Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/5015B684DEC211EE9E9C2253C4F9AE02.roa
File: 5015B684DEC211EE9E9C2253C4F9AE02.roa (raw, json)
Hash identifier: WiDNQSF/q+y9uhwv3U789sFiTGqIXpvIKcDWWEHCQis=
Subject key identifier: 63:FA:8C:31:D7:13:55:36:B8:62:8F:0D:A6:80:21:69:86:1F:33:AD
Certificate issuer: /CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Certificate serial: 1634
Authority key identifier: 1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/5015B684DEC211EE9E9C2253C4F9AE02.roa
Signing time: Sun 10 Mar 2024 09:41:04 +0000
ROA not before: Sun 10 Mar 2024 09:41:04 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 151487
IP address blocks: 103.104.60.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5684 (0x1634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Validity
Not Before: Mar 10 09:41:04 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65ed8030-7247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:96:04:cb:50:ef:7f:06:89:0e:a9:74:4b:
8a:9b:29:8d:07:08:78:05:4c:f1:b9:b3:3c:44:55:
c6:9f:b3:df:35:47:47:5e:f4:70:e8:05:da:47:19:
0b:63:d9:39:21:a1:0b:6a:70:8a:f8:84:16:30:01:
ce:f4:dd:6b:4a:98:27:4d:5a:50:80:1a:ad:19:c0:
33:cc:75:05:c6:ce:ee:de:04:34:1f:25:35:43:ec:
be:a6:57:11:8e:6c:fe:c4:6b:c9:3b:53:6f:ea:af:
f0:87:1e:47:39:00:08:25:40:d5:f5:3f:c7:8d:09:
28:5e:60:56:79:d4:cb:76:10:ea:d7:19:b5:6d:0b:
4d:3e:77:c5:ba:ee:30:26:46:07:e3:ac:45:76:54:
0d:7c:3d:19:04:a8:55:0c:fb:e1:51:52:46:19:4c:
3b:ae:22:60:54:73:20:15:0c:62:1c:93:1f:36:a9:
ef:32:f8:e8:75:d7:92:44:ce:36:99:4c:bc:e8:32:
71:68:2d:d7:25:b0:43:df:5a:02:6c:60:2c:b1:06:
31:35:2b:12:c3:30:a0:73:90:69:c5:30:64:a7:fa:
cc:64:96:0d:52:91:f5:2e:d5:9b:ca:46:7a:43:09:
dc:05:94:10:64:57:5f:de:e7:90:93:9a:4d:32:10:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FA:8C:31:D7:13:55:36:B8:62:8F:0D:A6:80:21:69:86:1F:33:AD
X509v3 Authority Key Identifier:
keyid:1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/5015B684DEC211EE9E9C2253C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.60.0/23
Signature Algorithm: sha256WithRSAEncryption
10:1b:cf:66:20:5c:20:35:92:b9:e9:56:5f:01:fa:a3:73:4b:
50:34:33:1c:17:38:4e:7f:9e:1d:7a:ac:a3:da:5c:4e:be:df:
dd:b6:ef:87:ab:9b:74:5d:9e:83:a1:ae:98:0e:87:fc:0d:d0:
71:52:1f:62:86:7d:d9:7a:7b:c4:7e:bf:47:a9:fd:3a:5d:4f:
73:52:ee:18:e9:2a:8c:28:86:d7:cc:c6:50:08:63:1a:36:ce:
5a:c0:f8:05:57:4e:6b:42:fe:0a:00:ae:c9:b5:00:c8:e0:32:
1b:ac:6e:b8:92:a3:8e:2a:6a:1c:7f:48:32:49:e7:f1:eb:8e:
d2:b0:c0:bc:24:1a:ec:0a:9d:c0:d0:fe:74:64:b9:82:67:57:
f0:34:57:2f:13:73:b7:e3:07:73:d4:8c:32:6d:b5:74:b7:46:
5e:8b:a8:3c:9d:52:86:75:dc:d5:fc:44:4b:ee:f5:45:a5:87:
99:12:30:1c:b9:08:0b:70:e0:9e:43:90:0f:48:96:c6:59:84:
09:bc:ad:d3:da:62:1f:e5:fd:7e:b2:61:89:55:30:89:67:fa:
4d:78:7e:16:39:0a:e2:32:20:22:a3:b9:8e:2d:7a:a1:ba:ae:
d6:fb:2d:f7:b8:8c:54:31:16:68:b0:e4:5c:27:ac:ce:95:8c:
7c:38:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org