Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa
File: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (raw, json)
Hash identifier: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=
Subject key identifier: 93:86:31:32:18:70:5D:82:19:AB:8E:CA:90:38:D1:99:8C:4E:EF:A7
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 3F2692DD4C7EB5C04E69ED005B8585CA8F1CFC2D
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa
Signing time: Tue 18 Mar 2025 16:26:45 +0000
ROA not before: Tue 18 Mar 2025 16:21:45 +0000
ROA not after: Tue 17 Mar 2026 16:26:45 +0000
asID: 142565
IP address blocks: 103.25.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:26:92:dd:4c:7e:b5:c0:4e:69:ed:00:5b:85:85:ca:8f:1c:fc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000
Validity
Not Before: Mar 18 16:21:45 2025 GMT
Not After : Mar 17 16:26:45 2026 GMT
Subject: CN=9386313218705D8219AB8ECA9038D1998C4EEFA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:e4:66:c9:b4:6e:80:3f:df:b2:05:7c:83:
74:da:d9:09:c4:88:47:3e:99:a2:7f:1d:6e:cd:49:
cb:fb:fa:06:8b:2c:f4:c4:d9:63:9e:6a:ec:15:c8:
97:aa:ad:9d:6b:c8:29:ef:eb:e5:da:15:3e:30:f9:
06:f4:08:54:4c:ea:71:56:8b:dc:5f:6d:b8:53:89:
56:65:ce:33:ef:f3:68:9b:e7:5a:69:6a:2a:17:62:
ac:b1:a9:61:c3:b6:b9:f9:6c:ac:36:b4:de:2d:37:
24:f2:7d:33:39:00:3d:00:c4:11:c5:b6:12:ca:48:
66:4e:74:09:4c:fd:79:5f:23:4c:53:39:79:e5:15:
1e:70:51:36:02:27:57:54:14:94:e6:ce:5b:33:4b:
44:43:25:c0:06:61:11:4e:54:2b:74:db:d0:07:2a:
41:64:c9:58:5a:3b:8c:61:69:05:7d:77:99:c4:23:
bf:a5:32:20:04:49:e4:28:51:be:e1:89:bf:1e:d3:
59:9a:f8:72:14:42:36:f7:0a:3e:a8:d4:68:06:b9:
0e:50:ce:2c:13:56:e0:69:4a:f8:60:1a:72:22:ba:
e7:85:27:ae:50:6d:d5:4f:3d:ce:6d:47:20:43:94:
50:5d:ca:62:1e:12:65:d6:46:a1:83:80:19:e3:a8:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:86:31:32:18:70:5D:82:19:AB:8E:CA:90:38:D1:99:8C:4E:EF:A7
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:58:d6:d3:6b:43:45:c9:79:22:71:85:7d:02:e1:01:94:d8:
9f:83:c2:ea:fe:50:63:a6:d9:c5:39:8d:b3:16:a3:ed:d2:ad:
fc:93:9b:bb:7d:ad:de:d1:62:04:05:d8:09:b9:4a:c3:8d:7f:
ed:0f:f4:6b:ed:09:bf:8b:69:06:f9:96:e0:4d:27:51:19:c2:
ae:76:3e:50:cb:b4:5c:94:7d:f5:38:82:bd:11:54:77:86:86:
c9:9c:b5:4f:37:06:ef:e1:80:0d:61:4b:e0:6c:09:ef:f9:cc:
63:5a:47:83:ca:93:ac:f1:d1:5a:2c:67:a0:39:08:b1:56:2e:
e4:f5:c2:86:07:d4:1e:c1:5a:20:6f:56:98:de:1e:6c:2d:51:
1f:49:4c:fd:af:ff:9c:71:ee:1c:d0:25:d0:ea:ac:f4:95:c2:
ca:3c:69:fb:24:84:ea:0a:04:2f:a9:9f:0a:96:0b:68:ef:9b:
c9:bf:3c:07:a9:dc:e8:8c:03:eb:03:15:18:0a:11:62:5a:1b:
2c:78:29:6d:69:57:b3:37:60:b3:1d:96:84:27:9b:30:7b:1b:
43:88:97:58:44:73:24:70:36:cf:6b:9c:6f:6a:46:05:82:cd:
0a:83:88:b5:12:a1:ed:f3:ba:cc:fd:34:87:cb:fa:44:80:96:
59:1c:e3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:34:08 2025 by rpki-client