Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/A098DB7049A511EEAA989E20C4F9AE02.roa
File: A098DB7049A511EEAA989E20C4F9AE02.roa (raw, json)
Hash identifier: qmOQThyywdv6Ze3fdHnQMTcZ3HyiiqNpptUVsrtEncM=
Subject key identifier: BA:B7:03:0C:9D:1F:93:F9:0C:8E:17:37:9D:A7:00:C7:DB:52:9A:A1
Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial: 0AB2
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/A098DB7049A511EEAA989E20C4F9AE02.roa
Signing time: Sat 30 Nov 2024 19:38:29 +0000
ROA not before: Sat 30 Nov 2024 19:38:29 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 150744
IP address blocks: 103.103.98.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2738 (0xab2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91522E0
Validity
Not Before: Nov 30 19:38:29 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674b69b5-00be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:d5:e0:e5:ad:c4:93:b1:b5:dd:c9:c9:59:
ee:ad:83:78:f0:5b:91:1a:27:61:f0:0e:af:ab:80:
6d:16:ae:80:d2:81:b7:3f:bf:d3:02:9f:3b:27:e7:
05:95:d0:84:ff:0a:73:d7:25:ed:20:16:6a:fa:c3:
e4:d7:7f:86:91:95:e0:c0:d2:78:8c:14:0a:b9:06:
ce:fb:d2:ab:a9:e9:dc:d3:a3:73:b2:47:f2:fe:2a:
cd:ad:fc:bd:e4:90:d9:02:cf:34:c4:aa:a0:49:4a:
69:20:73:19:0c:52:b5:97:24:71:63:73:23:6b:44:
40:87:79:98:95:14:9f:6a:1b:40:ce:86:96:8c:ca:
b0:73:5e:2b:98:53:8b:66:2c:3d:7b:67:c8:2e:e9:
5f:8e:3c:80:a8:f3:4e:a3:93:20:d0:bc:fd:11:62:
ad:37:80:55:84:c7:86:ff:68:83:48:09:61:69:ab:
44:98:1f:49:ed:11:4d:27:11:ce:47:81:78:49:c9:
2a:18:6d:96:3c:e9:18:11:ed:a2:7b:4c:26:11:f1:
49:6d:da:2a:85:d7:58:0c:30:33:5f:2e:9e:b3:ce:
ef:11:5e:c6:1b:0b:ce:f3:14:ea:28:36:9b:d1:37:
dd:5e:e5:cf:1b:af:7b:b8:58:6d:3f:60:78:fc:71:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B7:03:0C:9D:1F:93:F9:0C:8E:17:37:9D:A7:00:C7:DB:52:9A:A1
X509v3 Authority Key Identifier:
keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/A098DB7049A511EEAA989E20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a7:53:15:37:03:1a:1a:79:f2:36:84:5c:55:0a:5f:6a:65:
80:cc:e0:61:e1:b9:b2:6b:33:e8:cd:6a:c2:ed:11:3d:13:75:
74:a0:d5:79:29:ae:dd:5a:d2:1e:4f:71:82:52:49:17:50:dc:
c9:48:f8:df:5c:d0:2a:ec:52:6d:07:d8:88:0d:63:3e:68:8a:
be:68:0c:f6:cd:f2:d8:10:04:1d:7a:b0:75:05:33:87:bd:c3:
a5:3d:8d:2f:8d:79:23:53:95:f7:f1:08:21:42:6d:fa:64:e6:
b5:6f:67:b8:db:2d:9f:dc:f9:35:2a:0a:b4:6d:b2:8b:cf:06:
69:d3:80:c3:0f:c3:71:83:61:36:31:07:5f:ef:95:5c:3b:ab:
f4:7b:fc:3b:2f:f6:59:68:97:e3:eb:6b:83:46:ba:c4:89:e4:
71:a9:3c:2c:d5:8b:50:2c:a0:5e:d5:8a:17:91:69:7c:4c:b5:
ed:20:ed:e1:f7:55:d5:89:e0:b5:10:7a:dd:0c:72:66:b9:c6:
d1:b3:82:c0:81:c0:06:c4:3d:41:8a:c9:2d:4f:5c:11:1d:06:
11:e3:4f:19:00:d1:34:cf:4f:ca:5d:04:49:f7:36:7e:fa:82:
37:bb:45:99:b6:5d:02:3f:03:fb:7e:c9:48:f2:a4:5a:6e:4f:
18:f2:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:17:33 2025 by rpki-client