Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9DB1D80C01EF11EDA0677F53C4F9AE02.roa
File: 9DB1D80C01EF11EDA0677F53C4F9AE02.roa (raw, json)
Hash identifier: Pf60qdt7lcxfE4YuegX9ahYJChqEaJUa9PrqBHbScXg=
Subject key identifier: CA:F7:58:66:11:C3:6F:CC:4E:ED:C3:50:C2:0E:A5:6B:F0:4A:D7:72
Certificate issuer: /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Certificate serial: 02
Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9DB1D80C01EF11EDA0677F53C4F9AE02.roa
Signing time: Tue 12 Jul 2022 14:33:38 +0000
ROA not before: Tue 12 Jul 2022 14:33:38 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 58925
IP address blocks: 103.25.124.0/24 maxlen: 24
103.25.125.0/24 maxlen: 24
103.25.126.0/24 maxlen: 24
103.25.127.0/24 maxlen: 24
2406:db00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA8
Validity
Not Before: Jul 12 14:33:38 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62cd8641-21c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:ef:1a:94:6a:e4:12:61:21:b3:77:b3:e8:
7b:8d:bb:2a:2b:8d:92:dc:d9:66:63:7e:48:96:55:
09:a4:74:0c:54:ff:2f:b9:35:7b:e6:db:8b:16:fa:
1b:a7:3a:6c:57:b2:bf:aa:cf:63:b4:43:b6:fa:05:
0b:27:22:72:c7:af:c2:3e:cc:57:de:82:86:24:8e:
1e:0f:fa:eb:4f:12:56:e1:07:97:11:3e:73:b0:e7:
27:69:90:ba:85:da:b9:b5:a2:f7:6c:7e:3d:90:88:
3f:40:c8:8a:27:6f:47:de:7c:20:be:0d:93:de:60:
4c:86:51:86:bc:0e:fa:71:5a:ff:90:7b:41:f3:8e:
dd:1d:db:9b:79:ce:12:34:f0:cc:79:10:2a:f0:d5:
31:23:d7:35:7c:92:27:5a:c1:7d:37:7b:28:cd:11:
26:b4:12:d4:a1:50:84:fd:29:f1:65:2f:15:30:f8:
15:10:40:3c:31:a1:8e:5e:27:51:0f:c8:ee:55:87:
b4:4b:02:8f:98:64:38:4d:22:0c:76:dc:63:e5:a8:
68:1e:3f:78:2b:a8:ef:dc:3d:96:d6:18:b0:62:5b:
c6:1d:5f:81:07:01:72:d2:14:0d:37:6d:c0:fd:c1:
cf:cd:92:08:7e:49:b2:4d:20:1f:31:bc:c6:ee:a5:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F7:58:66:11:C3:6F:CC:4E:ED:C3:50:C2:0E:A5:6B:F0:4A:D7:72
X509v3 Authority Key Identifier:
keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9DB1D80C01EF11EDA0677F53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.124.0/22
IPv6:
2406:db00::/32
Signature Algorithm: sha256WithRSAEncryption
4f:e9:a9:ea:59:b2:d5:8b:4a:0e:31:c0:fe:07:14:eb:e0:0d:
65:84:30:e8:f2:36:23:fe:4f:33:45:3e:ab:5e:98:0c:c9:c1:
eb:18:2e:dd:16:c8:56:f8:af:6c:24:9c:0d:c3:02:96:56:9b:
3d:35:d3:22:40:a0:01:5c:70:a3:be:d3:d4:e8:b8:a7:36:43:
6c:45:0d:b8:f9:29:46:d1:9b:e8:a3:db:73:90:e8:07:0b:5a:
90:a2:5f:48:83:77:79:20:f9:93:bb:24:62:b1:aa:3d:b9:d3:
9f:1f:ea:5a:2b:bb:1b:c8:81:54:bb:70:29:72:b4:31:ba:36:
8e:2e:91:e3:b1:fc:bd:ca:e0:95:00:31:ff:e9:88:e1:0a:37:
fb:55:c2:5a:94:07:9e:eb:67:d9:80:d3:49:69:dd:7b:8d:0b:
64:9a:f5:3c:58:d3:01:13:72:97:03:c4:32:01:e8:ce:44:37:
73:fb:cf:66:57:81:03:49:4c:c8:f5:fb:8a:7b:db:59:8d:83:
bd:7a:e8:47:c7:df:25:af:f9:36:47:ed:46:48:87:43:bc:84:
dc:72:59:b4:b3:21:4c:60:68:28:ec:7a:b5:94:5f:5f:a8:8a:
41:dc:16:fe:c6:76:1a:2e:ff:0a:4f:c8:ae:43:7c:32:91:b4:
9d:8f:3b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:25:16 2025 by rpki-client