Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132352e302f32342d3234203d3e20313532363732.roa
File: 3130332e32352e3132352e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier: za4KSl7iXJ311A910LaoEI9WCQRB/Akx2CWbbdkRB9o=
Subject key identifier: 15:2E:45:15:5B:AC:62:5F:5C:2C:69:11:58:C4:11:5C:AD:CF:A6:C3
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 27E622566C240DA7C292230D49F50446206E0972
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132352e302f32342d3234203d3e20313532363732.roa
Signing time: Wed 22 Jan 2025 13:03:10 +0000
ROA not before: Wed 22 Jan 2025 12:58:10 +0000
ROA not after: Wed 21 Jan 2026 13:03:10 +0000
asID: 152672
IP address blocks: 103.25.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e6:22:56:6c:24:0d:a7:c2:92:23:0d:49:f5:04:46:20:6e:09:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000
Validity
Not Before: Jan 22 12:58:10 2025 GMT
Not After : Jan 21 13:03:10 2026 GMT
Subject: CN=152E45155BAC625F5C2C691158C4115CADCFA6C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:15:54:81:41:68:59:47:4f:65:d1:d0:da:
a4:cb:f3:ae:0e:e6:fd:55:07:9e:92:f6:0e:7f:63:
70:23:da:57:cb:94:49:22:bf:19:5b:9c:07:da:41:
68:1d:04:73:85:62:cc:7b:e5:4c:52:8c:75:71:7d:
3f:a0:7b:d6:e9:5b:ec:f2:6c:2a:3f:fe:32:d4:37:
f4:eb:44:9c:8d:c0:85:d5:54:06:14:e3:60:0c:2a:
51:c4:b9:5b:15:82:ca:5d:5f:cd:3f:fc:3c:db:21:
3f:ef:f6:06:3a:3b:97:ef:a4:85:41:ed:cf:11:5a:
96:95:f1:e9:dd:43:e4:93:6b:01:07:18:ce:f3:7a:
8a:06:ab:c4:db:61:86:0b:50:1a:ce:95:aa:79:f5:
b9:64:ac:90:08:2e:41:e1:21:89:30:ca:60:c1:02:
5d:2a:d0:d4:b3:c9:06:1b:36:dc:ac:c8:6a:aa:ee:
b6:ed:d6:ed:5a:c5:06:22:3a:b1:6c:51:fb:23:e6:
62:6f:d2:42:f9:aa:c0:91:0b:a9:65:8c:04:d9:40:
49:e9:5e:51:5c:1b:0c:6a:b9:73:9e:3b:90:6a:9f:
39:90:db:62:da:19:64:83:46:9d:d7:13:9d:42:ed:
94:d6:3e:f6:23:35:8b:51:4a:40:90:c1:2f:b2:04:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2E:45:15:5B:AC:62:5F:5C:2C:69:11:58:C4:11:5C:AD:CF:A6:C3
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132352e302f32342d3234203d3e20313532363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.125.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7a:ca:52:a0:5a:5f:be:09:23:5e:8d:e1:32:ad:59:b5:80:
0e:87:2c:df:81:0e:b7:a7:c0:f6:e2:00:c9:52:b0:f3:a0:90:
93:1c:16:4b:bc:e8:a8:71:90:bb:23:3d:87:ed:bd:43:df:19:
b9:1c:fe:a6:24:0f:9e:6d:51:f6:4d:ee:bf:9e:5e:51:a3:63:
5d:20:53:57:82:ef:a0:c4:9e:48:69:03:48:86:88:b1:fe:75:
66:7c:c8:27:ad:7e:81:bc:62:15:f9:e9:cb:8c:b6:da:24:c4:
83:16:a7:21:08:61:5d:ad:58:08:f8:71:6c:94:d5:8a:48:6e:
7d:48:f4:b8:bc:21:8b:82:11:3b:2a:a3:53:1e:87:3f:9c:14:
f5:e0:81:6a:9b:77:a6:d4:ba:bc:da:e3:62:20:76:96:d8:d0:
97:f2:ec:5a:51:38:ed:ae:36:31:23:4f:9c:ee:32:05:26:e2:
1a:78:f8:92:fe:8d:4d:12:77:ac:87:8e:23:49:29:3a:65:ef:
50:f7:48:26:5f:0b:cd:f0:cd:b0:19:0c:5f:0d:b6:8c:e8:1b:
a3:e5:05:c4:03:f1:03:9c:d5:4b:66:eb:12:cb:03:fd:eb:f3:
6e:9d:82:19:b3:5a:dd:81:5a:f8:5f:bd:99:fc:41:8d:4a:7d:
3f:32:49:5e
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUJ+YiVmwkDafCkiMNSfUERiBuCXIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy
N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MDEyMjEyNTgxMFoX
DTI2MDEyMTEzMDMxMFowMzExMC8GA1UEAxMoMTUyRTQ1MTU1QkFDNjI1RjVDMkM2
OTExNThDNDExNUNBRENGQTZDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANa/FVSBQWhZR09l0dDapMvzrg7m/VUHnpL2Dn9jcCPaV8uUSSK/GVucB9pB
aB0Ec4VizHvlTFKMdXF9P6B71ulb7PJsKj/+MtQ39OtEnI3AhdVUBhTjYAwqUcS5
WxWCyl1fzT/8PNshP+/2Bjo7l++khUHtzxFalpXx6d1D5JNrAQcYzvN6igarxNth
hgtQGs6Vqnn1uWSskAguQeEhiTDKYMECXSrQ1LPJBhs23KzIaqrutu3W7VrFBiI6
sWxR+yPmYm/SQvmqwJELqWWMBNlASeleUVwbDGq5c547kGqfOZDbYtoZZINGndcT
nULtlNY+9iM1i1FKQJDBL7IEKUUCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBQVLkUV
W6xiX1wsaRFYxBFcrc+mwzAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy
MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx
Mm01LUxPeHNXdGpMa180UkkuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTI2
REE4MDAwMC8xLzMxMzAzMzJlMzIzNTJlMzEzMjM1MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzEzNTMyMzYzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxl9MA0GCSqGSIb3DQEBCwUA
A4IBAQCSespSoFpfvgkjXo3hMq1ZtYAOhyzfgQ63p8D24gDJUrDzoJCTHBZLvOio
cZC7Iz2H7b1D3xm5HP6mJA+ebVH2Te6/nl5Ro2NdIFNXgu+gxJ5IaQNIhoix/nVm
fMgnrX6BvGIV+enLjLbaJMSDFqchCGFdrVgI+HFslNWKSG59SPS4vCGLghE7KqNT
Hoc/nBT14IFqm3em1Lq82uNiIHaW2NCX8uxaUTjtrjYxI0+c7jIFJuIaePiS/o1N
Enesh44jSSk6Ze9Q90gmXwvN8M2wGQxfDbaM6Buj5QXEA/EDnNVLZusSywP96/Nu
nYIZs1rdgVr4X72Z/EGNSn0/Mkle
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:37:47 2025 by rpki-client