Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/9D25B244B03211EE8B6DB739C4F9AE02.roa
File: 9D25B244B03211EE8B6DB739C4F9AE02.roa (raw, json)
Hash identifier: 4I9XYSRw18muQUFhJ0nWy2snX+Rh2JbElLJIK/Atbw4=
Subject key identifier: F7:3D:75:A5:0F:BB:A5:B2:22:8A:23:2D:A7:85:52:93:DE:9F:08:17
Certificate issuer: /CN=A91754CB/serialNumber=DD02A7E8D7C9757C657BDA6AD9D57F05881FFA57
Certificate serial: 82
Authority key identifier: DD:02:A7:E8:D7:C9:75:7C:65:7B:DA:6A:D9:D5:7F:05:88:1F:FA:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QKn6NfJdXxle9pq2dV_BYgf-lc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/9D25B244B03211EE8B6DB739C4F9AE02.roa
Signing time: Thu 11 Jan 2024 03:36:33 +0000
ROA not before: Thu 11 Jan 2024 03:36:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30860
IP address blocks: 103.211.101.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91754CB/serialNumber=DD02A7E8D7C9757C657BDA6AD9D57F05881FFA57
Validity
Not Before: Jan 11 03:36:33 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=659f6240-2926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:b8:09:f5:6d:f0:ab:c2:6b:4e:8a:c4:ba:
3c:9c:82:4d:6e:fe:aa:65:1b:41:01:37:40:cd:72:
3a:a0:72:93:5a:b4:7c:da:d7:79:a0:bc:14:d1:ee:
23:b4:65:12:7b:df:ae:59:7c:62:6d:85:2d:5f:ff:
79:bb:b7:2a:73:f4:da:2e:c2:f6:7c:44:b6:bc:ad:
ef:d1:b1:7e:b2:20:81:84:f3:7d:f2:03:e3:cb:69:
9b:c6:45:54:b4:62:f4:f3:d2:f6:49:6c:f6:ac:d2:
3d:7d:95:f1:1e:ed:3e:b0:fd:4c:30:7b:b3:bf:e3:
8e:dd:15:f9:e5:0f:04:f0:94:94:6b:40:1b:21:23:
36:6b:58:bc:59:0b:c2:ee:d4:0b:39:4f:fc:f6:41:
ae:20:42:a2:44:88:f9:a5:9e:70:57:d1:ec:c2:dc:
2c:71:4d:8d:12:4e:b3:65:0f:81:ae:06:48:24:fe:
97:ec:7e:b0:76:5f:ca:74:05:8c:66:35:5f:5c:ad:
31:b8:23:7d:e8:74:89:14:25:62:81:97:ab:8b:b5:
76:74:2b:eb:55:68:ad:ba:20:58:a4:77:05:8f:72:
1a:9e:1f:0d:c1:5f:f2:a6:9f:a6:41:73:68:43:99:
1b:dd:e7:84:4e:ec:fe:35:56:3b:8b:49:27:a7:a0:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3D:75:A5:0F:BB:A5:B2:22:8A:23:2D:A7:85:52:93:DE:9F:08:17
X509v3 Authority Key Identifier:
keyid:DD:02:A7:E8:D7:C9:75:7C:65:7B:DA:6A:D9:D5:7F:05:88:1F:FA:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/3QKn6NfJdXxle9pq2dV_BYgf-lc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QKn6NfJdXxle9pq2dV_BYgf-lc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/9D25B244B03211EE8B6DB739C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.211.101.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:41:85:0e:8d:3c:2c:c5:9b:5c:da:8a:e5:54:9f:91:2e:9e:
78:6c:74:08:20:12:1a:ef:7f:de:aa:2e:92:e6:26:1f:13:e4:
0b:f0:b1:b9:7e:1c:9b:f8:f6:dd:65:6e:db:5d:63:79:90:4a:
22:77:50:b6:97:3b:14:71:ba:d1:7a:fd:5b:88:89:b5:78:a0:
e6:c1:58:16:66:58:b4:21:77:b1:1b:e7:38:a6:b6:f0:df:f8:
aa:b9:1f:c2:d6:63:ec:41:a0:06:dc:8f:e8:f9:1b:37:a5:dc:
0a:fa:2c:ff:6e:43:37:ab:08:9f:e4:11:cb:54:c7:1e:ee:6e:
f7:61:9c:ed:12:ba:37:20:62:b7:80:17:ac:fa:15:1c:32:7b:
96:54:6f:da:06:f4:84:1c:98:6e:e0:26:d1:71:1f:58:cd:ed:
ac:98:54:b3:4a:63:88:bb:b5:ab:92:3b:29:22:56:51:1d:17:
b0:c4:d7:d2:b1:ce:27:56:99:fb:95:31:0f:05:4a:00:79:13:
dc:42:c4:05:22:c5:09:fe:93:bd:db:b0:5b:c2:bd:89:c1:de:
00:76:01:bd:bd:c0:ee:7c:8f:7d:c7:c9:08:e1:e4:07:61:1e:
9a:a7:cf:d0:2a:80:dc:0b:c4:38:81:3b:e8:2e:a0:cf:63:71:
7f:ad:9b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 10:39:40 2024 by rpki-client on console-ams.rpki-client.org