Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34332e302f32342d3234203d3e2035303635.roa
File: 3130332e34392e34332e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: sYy4JBx6auMajAuH3BltEb/I9TvI/1VVnCjrQfq7dYA=
Subject key identifier: 49:BC:CE:07:13:C4:F5:83:1A:23:E3:F7:14:E9:A9:83:89:51:3C:AE
Certificate issuer: /CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
Certificate serial: 70F2CCC6A47437B7F061E9BD6E505E4E9C6DF807
Authority key identifier: 13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34332e302f32342d3234203d3e2035303635.roa
Signing time: Tue 17 Dec 2024 10:35:28 +0000
ROA not before: Tue 17 Dec 2024 10:30:28 +0000
ROA not after: Tue 16 Dec 2025 10:35:28 +0000
asID: 5065
IP address blocks: 103.49.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f2:cc:c6:a4:74:37:b7:f0:61:e9:bd:6e:50:5e:4e:9c:6d:f8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB0000, serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
Validity
Not Before: Dec 17 10:30:28 2024 GMT
Not After : Dec 16 10:35:28 2025 GMT
Subject: CN=49BCCE0713C4F5831A23E3F714E9A98389513CAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:ef:20:14:cc:90:8e:ea:0c:cd:2b:c1:f8:
97:63:32:34:19:c7:b2:a2:00:b5:5b:2e:bd:7a:4b:
11:c6:da:e7:3e:3c:16:a1:fb:ce:06:22:77:b5:78:
b4:10:46:69:aa:25:6e:9e:39:a4:55:00:15:03:0d:
a2:19:14:7c:c0:af:2f:13:83:4b:61:b7:38:da:f9:
dc:cd:65:10:83:b8:14:32:e5:db:b5:25:dc:20:24:
a3:92:4f:ca:80:6c:08:44:db:19:6b:9d:a9:20:d2:
f8:3d:75:e3:7b:3e:dc:52:a5:3e:82:08:38:96:d7:
a9:ae:89:9f:c2:3c:85:b9:39:6d:d8:21:7d:ae:b3:
bc:86:a5:b9:7d:0e:df:de:ad:3b:11:d7:5d:14:0e:
f5:b8:f7:88:2f:2c:c3:78:f2:60:4f:29:9e:56:13:
e6:30:6f:4e:6f:dc:41:f3:8c:29:25:a8:31:5c:f6:
e9:d1:56:16:1d:df:21:69:30:39:6c:5f:a8:22:59:
88:af:d8:fe:b6:d0:dd:89:cb:9a:9f:9f:a9:30:0a:
8e:e7:a5:d3:b3:b1:52:55:ba:72:0e:ea:69:47:7b:
b6:dc:2e:81:ce:f0:1d:d5:10:c2:c1:79:68:4e:1a:
74:02:f3:5a:72:6b:58:c0:2c:cd:d2:81:e8:2c:d4:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BC:CE:07:13:C4:F5:83:1A:23:E3:F7:14:E9:A9:83:89:51:3C:AE
X509v3 Authority Key Identifier:
keyid:13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34332e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.43.0/24
Signature Algorithm: sha256WithRSAEncryption
89:94:4a:b7:76:21:01:bf:b9:f9:4c:e8:7f:3f:ad:c7:a0:47:
e7:01:b3:d4:e9:ae:d0:f5:a1:9f:8a:f5:7e:23:01:7b:4d:a8:
6f:47:2e:99:15:81:95:b4:70:8f:45:62:c6:be:6d:46:03:11:
