Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132342e302f32342d3234203d3e203230343733.roa
File: 3130332e32352e3132342e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: YBKoW1NZuxVu41Fd0amDuYc5f54I22y0Sejcdqjm/qg=
Subject key identifier: FE:14:95:B0:23:CF:8D:9F:00:27:12:C2:72:2E:66:3F:90:89:97:E5
Certificate issuer: /CN=A9126DA80000/serialNumber=7DBAD4A5020D7211BB130151152A327DED2995E1
Certificate serial: 29DCF89CCF4B62ACAAF80A7684E27B680787D164
Authority key identifier: 7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fbrUpQINchG7EwFRFSoyfe0pleE.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132342e302f32342d3234203d3e203230343733.roa
Signing time: Mon 30 Dec 2024 14:18:23 +0000
ROA not before: Mon 30 Dec 2024 14:13:23 +0000
ROA not after: Mon 29 Dec 2025 14:18:23 +0000
asID: 20473
IP address blocks: 103.25.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:dc:f8:9c:cf:4b:62:ac:aa:f8:0a:76:84:e2:7b:68:07:87:d1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=7DBAD4A5020D7211BB130151152A327DED2995E1
Validity
Not Before: Dec 30 14:13:23 2024 GMT
Not After : Dec 29 14:18:23 2025 GMT
Subject: CN=FE1495B023CF8D9F002712C2722E663F908997E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:3a:f9:b8:a0:b8:a5:db:de:a7:56:77:fa:
98:53:0f:e4:fb:8b:9b:07:9b:4f:9f:e6:9a:8d:b3:
fb:1b:bb:22:24:17:63:81:0b:07:0e:43:a4:21:1c:
ee:9e:4b:ed:8f:b1:2a:e0:02:57:59:a1:37:d2:43:
2f:3f:e3:b1:cb:6b:67:e2:d3:aa:bc:42:4d:86:06:
36:ce:77:f3:0f:45:13:1a:f6:f0:99:e1:db:4b:79:
62:a6:e8:ca:54:ac:50:7b:67:9a:5a:3c:f5:90:c7:
4d:b8:85:4d:57:16:1d:d3:65:c5:87:5b:ec:ef:50:
c6:97:62:23:2c:c7:dc:c5:7c:17:0b:16:04:1e:4b:
a1:da:c1:e9:a6:ac:00:94:f8:92:12:40:67:ce:5c:
03:8e:7f:26:da:1f:7e:c8:80:bc:f6:3a:5d:db:0d:
31:0a:30:51:84:a6:41:f8:25:ef:97:a0:37:dd:fa:
5f:76:74:d9:64:de:82:5f:80:41:54:32:1e:e1:6a:
97:06:88:88:e6:b6:ae:1e:f6:d7:5a:53:d3:a9:d4:
00:f4:8e:76:a2:ba:88:fa:73:d1:8c:88:3f:28:ec:
64:58:f5:69:15:5e:95:f6:88:c7:79:f4:52:74:69:
22:95:8c:6d:ef:c9:10:4f:10:0d:de:3c:9f:ad:7e:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:14:95:B0:23:CF:8D:9F:00:27:12:C2:72:2E:66:3F:90:89:97:E5
X509v3 Authority Key Identifier:
keyid:7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/7DBAD4A5020D7211BB130151152A327DED2995E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fbrUpQINchG7EwFRFSoyfe0pleE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132342e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.124.0/24
Signature Algorithm: sha256WithRSAEncryption
87:42:e6:35:49:c9:62:14:41:3c:6b:4c:98:66:d2:c3:2d:6d:
7f:28:2d:d6:78:49:c4:c4:4e:4f:af:ed:52:9c:c8:02:06:dc:
7e:97:2f:c1:a1:2b:69:1e:ae:0d:7b:8d:a3:94:75:3f:75:e2:
06:1a:d0:bd:6d:b5:56:24:97:bb:71:cc:69:f5:72:ad:d0:f7:
fb:d3:68:67:c1:6f:11:be:ec:33:88:14:c4:df:f9:b9:a1:ad:
d6:cc:00:88:88:69:21:0f:28:03:82:cf:8a:94:ab:bb:da:ea:
56:bc:eb:f6:e1:0c:a3:fa:f1:5f:1f:74:bc:7c:e3:b1:1c:ec:
c9:8c:c1:d2:39:72:cf:25:54:77:6d:be:ae:ba:69:19:af:0f:
91:ac:39:ce:9f:84:51:ad:79:8d:c7:30:a6:47:6a:fb:d0:1f:
60:bf:a2:0a:2e:43:76:78:77:89:e3:38:35:86:36:4f:3c:1c:
77:b5:1b:26:81:a5:aa:30:13:51:3e:a7:3f:23:cf:35:8e:7b:
93:a6:51:07:5b:de:e3:43:80:4b:30:28:54:f0:80:5c:d5:9e:
1b:09:6c:69:b9:a8:31:73:ba:ce:5d:6f:5e:f7:1f:53:95:47:
6e:2c:41:10:e9:11:29:c2:d0:b5:b2:df:b7:95:36:ec:b6:4f:
92:ac:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:43 2025 by rpki-client