Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132342e302f32342d3234203d3e203134363138.roa
File: 3130332e32352e3132342e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: uX5GkWCgDMrsGJqdpBTclXbSzyTvJ0GNDN8FVSzB0Ak=
Subject key identifier: 3E:A0:DF:4E:8F:73:AF:92:85:8A:35:42:23:CB:60:94:B1:D1:50:19
Certificate issuer: /CN=A9126DA80000/serialNumber=7DBAD4A5020D7211BB130151152A327DED2995E1
Certificate serial: 3A3423A4C705F8E9C2EA1335222F9DDFA4046862
Authority key identifier: 7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fbrUpQINchG7EwFRFSoyfe0pleE.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132342e302f32342d3234203d3e203134363138.roa
Signing time: Mon 30 Dec 2024 14:18:09 +0000
ROA not before: Mon 30 Dec 2024 14:13:09 +0000
ROA not after: Mon 29 Dec 2025 14:18:09 +0000
asID: 14618
IP address blocks: 103.25.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:34:23:a4:c7:05:f8:e9:c2:ea:13:35:22:2f:9d:df:a4:04:68:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000
Validity
Not Before: Dec 30 14:13:09 2024 GMT
Not After : Dec 29 14:18:09 2025 GMT
Subject: CN=3EA0DF4E8F73AF92858A354223CB6094B1D15019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:26:74:6f:e9:99:68:9b:c5:66:36:d3:36:
2f:93:c0:d5:13:a2:bc:b9:5d:fe:b3:d0:de:2a:ec:
e5:06:27:0a:f4:6a:c0:38:02:5b:72:55:22:85:21:
77:85:02:33:54:06:88:9a:94:36:3b:03:35:cc:6c:
8b:11:21:a9:8c:9b:1a:8a:d3:19:68:af:3c:ac:25:
dd:07:7f:9f:a5:73:83:6d:ff:ef:3a:f4:14:f2:b6:
ad:a6:8a:68:35:39:2d:c6:a7:b4:f0:e7:f3:54:ca:
2f:66:03:00:99:af:cb:2e:79:f6:88:9c:08:da:ab:
b1:cc:c5:54:f6:1b:7b:77:6e:bb:0f:49:3a:2e:59:
52:dd:23:3f:4a:18:87:a2:d1:74:c1:ce:5c:cf:e6:
85:a1:a2:4e:0e:1d:65:29:60:2c:b1:c7:06:8a:85:
11:65:2a:86:95:b0:60:4b:79:d6:41:6a:c5:12:83:
33:aa:4e:4a:cf:2c:d4:32:4e:13:fe:1c:28:e8:22:
b3:3e:39:a9:72:12:45:8b:53:8a:c8:01:dd:62:00:
19:2b:6e:85:08:f9:d8:16:3f:57:22:09:f4:2f:fd:
ff:14:fc:fc:b6:70:48:88:58:5c:e9:9d:15:21:2d:
ca:f5:22:ee:c3:52:41:31:b6:e0:7a:d3:2c:14:7e:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A0:DF:4E:8F:73:AF:92:85:8A:35:42:23:CB:60:94:B1:D1:50:19
X509v3 Authority Key Identifier:
keyid:7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/7DBAD4A5020D7211BB130151152A327DED2995E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fbrUpQINchG7EwFRFSoyfe0pleE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132342e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:04:2a:9c:5f:00:eb:0e:66:51:1e:93:0f:4b:5c:35:71:d2:
d8:69:9e:83:22:53:25:2c:dd:16:aa:27:16:c7:00:e0:9e:85:
c1:6a:4a:37:f0:8d:1a:ae:8d:69:13:c3:ab:6b:58:b6:17:e1:
38:fa:94:8d:c0:43:25:3d:88:4b:f4:97:29:e1:50:80:c7:c2:
72:ff:a0:79:01:b4:01:50:5d:39:64:0b:4c:9d:e0:5b:ae:b5:
22:57:2b:76:e2:0a:2d:39:03:8c:f4:73:d0:fc:32:57:14:74:
0c:d2:d3:3c:7d:84:63:3e:ba:a0:a5:3d:47:e8:f7:99:10:71:
88:6d:80:ad:2b:9a:2f:4d:88:4e:0e:e1:7d:67:6d:10:f0:68:
30:e3:29:43:f7:47:2c:9a:50:76:5a:af:c8:db:a1:ab:84:4c:
8e:99:8d:28:90:de:d9:f2:af:6f:cb:26:0e:24:de:ef:6d:bf:
a5:f7:c4:f6:50:9b:61:3f:2c:0d:41:14:40:aa:51:c4:a4:7e:
07:ff:5e:5b:56:cf:11:84:1c:03:9c:a7:08:b9:81:7d:c4:6e:
0f:51:8a:16:05:26:7c:45:3f:77:45:92:72:3d:37:e5:54:e8:
99:5e:c5:30:8a:82:32:a0:df:a3:b2:59:9c:df:cb:a3:7a:b5:
76:0d:30:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:44:43 2025 by rpki-client