Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa
File: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (raw, json)
Hash identifier: n9HD+rXd08ygfJGMTAKnKfWiLi6E3ZmZVft3gtfU394=
Subject key identifier: 43:D0:F0:5F:81:3A:6E:F7:33:45:16:75:58:38:BE:A5:38:83:DC:3B
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 4DB759E758E39419AB91AE2C89B39351F469D0BD
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa
Signing time: Tue 31 Dec 2024 07:04:46 +0000
ROA not before: Tue 31 Dec 2024 06:59:46 +0000
ROA not after: Tue 30 Dec 2025 07:04:46 +0000
asID: 146859
IP address blocks: 103.25.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b7:59:e7:58:e3:94:19:ab:91:ae:2c:89:b3:93:51:f4:69:d0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Dec 31 06:59:46 2024 GMT
Not After : Dec 30 07:04:46 2025 GMT
Subject: CN=43D0F05F813A6EF7334516755838BEA53883DC3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:c7:25:be:29:aa:65:3e:e8:21:ef:3b:02:
06:74:c4:ff:18:79:4f:16:49:5f:3e:15:51:cb:72:
8a:ca:02:2a:62:0f:16:09:35:db:52:3a:b1:29:4d:
ae:d5:2c:38:94:ef:48:0a:3c:f3:e8:8c:23:97:a2:
bb:eb:cf:61:25:78:8c:45:f8:46:fc:1c:b8:8b:a5:
93:ad:10:bb:8d:64:09:75:12:46:14:28:48:34:87:
e5:3c:7e:5c:4c:57:4c:af:9e:d6:cc:17:2b:80:43:
22:4b:9c:eb:57:f9:a7:5a:a3:1d:54:63:b5:40:13:
c8:e1:24:70:3a:54:02:76:2e:77:e2:bf:e0:42:e0:
48:b6:c9:29:aa:2d:aa:8c:b7:19:0a:44:3d:6b:6b:
56:47:3d:d8:d0:7b:7d:ca:39:02:57:8e:f5:a5:96:
b3:a4:b6:b2:54:35:99:c8:b6:02:96:44:ce:3d:38:
1f:9b:08:bd:da:bb:40:e2:4a:d0:fd:a8:92:f5:7d:
7c:ee:d1:99:34:b2:20:5b:18:20:2e:9e:ca:62:25:
8d:75:06:f2:56:d4:df:c0:a6:0c:72:cf:65:7c:43:
bc:e7:6c:02:1d:87:03:73:ca:d6:5d:b9:01:98:e5:
3c:81:4c:8b:6d:f7:7a:4e:00:97:40:b7:3e:74:4f:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D0:F0:5F:81:3A:6E:F7:33:45:16:75:58:38:BE:A5:38:83:DC:3B
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a1:92:3c:d9:27:8a:e0:59:be:f2:f2:7a:e5:f2:16:18:2c:
df:6e:63:a0:3c:2f:66:89:d0:db:20:28:f3:6d:30:93:a2:b0:
e4:06:50:25:70:2e:9a:70:e1:5b:e0:e4:5c:a4:a1:45:af:74:
ab:ef:cd:79:2b:00:f2:f5:08:3d:f1:1b:4c:77:c9:50:c2:43:
8b:34:0a:1a:5a:97:e0:5a:57:23:53:ea:2d:79:1f:9a:33:39:
ab:a9:d2:d2:8e:be:8e:c7:92:3c:d9:f7:b6:52:aa:b9:64:c5:
77:df:e3:d0:5f:59:a9:62:a9:49:c1:c6:51:53:a5:0a:7e:27:
ec:9a:4e:88:a2:96:fa:50:10:a6:6d:5c:32:8d:c8:51:58:38:
9a:09:21:8b:4a:0f:9e:af:59:17:ca:7b:c6:eb:8c:e1:4c:15:
00:14:fc:c6:fb:41:d9:ba:87:f6:f7:87:6a:4a:f8:53:11:6a:
40:12:b7:ea:1b:a9:32:65:73:b6:7f:67:8b:60:18:1d:a0:ce:
16:6f:fa:76:8b:aa:17:b7:2c:09:db:50:29:44:18:7c:a3:3c:
23:75:ff:6e:c4:f4:1d:c0:0a:eb:4b:5e:00:4f:15:00:64:3d:
21:6f:2f:71:21:1c:c7:22:51:92:4e:65:d7:a1:76:b4:ba:28:
28:6e:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:29 2025 by rpki-client