Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e203136353039.roa
File: 3130332e32352e3132342e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: 0ULEQRz2ldMvt+RFzaD6gYHgW85Kkj7F+ioCi2gyZr8=
Subject key identifier: 16:CE:04:9C:75:A4:DC:16:BB:28:DE:AA:28:A0:96:60:7F:85:4C:68
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 458EB4280F9CA242F631A5358A719CAA73E371F5
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e203136353039.roa
Signing time: Tue 31 Dec 2024 07:04:46 +0000
ROA not before: Tue 31 Dec 2024 06:59:46 +0000
ROA not after: Tue 30 Dec 2025 07:04:46 +0000
asID: 16509
IP address blocks: 103.25.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8e:b4:28:0f:9c:a2:42:f6:31:a5:35:8a:71:9c:aa:73:e3:71:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000
Validity
Not Before: Dec 31 06:59:46 2024 GMT
Not After : Dec 30 07:04:46 2025 GMT
Subject: CN=16CE049C75A4DC16BB28DEAA28A096607F854C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:71:b5:63:12:e5:9a:48:c9:31:b7:a1:c1:
6f:f8:5f:80:e2:a0:42:e9:32:28:33:58:89:a4:ad:
83:02:ec:bb:b5:fc:05:4f:d2:f5:a4:00:b0:20:c3:
e3:60:40:1a:eb:03:d3:15:19:99:31:a5:35:d9:fd:
59:76:e9:7f:f1:f9:4c:ff:78:9b:53:39:2e:8f:bf:
29:23:a4:f3:fe:f5:c8:57:79:75:2c:4e:dd:a2:2b:
bf:47:4e:e2:b3:40:31:da:2b:df:04:61:9e:5d:36:
4a:c7:64:0d:fe:1e:e5:e2:a4:ef:81:0d:65:ea:3f:
0f:49:36:38:22:13:e2:ce:58:1b:c3:e0:3b:56:49:
db:4d:63:58:d4:37:24:b7:96:51:04:3d:3f:43:5b:
09:b8:b9:89:02:e5:69:87:4e:ba:10:4a:3b:b8:b4:
60:b8:a2:d0:8a:0a:9d:2c:91:07:78:a6:06:12:51:
96:b4:0d:7c:cc:03:e0:b5:8f:f1:18:4c:a3:e5:36:
65:48:b0:67:58:d4:8d:8a:fd:58:18:6b:0a:66:24:
f9:09:04:7e:45:27:3a:71:59:67:ea:9d:cc:e7:e4:
c2:49:ee:a0:de:0c:aa:a7:62:eb:44:c3:2c:19:0a:
58:b7:7a:37:0f:8e:07:45:73:f3:e1:12:dd:bc:49:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CE:04:9C:75:A4:DC:16:BB:28:DE:AA:28:A0:96:60:7F:85:4C:68
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.124.0/24
Signature Algorithm: sha256WithRSAEncryption
31:90:06:b5:27:6b:32:8e:9b:89:66:31:fe:57:df:c2:71:96:
64:3c:f1:b6:e8:ef:4a:42:95:1b:85:2d:15:c2:77:43:e0:47:
19:35:ed:00:ba:aa:ee:3d:6c:0e:9d:13:18:21:bc:56:ba:62:
2a:6d:cb:15:5d:88:55:86:58:c5:aa:79:03:3d:41:9b:3d:8b:
d3:63:ae:d7:e1:03:38:79:e8:f9:29:18:68:93:b3:97:8f:e6:
fd:29:d8:79:0b:31:6b:fc:8e:8a:ab:e6:df:dc:44:b4:ed:54:
76:fe:bc:78:a2:e1:b9:60:53:a4:6b:2e:59:41:71:a2:b3:54:
88:f0:51:a3:b8:ba:73:a2:26:f7:ae:32:82:3d:da:5c:71:87:
98:f6:20:13:96:b2:20:14:63:8d:06:bc:23:b8:a6:79:c1:f0:
fd:9f:2e:36:15:3b:96:4c:c3:6e:f6:9c:d0:1b:f7:cb:65:b9:
db:fb:51:cb:fb:2e:bc:8c:9f:b6:1b:da:00:4a:e4:cd:70:a3:
4b:b4:65:f4:09:32:37:9f:bb:a6:58:80:16:58:0d:7c:bb:cc:
6f:eb:99:fd:18:c6:16:6b:d1:05:eb:cd:23:c8:e8:62:25:e8:
19:d4:53:a1:ba:a0:f7:8b:22:07:57:20:93:03:b6:e0:44:6e:
32:65:d7:7a
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIURY60KA+cokL2MaU1inGcqnPjcfUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy
N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI0MTIzMTA2NTk0NloX
DTI1MTIzMDA3MDQ0NlowMzExMC8GA1UEAxMoMTZDRTA0OUM3NUE0REMxNkJCMjhE
RUFBMjhBMDk2NjA3Rjg1NEM2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKo0cbVjEuWaSMkxt6HBb/hfgOKgQukyKDNYiaStgwLsu7X8BU/S9aQAsCDD
42BAGusD0xUZmTGlNdn9WXbpf/H5TP94m1M5Lo+/KSOk8/71yFd5dSxO3aIrv0dO
4rNAMdor3wRhnl02SsdkDf4e5eKk74ENZeo/D0k2OCIT4s5YG8PgO1ZJ201jWNQ3
JLeWUQQ9P0NbCbi5iQLlaYdOuhBKO7i0YLii0IoKnSyRB3imBhJRlrQNfMwD4LWP
8RhMo+U2ZUiwZ1jUjYr9WBhrCmYk+QkEfkUnOnFZZ+qdzOfkwknuoN4Mqqdi60TD
LBkKWLd6Nw+OB0Vz8+ES3bxJCykCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQWzgSc
daTcFrso3qoooJZgf4VMaDAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy
MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx
Mm01LUxPeHNXdGpMa180UkkuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMjZE
QTgwMDAwLzEvMzEzMDMzMmUzMjM1MmUzMTMyMzQyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxl8MA0GCSqGSIb3DQEBCwUAA4IB
AQAxkAa1J2syjpuJZjH+V9/CcZZkPPG26O9KQpUbhS0VwndD4EcZNe0AuqruPWwO
nRMYIbxWumIqbcsVXYhVhljFqnkDPUGbPYvTY67X4QM4eej5KRhok7OXj+b9Kdh5
CzFr/I6Kq+bf3ES07VR2/rx4ouG5YFOkay5ZQXGis1SI8FGjuLpzoib3rjKCPdpc
cYeY9iATlrIgFGONBrwjuKZ5wfD9ny42FTuWTMNu9pzQG/fLZbnb+1HL+y68jJ+2
G9oASuTNcKNLtGX0CTI3n7umWIAWWA18u8xv65n9GMYWa9EF680jyOhiJegZ1FOh
uqD3iyIHVyCTA7bgRG4yZdd6
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:51:13 2025 by rpki-client