXO+gCrl7EHgOZZ+M9mjLZWziJqCKn/4Hy15y0Tvp6W07
lEN7DxguMWKTwE4dI5+S6h0dOGsKy4G+3reMX5t+LN7BF9GbcaemSh72I/7Qn1ed
QDvF1MZ+2Am9eLikHd55Z7/4bWzbn+qk46rTbaTrFaty0dWXCG1GUy5bgXvCDEgi
RAWO/ZdaqBw3vouVuJc=
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:12:09 2025 by rpki-client