Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132372e302f32342d3234203d3e20313530373136.roa
File: 3130332e32352e3132372e302f32342d3234203d3e20313530373136.roa (raw, json)
Hash identifier: b3L9cAf0uoO4mi+wr9R634otmlHi3ObRmnwg67DxBT8=
Subject key identifier: 72:AA:02:57:E5:6F:89:D4:F1:E7:6B:57:07:7E:EA:40:9C:48:8F:D5
Certificate issuer: /CN=A9126DA80000/serialNumber=7DBAD4A5020D7211BB130151152A327DED2995E1
Certificate serial: 083D390F2F0B4419F788874CE8AFC8EF6D350E39
Authority key identifier: 7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fbrUpQINchG7EwFRFSoyfe0pleE.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132372e302f32342d3234203d3e20313530373136.roa
Signing time: Mon 30 Dec 2024 14:03:49 +0000
ROA not before: Mon 30 Dec 2024 13:58:49 +0000
ROA not after: Mon 29 Dec 2025 14:03:49 +0000
asID: 150716
IP address blocks: 103.25.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3d:39:0f:2f:0b:44:19:f7:88:87:4c:e8:af:c8:ef:6d:35:0e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000
Validity
Not Before: Dec 30 13:58:49 2024 GMT
Not After : Dec 29 14:03:49 2025 GMT
Subject: CN=72AA0257E56F89D4F1E76B57077EEA409C488FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:61:f8:dc:47:4f:a8:9d:51:78:8c:80:3d:f1:
49:33:26:32:45:f3:53:dd:d6:1b:4c:bc:f9:c5:b9:
c7:3a:70:7d:62:c2:16:58:43:dc:07:4a:86:2e:4d:
c3:46:bf:93:17:fc:ed:89:94:8a:9b:9c:13:63:ab:
62:80:9a:a4:2d:21:02:1b:9a:9c:2e:06:39:4b:96:
7d:b8:a4:99:fc:3e:e7:f1:3d:ec:ed:1e:5f:35:94:
c6:45:cc:c1:fb:43:4c:db:d1:95:be:48:be:1c:97:
5c:27:88:78:1d:0f:8d:0e:f7:c9:16:e2:46:d0:62:
30:ba:78:b7:96:f9:8f:65:0c:c2:06:a8:0f:ad:4d:
8e:47:ff:31:de:61:b6:6d:e0:e5:63:01:be:01:1c:
a5:ab:d3:bd:d2:e9:81:ec:d6:06:42:b1:f5:bc:e2:
06:5a:18:dc:d1:83:4c:38:89:45:6e:72:13:6a:47:
ba:43:84:74:d3:8d:a4:66:92:d6:40:c3:ad:6a:ee:
56:6f:f5:14:fd:10:30:6b:92:cd:c5:86:ad:dc:a5:
17:55:35:cc:06:eb:f2:a3:a3:f2:98:e5:d0:42:29:
3e:31:af:f1:87:16:c6:7e:39:d3:29:f6:67:96:ce:
5c:f8:b6:2c:4e:7e:ab:e1:27:2c:5d:37:3a:1c:07:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AA:02:57:E5:6F:89:D4:F1:E7:6B:57:07:7E:EA:40:9C:48:8F:D5
X509v3 Authority Key Identifier:
keyid:7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/7DBAD4A5020D7211BB130151152A327DED2995E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fbrUpQINchG7EwFRFSoyfe0pleE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/3130332e32352e3132372e302f32342d3234203d3e20313530373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.127.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d4:3a:73:f4:0a:ad:78:d7:9c:d7:ea:68:95:10:ff:37:91:
18:4c:11:02:7b:40:b7:82:50:da:9f:29:a7:71:a7:f0:ba:4b:
a0:da:8e:46:62:9a:86:d9:ca:c7:69:7f:a0:ea:4c:6d:df:1a:
54:cb:74:23:a7:6c:c2:77:4b:9a:65:98:93:d4:14:e5:e0:01:
4e:e4:3a:49:33:dc:22:21:79:7a:72:a3:a8:3c:e8:75:de:9b:
48:27:9e:2f:8b:db:dd:d7:cd:cf:de:8d:66:82:3f:db:09:c0:
ce:d4:e1:56:2b:a7:58:d1:47:f3:d5:78:12:ce:4c:bf:02:28:
e1:04:9f:cf:6b:50:78:99:58:4e:62:b5:8e:7d:4a:d8:ec:22:
2e:8b:d6:79:0b:05:c4:77:ab:41:4e:ee:5d:f6:7f:fb:61:c0:
68:e7:7a:a3:32:e9:78:05:e2:62:34:49:c7:0d:a8:d1:c1:cb:
08:f2:46:14:6e:34:76:8e:5d:f8:f5:17:c0:90:21:7d:eb:22:
a2:0b:ee:ff:db:9f:60:22:ff:14:21:87:be:27:e4:61:36:0c:
19:78:73:fe:82:ca:bf:3c:f9:c3:30:fa:b7:69:dd:d3:29:09:
46:ff:e3:df:63:36:db:ee:74:68:ab:c7:be:2c:4c:ce:c0:5b:
29:c9:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:54:08 2025 by rpki-client