Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/9E89DFBC35A711EEBF686756C4F9AE02.roa
File: 9E89DFBC35A711EEBF686756C4F9AE02.roa (raw, json)
Hash identifier: 6LaGL315na4HLmNtxoNJj1lbiRXuDW/oRHYSM3bRIZM=
Subject key identifier: CA:7F:0E:D4:04:A6:4A:1A:DA:5E:51:84:24:CA:76:EB:15:37:20:86
Certificate issuer: /CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Certificate serial: 1604
Authority key identifier: 1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/9E89DFBC35A711EEBF686756C4F9AE02.roa
Signing time: Sat 16 Dec 2023 17:24:38 +0000
ROA not before: Sat 16 Dec 2023 17:24:38 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.104.60.0/23 maxlen: 24
103.104.62.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5636 (0x1604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Validity
Not Before: Dec 16 17:24:38 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=657ddd56-0803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:f0:6b:37:cc:c4:91:8f:23:7b:74:13:ca:
fc:65:89:f2:4c:9e:e8:34:7b:fb:e1:1c:75:3e:83:
57:6c:c2:fc:60:5e:69:24:ab:6c:c9:59:85:c1:4a:
fd:4b:5d:04:49:26:6a:77:59:cc:cc:a5:14:52:5f:
4a:f0:51:a1:11:4a:7a:36:b6:4b:65:fb:e3:aa:ac:
09:00:d9:e9:66:c1:15:3f:28:c9:75:80:38:15:bf:
e9:e9:65:78:73:ee:a4:9c:c1:ea:ec:11:98:57:0a:
a2:b7:02:a4:5d:22:9d:36:f0:64:7a:76:b8:ff:fa:
51:c7:b5:f5:ad:11:6d:e3:b2:e4:7b:c2:a6:23:b9:
c2:b3:07:58:c4:19:72:b7:90:93:15:fe:63:70:46:
71:fe:5a:97:6f:df:80:32:e0:5c:fd:7b:ff:de:93:
58:7d:03:ad:b6:2b:7c:27:7e:d7:5b:11:84:aa:96:
44:80:26:a7:e6:08:32:81:f2:c5:76:1c:c6:95:7f:
58:84:16:84:70:4b:2e:58:ad:fb:88:bc:b1:8c:09:
68:42:07:6c:cd:66:a4:41:7b:09:86:97:56:d4:b2:
66:7c:67:ae:4c:03:b0:d7:6c:38:d5:53:b7:9c:af:
6a:50:1c:c4:b7:b5:5a:11:16:41:21:d3:c2:26:a8:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7F:0E:D4:04:A6:4A:1A:DA:5E:51:84:24:CA:76:EB:15:37:20:86
X509v3 Authority Key Identifier:
keyid:1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/9E89DFBC35A711EEBF686756C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.60.0/22
Signature Algorithm: sha256WithRSAEncryption
03:8e:be:e6:6a:f4:9b:e7:8b:4c:c7:57:bd:5b:05:22:b1:5c:
1a:da:65:cd:e7:4c:10:1a:37:76:4c:c0:d3:09:35:22:2f:b4:
b2:41:f2:10:08:df:13:b1:17:f1:4e:de:81:ef:eb:9f:01:19:
92:35:fe:9f:e4:15:87:9f:3c:1d:66:13:41:eb:18:01:91:0e:
f6:3f:bc:01:fc:1b:ba:45:00:e7:ee:c7:7b:46:00:80:1a:cc:
5b:20:9b:b0:a6:6f:3a:f2:7a:3e:f5:e7:b8:0f:a1:56:29:d8:
31:98:3a:2d:db:40:21:8d:50:a9:7f:ed:c2:5b:1b:d5:b1:db:
87:4e:33:11:af:6b:65:63:e3:5d:01:a2:25:60:a4:94:9c:c4:
e8:34:8c:89:51:a0:24:11:a3:46:e8:e2:bd:30:f7:aa:9d:fb:
a1:0c:c7:68:01:3e:0b:34:af:f4:ca:0c:91:99:0a:cf:ba:ca:
81:48:f0:0a:57:13:dd:95:36:a0:c2:52:92:7f:6e:01:c0:59:
93:84:ab:54:35:43:36:99:21:f0:9a:79:83:98:f1:99:62:96:
14:7d:8a:be:b7:38:f1:ec:13:ac:07:9f:c0:ea:51:64:61:65:
20:9f:44:a5:07:ce:ce:fe:43:fc:b1:ce:5c:0b:e6:d0:8d:bf:
a1:b0:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org