Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa
File: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (raw, json)
Hash identifier: QYP9BVn18bYvIcWLPymRKv5zSWIGAorKssjHc5yM4D4=
Subject key identifier: 6B:15:72:3D:7C:80:63:88:A4:A9:A3:C4:7A:5F:CC:4C:21:67:0F:DE
Certificate issuer: /CN=A9126DA80000/serialNumber=7DBAD4A5020D7211BB130151152A327DED2995E1
Certificate serial: 4CFE42361BC6D315C5ACCF4CA3AFD1BA603B30B9
Authority key identifier: 7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fbrUpQINchG7EwFRFSoyfe0pleE.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa
Signing time: Mon 30 Dec 2024 14:03:46 +0000
ROA not before: Mon 30 Dec 2024 13:58:46 +0000
ROA not after: Mon 29 Dec 2025 14:03:46 +0000
asID: 146859
IP address blocks: 103.25.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fe:42:36:1b:c6:d3:15:c5:ac:cf:4c:a3:af:d1:ba:60:3b:30:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000
Validity
Not Before: Dec 30 13:58:46 2024 GMT
Not After : Dec 29 14:03:46 2025 GMT
Subject: CN=6B15723D7C806388A4A9A3C47A5FCC4C21670FDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:6d:3f:b4:45:65:c0:2a:83:f5:a7:62:3e:
63:7e:ef:49:d4:d0:d2:21:21:88:43:0d:aa:89:40:
c9:90:85:58:db:6b:e0:22:7b:fc:0d:e7:7f:b8:28:
69:76:6a:da:63:2d:39:e7:04:a5:65:50:57:80:fc:
15:f2:d9:20:cc:98:16:ea:44:3f:f7:57:56:c4:5e:
92:d7:05:7c:d3:8a:a3:b2:2e:cc:1b:0d:c9:ae:fd:
04:64:54:18:22:a4:81:3a:f6:35:c7:f1:fb:fc:e3:
7a:2f:5c:40:f8:1c:c1:f2:6c:79:5f:6b:47:ff:8b:
58:2f:f6:69:b8:0e:d2:68:dd:e9:c2:05:58:59:24:
39:8b:00:0d:bb:3a:ae:3a:c3:26:94:c6:42:2c:51:
c5:99:d9:7b:45:58:8d:86:4d:bd:c2:88:2a:1c:0a:
1a:fe:f0:ca:4d:68:62:fe:1a:7c:1e:3f:3c:32:22:
8e:40:43:e1:9c:d4:aa:9e:73:01:42:50:82:cf:c9:
b4:35:1b:df:f2:fe:aa:4e:ee:d9:46:1c:c9:87:bc:
3c:b8:1d:35:5e:fc:05:9f:61:d2:d9:52:8d:53:e7:
7f:1b:97:3b:92:d5:10:69:66:05:c9:ce:c7:63:a4:
05:17:0c:b6:aa:64:51:9e:7f:df:61:68:ae:7f:28:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:15:72:3D:7C:80:63:88:A4:A9:A3:C4:7A:5F:CC:4C:21:67:0F:DE
X509v3 Authority Key Identifier:
keyid:7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/7DBAD4A5020D7211BB130151152A327DED2995E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fbrUpQINchG7EwFRFSoyfe0pleE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.126.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:65:49:0f:df:92:b8:e5:d9:49:7e:70:cd:a6:3d:23:92:21:
b0:92:ef:4f:21:39:28:87:54:f3:20:25:ee:b4:f3:a2:55:cc:
1d:98:65:4d:5c:2e:8d:58:4d:12:0a:78:ed:df:0b:2f:dc:9e:
b2:6b:0c:de:3a:8b:97:a2:9d:69:05:2f:de:ee:81:86:e3:eb:
37:fa:f9:33:b6:e6:62:2c:cf:38:62:c1:98:b2:6e:47:e3:fe:
d7:45:f6:c0:27:96:6c:0f:cb:cb:99:6f:a1:1f:43:1f:92:6d:
a3:e1:af:83:bf:17:07:74:98:c5:c7:9e:2a:4e:0b:ea:f8:bf:
55:9b:f5:87:07:04:c0:36:4c:6d:fc:1c:f8:91:60:e1:82:47:
07:ea:35:96:4e:2e:42:1b:7b:01:9c:2c:46:ad:16:69:7e:55:
31:30:d5:d1:1c:3e:c0:65:ff:7c:73:31:90:28:a0:9c:97:ec:
a9:99:84:bc:41:57:0a:64:f0:6e:11:10:6f:96:33:6d:16:bc:
50:50:de:f4:83:d2:cc:49:d5:01:bd:d8:e5:0d:8c:e1:eb:e1:
07:86:d9:c7:78:8e:50:89:95:10:99:4f:9b:79:89:7b:03:c1:
6a:e0:58:7b:d2:5d:59:dc:68:70:31:1d:d6:59:0b:5a:a4:19:
2b:c9:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:54:13 2025 by rpki-client