Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313530373136.roa
File: 3130332e32352e3132372e302f32342d3234203d3e20313530373136.roa (raw, json)
Hash identifier: wXMWiW38uyH55XKgPHob1ZYvsZRnrXbNONKkDxsk70w=
Subject key identifier: 14:0A:CA:C8:59:43:B7:8F:87:D7:2D:AE:27:67:4B:35:7B:48:5A:64
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 71DF46EA02946F99269068EFD3329366FA3032D2
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313530373136.roa
Signing time: Tue 31 Dec 2024 07:04:46 +0000
ROA not before: Tue 31 Dec 2024 06:59:46 +0000
ROA not after: Tue 30 Dec 2025 07:04:46 +0000
asID: 150716
IP address blocks: 103.25.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:df:46:ea:02:94:6f:99:26:90:68:ef:d3:32:93:66:fa:30:32:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000
Validity
Not Before: Dec 31 06:59:46 2024 GMT
Not After : Dec 30 07:04:46 2025 GMT
Subject: CN=140ACAC85943B78F87D72DAE27674B357B485A64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:43:02:91:e2:9c:ce:5a:f8:9d:b8:fe:4e:
ef:60:c9:b9:7b:34:f3:f0:76:fc:99:52:ab:88:3c:
42:a9:4a:f9:f9:12:d6:26:2c:5c:ac:dc:ac:bf:f0:
1a:3b:43:60:5a:da:f9:7f:a8:89:bb:44:09:f2:e8:
6b:18:e6:b1:01:0d:09:90:70:17:8d:47:84:40:34:
e5:4b:39:14:be:e2:97:b4:16:47:b6:e5:bc:bd:89:
45:0b:9e:46:5a:ed:c9:2e:2e:22:34:b0:10:32:38:
ef:86:25:be:35:7d:84:b3:71:d2:e9:5b:a3:7e:32:
52:31:1b:51:3d:77:4a:ea:2b:97:50:8b:15:3a:44:
b5:a8:49:f9:9f:28:54:b3:85:bb:f5:d9:c1:be:b3:
46:34:4e:43:06:6a:06:d2:bb:d9:de:f5:1a:5e:f4:
dd:90:70:b6:ea:1e:1a:bd:1f:f3:a1:a6:5b:21:8c:
dc:b7:2f:3a:74:66:42:e2:cc:46:88:3f:79:d1:d6:
38:d3:71:8b:cb:0f:f1:4d:70:c8:2b:44:c1:57:ac:
f1:82:99:4a:6c:95:fc:73:ff:d5:7f:dd:4b:a8:e2:
17:72:1a:46:6f:78:5f:a8:19:fc:26:0b:6b:e1:4a:
2c:72:56:4e:47:86:3d:dd:76:5f:76:d0:d4:27:11:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0A:CA:C8:59:43:B7:8F:87:D7:2D:AE:27:67:4B:35:7B:48:5A:64
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313530373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.127.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d1:fe:57:45:47:48:5b:d7:de:2c:37:1e:99:73:94:45:60:
6a:d6:7e:68:3d:59:12:25:c0:fd:63:ea:7d:4a:4a:ed:00:48:
43:67:e1:da:01:88:e9:40:12:bd:ef:d6:73:0f:79:08:56:ba:
b8:f4:b9:8c:52:4e:26:17:72:81:ef:a5:fa:80:13:e9:6e:1c:
38:33:be:ee:31:a7:d3:0d:ea:60:27:b8:c0:b6:b3:53:ae:9b:
05:8f:c8:b6:9d:1e:a9:9e:77:7c:0e:f6:2c:68:7a:d2:bf:17:
2e:43:e2:f8:ef:9c:61:86:f6:91:05:25:7c:82:90:64:24:00:
37:62:cd:fe:bd:58:49:f3:47:f6:ca:29:b4:4c:aa:43:2d:d2:
23:de:52:a3:13:fc:7d:ad:b4:8a:50:7f:74:b5:c3:23:b3:b7:
f5:82:1d:f3:47:92:9e:80:62:97:89:33:97:90:08:dd:06:f4:
c3:21:d3:42:11:3f:ae:b8:d7:8e:0a:e0:c6:9b:96:09:73:3d:
31:80:03:b2:7c:71:72:be:53:02:36:f6:ac:81:ad:3c:4b:cd:
6f:fc:46:01:43:e0:da:b5:a4:15:62:02:f7:97:81:37:a2:95:
e9:03:4c:8d:a2:12:9e:cd:44:09:8f:e8:71:04:2a:40:b9:4d:
40:f7:88:82
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUcd9G6gKUb5kmkGjv0zKTZvowMtIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy
N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI0MTIzMTA2NTk0NloX
DTI1MTIzMDA3MDQ0NlowMzExMC8GA1UEAxMoMTQwQUNBQzg1OTQzQjc4Rjg3RDcy
REFFMjc2NzRCMzU3QjQ4NUE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKhpQwKR4pzOWviduP5O72DJuXs08/B2/JlSq4g8QqlK+fkS1iYsXKzcrL/w
GjtDYFra+X+oibtECfLoaxjmsQENCZBwF41HhEA05Us5FL7il7QWR7blvL2JRQue
RlrtyS4uIjSwEDI474YlvjV9hLNx0ulbo34yUjEbUT13Suorl1CLFTpEtahJ+Z8o
VLOFu/XZwb6zRjROQwZqBtK72d71Gl703ZBwtuoeGr0f86GmWyGM3LcvOnRmQuLM
Rog/edHWONNxi8sP8U1wyCtEwVes8YKZSmyV/HP/1X/dS6jiF3IaRm94X6gZ/CYL
a+FKLHJWTkeGPd12X3bQ1CcRqMkCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBQUCsrI
WUO3j4fXLa4nZ0s1e0haZDAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy
MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx
Mm01LUxPeHNXdGpMa180UkkuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTI2
REE4MDAwMC8xLzMxMzAzMzJlMzIzNTJlMzEzMjM3MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzEzNTMwMzczMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxl/MA0GCSqGSIb3DQEBCwUA
A4IBAQB20f5XRUdIW9feLDcemXOURWBq1n5oPVkSJcD9Y+p9SkrtAEhDZ+HaAYjp
QBK979ZzD3kIVrq49LmMUk4mF3KB76X6gBPpbhw4M77uMafTDepgJ7jAtrNTrpsF
j8i2nR6pnnd8DvYsaHrSvxcuQ+L475xhhvaRBSV8gpBkJAA3Ys3+vVhJ80f2yim0
TKpDLdIj3lKjE/x9rbSKUH90tcMjs7f1gh3zR5KegGKXiTOXkAjdBvTDIdNCET+u
uNeOCuDGm5YJcz0xgAOyfHFyvlMCNvasga08S81v/EYBQ+DataQVYgL3l4E3opXp
A0yNohKezUQJj+hxBCpAuU1A94iC
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:38:42 2025 by rpki-client