Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9EA8303A01EF11EDA0677F53C4F9AE02.roa
File: 9EA8303A01EF11EDA0677F53C4F9AE02.roa (raw, json)
Hash identifier: 6w56Cm0j7pltr46oep4qYd71a3kbSDyxnna4Jr+bJLg=
Subject key identifier: 53:2E:30:DF:C8:E1:AE:9E:B7:30:DF:B3:02:5F:2E:A7:34:05:A5:52
Certificate issuer: /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Certificate serial: 03
Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9EA8303A01EF11EDA0677F53C4F9AE02.roa
Signing time: Tue 12 Jul 2022 14:33:39 +0000
ROA not before: Tue 12 Jul 2022 14:33:39 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 59216
IP address blocks: 103.25.125.0/24 maxlen: 24
103.25.126.0/24 maxlen: 24
103.25.127.0/24 maxlen: 24
2406:db00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA8, serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Validity
Not Before: Jul 12 14:33:39 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62cd8643-6c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:db:1e:bd:4a:1a:a5:9c:8e:65:c1:c0:10:
75:03:de:cc:7a:65:02:0e:ff:28:46:da:b3:62:a8:
49:2f:e6:e7:5a:34:a9:ea:7e:bc:b6:c4:0c:1e:72:
7d:a7:f1:09:a3:96:92:c5:b9:1c:4a:b7:1d:9f:40:
61:d4:f3:55:96:3f:b1:a3:75:e9:8d:48:f0:fd:9e:
c8:49:74:a5:d5:23:8d:7c:19:27:4c:ac:90:52:c3:
e6:c3:26:88:d8:b5:d9:33:ba:50:97:7b:1b:4f:b7:
bd:53:b0:47:21:83:ba:af:4b:14:fa:bc:20:0b:e7:
ef:8e:fa:23:68:0f:44:1e:a5:9f:e8:96:d5:65:68:
cb:c3:94:c1:68:8e:b3:11:eb:5a:ff:4e:b5:3f:22:
db:7d:d2:77:ea:8c:9c:bc:29:94:c2:41:2d:08:81:
9f:a7:21:32:75:08:b2:63:e7:ed:8e:13:a9:4e:70:
2c:4c:4b:6a:58:87:db:b2:bb:94:6d:11:9f:d1:90:
07:44:73:10:3d:08:f5:af:38:d4:0e:6c:38:4d:ca:
83:ea:52:67:b3:37:6e:d3:de:f2:52:81:1b:0d:27:
1f:93:ad:09:9c:d0:27:88:e8:e5:91:78:43:df:5b:
3a:7e:56:9f:65:71:8a:8b:a2:af:06:03:0e:44:9c:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2E:30:DF:C8:E1:AE:9E:B7:30:DF:B3:02:5F:2E:A7:34:05:A5:52
X509v3 Authority Key Identifier:
keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9EA8303A01EF11EDA0677F53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.125.0-103.25.127.255
IPv6:
2406:db00::/32
Signature Algorithm: sha256WithRSAEncryption
6d:98:55:d5:06:71:99:f8:d0:58:51:ef:fe:7f:9f:db:05:2e:
2e:92:e5:91:42:a7:33:50:8d:9b:8c:c8:bb:5e:00:b0:66:9c:
34:a3:4b:d9:d5:76:e4:53:73:3a:f3:be:36:0d:6b:50:4e:70:
fe:60:7f:41:4f:c8:45:28:18:8a:0c:dc:62:08:ed:b1:50:d4:
b9:3c:4d:55:05:fe:d9:7f:02:6c:43:43:11:21:31:7e:d9:45:
b3:e0:7f:d3:22:c4:26:9c:f7:3e:23:36:e0:89:43:fc:9f:6b:
2d:c2:a4:ff:f3:ac:aa:06:b3:d5:72:6d:95:03:df:7c:5a:8b:
6c:a4:12:12:0f:aa:f1:c9:56:f8:d3:9e:14:08:38:44:df:55:
92:f9:5d:4c:1a:e4:90:46:da:b6:72:cb:95:27:cd:6c:9f:5f:
77:22:79:3a:58:29:db:ff:09:2d:fe:25:8f:bf:a1:1e:5f:f6:
23:39:c6:62:21:c2:d3:c2:11:34:32:10:14:cf:9e:17:91:93:
83:37:fb:0d:b7:98:16:32:7a:40:03:da:33:5c:86:95:2d:d3:
9c:7a:af:41:36:45:84:b7:1b:61:db:b1:83:77:54:21:d5:fd:
f5:97:7f:a9:a0:d3:65:1b:67:aa:dc:5c:7b:46:17:d7:2e:bd:
7b:a4:6a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:39 2025 by rpki-client