Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/CF7B03BE706111EDA9CCDB76C4F9AE02.roa
File: CF7B03BE706111EDA9CCDB76C4F9AE02.roa (raw, json)
Hash identifier: FMwBhzybg2Ij9w8c6NagwMYVdEN/CRADXR5qGrYldZs=
Subject key identifier: 5D:66:7D:DC:52:B1:37:83:9A:0A:D8:83:A9:2D:0D:BE:B7:EE:F5:D3
Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial: 0855
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/CF7B03BE706111EDA9CCDB76C4F9AE02.roa
Signing time: Wed 28 Jun 2023 20:41:43 +0000
ROA not before: Wed 28 Jun 2023 20:41:43 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 131340
IP address blocks: 45.250.229.0/24 maxlen: 24
103.202.220.0/24 maxlen: 24
103.209.198.0/24 maxlen: 24
202.133.90.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133 (0x855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Validity
Not Before: Jun 28 20:41:43 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649c9b07-e76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:02:0d:fe:33:be:66:3d:93:7f:05:4c:70:
0b:dc:48:a4:95:4c:7b:5f:5d:73:ba:6d:6d:77:d8:
96:9c:ff:b5:04:ff:a5:23:c0:cc:ec:a5:e4:85:c9:
1e:07:02:83:b8:15:da:25:d2:79:23:6e:be:9e:9b:
0d:0b:b9:aa:c2:ec:bd:54:cf:0d:5f:be:c4:6a:37:
fd:dd:8f:5f:70:5a:36:93:f8:a7:cd:d4:4d:40:6b:
4f:32:c2:30:67:b7:27:3b:f8:90:bd:d7:22:7d:ab:
8d:97:e8:64:09:f0:56:58:49:f1:ad:22:42:dc:19:
50:dc:0e:be:17:98:b9:1e:58:30:20:71:e5:cd:4d:
ff:72:ac:a5:76:4e:c2:4d:b7:f5:f6:a9:e5:2a:a7:
65:7f:cd:d2:28:73:07:4a:6a:6c:79:bf:71:4a:b8:
4e:43:fe:ca:42:ec:2d:b3:40:53:7a:ea:8c:cc:f8:
a0:7f:61:81:ad:89:a6:bb:e4:1b:2c:3a:69:ae:bb:
0c:45:ee:e4:28:99:30:72:bb:b7:8a:0c:26:fa:e9:
6b:a3:45:83:7a:d7:17:56:a1:4e:ed:67:07:9b:39:
4e:36:7f:5c:dc:3c:4c:51:26:b1:f6:e4:28:1d:54:
97:c2:4a:17:b1:36:95:c8:77:83:2b:a7:eb:fd:af:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:66:7D:DC:52:B1:37:83:9A:0A:D8:83:A9:2D:0D:BE:B7:EE:F5:D3
X509v3 Authority Key Identifier:
keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/CF7B03BE706111EDA9CCDB76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.229.0/24
103.202.220.0/24
103.209.198.0/24
202.133.90.0/24
Signature Algorithm: sha256WithRSAEncryption
24:dc:18:6b:30:8a:9f:5e:b0:a2:83:36:d8:38:c3:9f:1a:8f:
8e:8c:fe:3f:95:5b:39:18:43:cf:c4:c4:6f:7a:b1:dc:a0:90:
96:62:41:51:fa:a2:99:bf:c3:47:e8:fb:a8:32:3a:50:e1:57:
05:f4:1d:e1:06:68:62:79:f5:6d:91:b8:c1:21:50:e8:8f:50:
28:08:99:ad:b1:42:e0:a9:04:f4:32:85:be:4a:8a:37:d0:4a:
a5:72:ea:c6:a5:e9:c7:53:c8:b7:42:9c:dd:4f:bb:3e:ba:f8:
97:37:88:fc:30:4b:be:7e:a5:24:99:ad:c3:4f:18:fb:03:0c:
04:8c:c4:90:56:05:0d:67:8a:e4:61:e3:8b:5a:16:d8:4f:f0:
82:0e:af:38:b9:af:96:ae:2c:7f:22:81:38:e6:d9:70:ca:32:
f0:60:7a:43:e8:e8:8e:6d:0f:c4:aa:be:b2:82:8e:33:af:6d:
67:9a:cb:21:88:b3:8b:3e:43:55:62:67:29:fa:46:65:3c:57:
ee:cb:2b:2b:bd:6d:92:aa:c2:1b:66:85:22:ce:b1:50:3e:fc:
73:53:4b:23:45:fa:70:47:31:b0:c5:d6:30:94:51:ea:5f:ad:
01:2e:d2:80:11:ff:0a:a3:e0:b4:6a:3c:3b:88:c7:c4:1b:56:
62:c7:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org