a6:19:bc:26:36:40:54:24:11:14:37:64:04:13:53:49:83:27:
80:1c:e4:8d:13:ac:55:b8:24:f1:81:0b:c7:ac:07:be:86:68:
26:aa:46:ef:c8:1e:d5:ba:08:53:3f:00:57:95:8a:a6:b6:f7:
ca:48:cb:9b:22:e4:25:d6:69:c1:a7:c3:2f:a2:4e:60:a8:a6:
a4:90:77:d0:14:38:c8:1f:0e:47:34:3a:58:f1:1f:c9:b2:37:
fc:ac:40:ac:1a:93:50:9b:e0:02:84:89:ab:46:da:28:40:68:
95:f4:52:ed:e5:ec:45:89:62:26:17:8e:d2:f8:ab:b8:5f:80:
bf:00:9b:b9:b9:14:b2:e8:ea:e9:2c:b3:68:6e:ce:7e:9d:49:
66:27:e8:b4:10:79:30:a7:17:cb:a9:9d:15:03:c7:e4:6e:27:
8f:35:46:b2:d3:8f:b2:28:a8:a3:9a:30:93:db:16:75:7a:e0:
9c:8d:ad:33:45:c4:98:d7:ea:7c:6f:51:35:cf:d6:b9:49:89:
13:4c:13:65
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIUcPLMxqR0N7fwYem9blBeTpxt+AcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjdFRUIwMDAwMTEwLwYDVQQFEygxMzBGNTcxMjRB
ODkyMUYwMDA4M0EyMjhGRUJFMkI3ODM3MzAxNUUzMB4XDTI0MTIxNzEwMzAyOFoX
DTI1MTIxNjEwMzUyOFowMzExMC8GA1UEAxMoNDlCQ0NFMDcxM0M0RjU4MzFBMjNF
M0Y3MTRFOUE5ODM4OTUxM0NBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL+57yAUzJCO6gzNK8H4l2MyNBnHsqIAtVsuvXpLEcba5z48FqH7zgYid7V4
tBBGaaolbp45pFUAFQMNohkUfMCvLxODS2G3ONr53M1lEIO4FDLl27Ul3CAko5JP
yoBsCETbGWudqSDS+D1143s+3FKlPoIIOJbXqa6Jn8I8hbk5bdghfa6zvIaluX0O
396tOxHXXRQO9bj3iC8sw3jyYE8pnlYT5jBvTm/cQfOMKSWoMVz26dFWFh3fIWkw
OWxfqCJZiK/Y/rbQ3YnLmp+fqTAKjuel07OxUlW6cg7qaUd7ttwugc7wHdUQwsF5
aE4adALzWnJrWMAszdKB6CzUm50CAwEAAaOCAg0wggIJMB0GA1UdDgQWBBRJvM4H
E8T1gxoj4/cU6amDiVE8rjAfBgNVHSMEGDAWgBQTD1cSSokh8ACDoij+vit4NzAV
4zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyN0VFQjAwMDAvMC8xMzBGNTcx
MjRBODkyMUYwMDA4M0EyMjhGRUJFMkI3ODM3MzAxNUUzLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9FdzlYRWtxSklm
QUFnNklvX3I0cmVEY3dGZU0uY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH
MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMjdF
RUIwMDAwLzAvMzEzMDMzMmUzNDM5MmUzNDMzMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzUzMDM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBABnMSswDQYJKoZIhvcNAQELBQADggEBAImU
Srd2IQG/uflM6H8/rcegR+cBs9TprtD1oZ+K9X4jAXtNqG9HLpkVgZW0cI9FYsa+
bUYDEaYZvCY2QFQkERQ3ZAQTU0mDJ4Ac5I0TrFW4JPGBC8esB76GaCaqRu/IHtW6
CFM/AFeViqa298pIy5si5CXWacGnwy+iTmCopqSQd9AUOMgfDkc0OljxH8myN/ys
QKwak1Cb4AKEiatG2ihAaJX0Uu3l7EWJYiYXjtL4q7hfgL8Am7m5FLLo6ukss2hu
zn6dSWYn6LQQeTCnF8upnRUDx+RuJ481RrLTj7IoqKOaMJPbFnV64JyNrTNFxJjX
6nxvUTXP1rlJiRNME2U=
-----END CERTIFICATE-----
Generated at Sun Apr 13 14:30:39 2025 by rpki-client