Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa
File: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (raw, json)
Hash identifier: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=
Subject key identifier: 09:02:17:9F:D8:84:EA:0F:CC:18:46:22:4B:48:40:39:FA:6D:7E:1D
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 0D3201E9A96407CD8D5347C1DF8F9841448EB454
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa
Signing time: Mon 10 Mar 2025 13:28:10 +0000
ROA not before: Mon 10 Mar 2025 13:23:10 +0000
ROA not after: Mon 09 Mar 2026 13:28:10 +0000
asID: 146859
IP address blocks: 103.25.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:32:01:e9:a9:64:07:cd:8d:53:47:c1:df:8f:98:41:44:8e:b4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000
Validity
Not Before: Mar 10 13:23:10 2025 GMT
Not After : Mar 9 13:28:10 2026 GMT
Subject: CN=0902179FD884EA0FCC1846224B484039FA6D7E1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:15:9b:5c:83:e2:42:86:99:90:bf:bc:96:
a6:30:65:4a:5e:94:b0:56:61:f8:c9:09:42:46:ff:
9a:d6:4c:53:33:97:2a:7d:b8:52:95:4c:5a:3e:c0:
3a:92:06:76:38:66:09:60:6b:62:7d:95:c9:22:b8:
52:47:c7:32:02:d8:76:f1:f4:c1:1b:31:0e:db:8d:
66:75:5e:60:ed:a4:e7:eb:7c:e1:80:25:84:c8:e2:
4b:8f:97:90:89:02:b6:e4:c8:96:70:4a:ec:45:cb:
3a:79:49:30:ea:c9:8c:c9:2e:bd:a6:2f:f7:ed:11:
ee:b6:0d:2f:7f:79:c7:f7:91:09:8c:13:02:6c:fa:
7f:b3:12:d1:10:be:37:ab:84:da:6a:0f:dd:b1:71:
ca:0c:fb:d1:36:75:1e:f6:20:8c:92:47:98:d2:17:
16:13:f9:18:7f:b2:52:e2:28:37:47:8f:45:a5:2c:
3f:c1:57:1c:27:33:9a:e3:de:0b:88:4b:51:34:2d:
aa:87:b5:68:10:90:ae:c1:e3:13:20:8a:64:79:4e:
ac:93:1e:46:e5:d4:b3:ff:48:26:cf:82:36:f5:6a:
ed:64:16:f2:70:ee:a1:7d:79:f8:28:fa:bd:ab:bc:
d7:a5:6c:ed:6c:bb:52:73:a0:7a:c0:62:c2:96:01:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:02:17:9F:D8:84:EA:0F:CC:18:46:22:4B:48:40:39:FA:6D:7E:1D
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.126.0/24
Signature Algorithm: sha256WithRSAEncryption
94:96:5c:22:f5:d2:eb:3d:93:e2:84:55:b9:4c:05:36:ae:f4:
81:50:84:09:5e:8e:20:3b:d9:cf:1d:ca:1b:38:22:35:3f:01:
b1:98:ac:00:71:4c:c2:89:93:ae:f8:d8:e7:e4:b7:a1:3a:33:
c6:8f:57:d1:0d:46:ff:6a:3f:f3:46:5e:2d:0d:0c:63:c4:ce:
1d:07:ac:3d:41:ae:d6:f6:a2:8c:c0:38:67:ef:b7:43:88:0f:
98:97:d6:1c:3e:b4:95:8c:2a:77:5b:81:c3:b1:8e:8e:66:4d:
2e:dc:5f:77:00:6c:66:9c:fa:46:83:a8:08:4a:d0:01:fb:7b:
d1:54:94:c6:a1:e7:9d:6c:1f:e8:07:cd:12:3b:e4:e5:37:82:
f9:7d:b8:ae:88:19:e3:4d:8c:ab:10:de:b8:ca:36:19:b5:40:
ce:e3:a6:0b:53:57:57:a2:07:01:51:93:2f:ad:75:dc:17:2c:
eb:99:76:bb:d3:3b:c3:25:3e:1c:ac:c2:ff:b2:d8:35:97:de:
f5:56:e1:09:04:3b:fb:cd:98:c5:eb:81:7c:a1:bc:07:51:d3:
a8:3e:2b:ad:c8:69:ea:f7:ef:a6:a1:24:3b:54:49:11:ec:cf:
b9:ee:c6:3d:42:7f:8a:3c:a6:c9:b9:61:b2:81:17:2b:75:5b:
34:c7:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:20 2025 by rpki-client