Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132352e302f32342d3234203d3e20333933353036.roa
File: 3130332e32352e3132352e302f32342d3234203d3e20333933353036.roa (raw, json)
Hash identifier: i7cdlEdntJ2vKQMsqAn848gWNRfQpXd8LnC7bIU5e90=
Subject key identifier: 4F:F2:37:1D:4D:8F:1B:A2:47:A8:61:65:94:2C:E4:40:FA:8D:21:35
Certificate issuer: /CN=A9126DA80000/serialNumber=7DBAD4A5020D7211BB130151152A327DED2995E1
Certificate serial: 31CDFE719E77B5BDFF10287EEC5D46C020618A24
Authority key identifier: 7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fbrUpQINchG7EwFRFSoyfe0pleE.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132352e302f32342d3234203d3e20333933353036.roa
Signing time: Mon 30 Dec 2024 14:03:51 +0000
ROA not before: Mon 30 Dec 2024 13:58:51 +0000
ROA not after: Mon 29 Dec 2025 14:03:51 +0000
asID: 393506
IP address blocks: 103.25.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:cd:fe:71:9e:77:b5:bd:ff:10:28:7e:ec:5d:46:c0:20:61:8a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=7DBAD4A5020D7211BB130151152A327DED2995E1
Validity
Not Before: Dec 30 13:58:51 2024 GMT
Not After : Dec 29 14:03:51 2025 GMT
Subject: CN=4FF2371D4D8F1BA247A86165942CE440FA8D2135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:ae:af:7b:63:2c:a6:2b:30:42:b4:0c:59:
84:9d:4a:f4:50:32:ae:51:53:05:d9:d9:59:f7:fe:
33:8c:64:10:8c:38:b4:dd:10:78:89:38:52:41:d6:
9e:0d:86:01:35:9b:86:4a:5a:77:08:37:d9:2a:3a:
df:25:23:d7:37:e7:5f:ac:6c:5f:45:03:ab:7c:08:
c1:38:bb:6c:e1:a0:e8:5a:b1:45:88:ca:da:88:a3:
49:cd:4a:a0:f7:98:6a:af:21:af:df:bf:6c:81:3f:
d0:2d:68:fb:55:2e:fc:45:e6:8f:17:7a:8d:cd:78:
33:5f:ba:56:58:a8:e7:8f:df:c9:ad:bf:4c:15:88:
fe:02:11:28:8e:df:2d:b6:2f:c5:5e:cc:01:04:31:
b6:87:43:d1:12:98:37:a7:c5:91:36:84:b9:8d:ca:
88:48:14:bd:91:b5:12:30:7a:54:38:21:12:01:00:
65:de:d9:d5:cf:dd:db:17:30:23:89:56:e1:49:f9:
11:8b:24:2f:61:52:1d:77:20:02:67:33:25:03:dd:
50:58:06:a0:e0:64:dc:c6:84:92:54:c2:b4:23:05:
2c:66:ae:9d:02:4d:b4:97:17:cf:45:e2:be:4e:8b:
50:a2:58:ef:5e:2f:7b:0b:c9:b7:85:a2:86:4d:f1:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F2:37:1D:4D:8F:1B:A2:47:A8:61:65:94:2C:E4:40:FA:8D:21:35
X509v3 Authority Key Identifier:
keyid:7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/7DBAD4A5020D7211BB130151152A327DED2995E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fbrUpQINchG7EwFRFSoyfe0pleE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132352e302f32342d3234203d3e20333933353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.125.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2c:41:a2:e4:f7:e8:a5:3c:5b:a6:ad:c7:c5:c0:e3:01:6a:
11:b7:a2:6f:25:7a:de:8a:7b:e8:de:7d:e9:e9:3b:de:5c:4e:
48:c4:2f:f6:c9:83:0f:45:e8:bb:01:4c:27:e2:d7:f2:5b:f3:
74:8c:ee:60:1b:12:bf:76:6c:62:8c:fe:66:0f:5d:38:a4:7d:
7a:93:ac:60:b9:78:e2:cd:07:d6:fd:40:2e:02:b5:a1:a2:e6:
a3:1a:37:53:f6:d9:b1:b9:bd:1d:c6:f8:48:0c:7a:1e:ae:0b:
ae:6b:c2:46:40:0e:85:33:aa:59:3f:cb:46:46:66:a4:84:c0:
aa:72:59:e0:24:fe:52:ff:c0:4e:0c:80:bc:af:24:3b:88:83:
1a:87:bc:b2:ce:4f:1f:53:90:64:b0:58:04:8c:f5:4a:7e:4b:
b4:81:1e:8e:a8:f9:79:70:1d:01:26:a0:d5:da:3a:dd:bb:ef:
48:16:f5:7f:35:86:07:ea:e3:39:74:24:e9:4a:dd:d1:1c:d8:
f9:23:f6:31:2b:64:18:f1:a7:87:50:d3:cc:c3:07:75:66:ce:
1d:e6:3a:30:86:5e:18:51:28:cf:f5:c5:25:be:91:a8:70:f9:
75:3f:9b:c0:d9:57:c3:51:bb:6d:00:4b:dd:37:e9:be:92:a1:
0e:26:6b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:50:01 2025 by rpki-client