Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/AACD5190369811EE8110BB6EC4F9AE02.roa
File: AACD5190369811EE8110BB6EC4F9AE02.roa (raw, json)
Hash identifier: zdBCZDjDbIT5ZDRjQ4AfyCL8Ua/2HG8oJTP5yjKQHLE=
Subject key identifier: 93:A5:00:F4:F1:64:D7:D5:B3:34:68:FE:DC:A9:FA:5D:9E:0B:B6:C3
Certificate issuer: /CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Certificate serial: 15BA
Authority key identifier: 1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/AACD5190369811EE8110BB6EC4F9AE02.roa
Signing time: Wed 09 Aug 2023 09:39:43 +0000
ROA not before: Wed 09 Aug 2023 09:39:43 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 197555
IP address blocks: 103.104.60.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5562 (0x15ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Validity
Not Before: Aug 9 09:39:43 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64d35ede-5e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:b4:aa:41:b1:f6:a6:4d:b6:73:7f:cc:5e:
f2:8a:a0:7f:e9:81:c2:2b:5b:d0:74:26:cb:5b:fe:
24:7f:b8:fb:7c:c4:7f:4b:5b:39:39:ab:4d:da:19:
35:39:cd:e2:6a:03:4a:78:cd:15:53:b4:7b:27:ef:
12:8b:d1:9b:40:05:c6:de:74:df:a4:22:7c:58:53:
c3:8e:78:86:b5:8b:29:b9:65:f6:b1:31:94:e1:1d:
45:e6:47:b0:36:ce:c3:2a:70:3b:19:e5:d0:a8:6c:
48:b6:a2:cf:e2:07:7b:52:eb:92:ec:8f:df:53:bb:
f3:c5:1e:71:ed:31:5b:64:3b:5b:b0:8e:64:a8:20:
ab:f7:e4:82:0e:8f:ae:2c:a0:4f:bd:f0:ed:7c:92:
0c:ea:59:b0:8e:12:cc:89:c2:96:b2:d7:1c:80:08:
dc:3f:56:d7:b4:82:d3:96:14:09:8b:69:b9:8a:a9:
f7:8b:a0:c2:77:84:d0:b9:bf:86:21:b1:f9:66:9d:
8c:5f:ae:7e:df:0b:dc:73:36:25:3a:11:85:84:5b:
1e:b4:e5:48:3e:c1:e8:96:0d:c7:4d:55:ec:5c:21:
de:73:53:f6:15:50:7c:02:be:46:58:cb:22:f2:47:
c1:6f:47:ed:09:42:50:30:6e:8b:eb:a3:ab:8f:7c:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A5:00:F4:F1:64:D7:D5:B3:34:68:FE:DC:A9:FA:5D:9E:0B:B6:C3
X509v3 Authority Key Identifier:
keyid:1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/AACD5190369811EE8110BB6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:8e:da:a8:9e:bd:df:79:5d:86:b4:20:7d:20:e2:b7:09:a6:
71:be:87:d7:57:70:77:4c:65:a6:70:5c:08:fa:c3:5a:e2:4d:
c2:a1:75:f4:5b:b9:5b:c0:73:ed:ae:6a:0f:ae:5e:e8:dc:70:
82:53:b3:1d:62:e4:6d:0f:c9:eb:88:23:b1:43:31:8c:99:32:
c6:66:15:0a:d3:ed:b2:9a:72:06:51:30:4a:3b:be:2a:38:56:
20:fa:ba:76:33:f7:dc:6b:36:e5:ee:8a:17:57:2a:b2:62:b8:
7b:95:60:9f:e7:8a:9b:d3:df:58:5a:e6:d4:21:ae:55:8c:de:
25:2f:20:c4:2b:6d:36:90:ca:d4:14:21:91:f6:bf:e0:23:d0:
bb:bb:95:35:75:25:73:e4:51:16:d7:cd:ec:98:40:2d:8f:d8:
33:11:cb:e4:b8:9d:c3:4a:a8:9d:5c:59:08:14:d3:1b:2d:23:
c6:d9:43:67:fa:5e:34:4d:b5:78:a6:4a:30:3d:74:f2:af:89:
52:fe:a6:f0:48:10:fa:f9:a3:41:0b:99:8c:eb:e0:9e:f7:78:
b6:22:3a:99:97:93:10:96:dc:8e:80:39:75:7d:40:2f:75:fc:
95:60:f8:85:e6:f5:8b:b7:f5:4a:a6:93:b3:62:73:87:f7:91:
13:d3:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org