Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/6743C512738B11EB98310C11C4F9AE02.roa
File: 6743C512738B11EB98310C11C4F9AE02.roa (raw, json)
Hash identifier: fEpa+4C3iNsmHO65RPXnbd/tAaqVAILoeO5j7dVFxjg=
Subject key identifier: A8:40:56:82:94:D1:64:2A:2F:79:1F:53:95:A5:79:0F:87:61:87:F9
Certificate issuer: /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial: 12CE
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/6743C512738B11EB98310C11C4F9AE02.roa
Signing time: Sun 31 Jul 2022 05:44:07 +0000
ROA not before: Sun 31 Jul 2022 05:44:07 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 141225
IP address blocks: 103.114.60.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4814 (0x12ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Validity
Not Before: Jul 31 05:44:07 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62e616a6-ebdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:e4:e2:15:e0:26:41:bc:3f:84:ca:88:0f:
48:16:9b:64:45:45:af:78:4a:03:e7:ea:12:d1:cb:
b9:89:03:99:4b:75:86:e1:28:a4:9a:25:c0:7f:a4:
23:b6:f9:f0:3c:b1:f6:e9:a5:cd:48:53:c4:56:71:
eb:89:d9:10:80:b4:de:34:ca:58:fb:28:35:ca:07:
cb:e8:46:75:c1:99:4d:ec:2f:73:71:e0:7d:88:73:
3e:aa:85:9d:36:f2:7b:bf:8d:1d:00:85:3a:79:60:
1c:27:39:8b:94:89:f9:2f:81:26:fd:e7:38:98:22:
af:8a:76:37:e6:91:28:9e:57:9f:1a:27:14:42:27:
50:ef:7a:5c:cc:c6:c0:ef:d7:6c:fa:92:a0:7f:86:
4a:59:e1:a7:3a:3d:e9:30:e6:05:45:84:72:97:ec:
ac:20:a6:7e:86:67:08:6e:9a:85:5f:fc:8f:a7:b5:
76:e7:9c:41:5f:2a:80:6a:97:6d:d8:0c:10:67:a8:
a1:d4:0f:d8:b6:9a:f3:15:ac:6a:1d:06:ca:e9:29:
10:51:99:6a:a9:97:55:b1:dd:61:d2:8d:a6:4e:6f:
3b:4e:0b:86:2a:0c:fb:68:1e:5b:59:ea:be:75:b5:
e7:b5:22:7e:5e:02:19:fe:11:6d:7a:ad:a9:d0:9e:
a0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:40:56:82:94:D1:64:2A:2F:79:1F:53:95:A5:79:0F:87:61:87:F9
X509v3 Authority Key Identifier:
keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/6743C512738B11EB98310C11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e5:c2:ed:73:0b:ae:93:e3:b7:42:54:1d:fd:bc:7b:f5:af:
69:ab:a7:82:af:e7:27:45:03:58:16:6a:a7:d8:f7:96:03:2c:
df:c3:0e:e4:56:d3:b0:d9:a7:dd:16:14:fd:f9:71:cf:25:e6:
d3:f7:02:b3:5e:d3:6e:67:95:cc:db:62:60:36:62:73:79:0c:
ff:55:00:3a:da:3e:2e:0f:c5:c6:ef:47:60:8f:24:c4:00:c7:
8b:14:58:78:4f:36:a8:43:c0:d1:26:f1:73:62:2b:b0:54:7c:
d6:c7:17:88:74:08:d2:77:ed:d3:04:72:20:9e:d9:39:2b:64:
26:4f:bc:39:ae:43:60:38:13:78:e0:4a:e0:8f:ed:e3:23:63:
20:9f:0d:a0:0d:51:24:bc:5d:7d:f9:33:04:91:7e:e1:0f:a8:
a1:54:0b:eb:2d:95:26:55:70:e0:82:cc:39:87:cd:05:3a:c7:
87:f5:5c:32:0d:0f:93:a8:e0:21:5a:27:07:8b:1d:8c:c5:80:
16:62:5e:6e:1e:2a:20:49:36:9f:4f:e9:47:14:70:54:0a:8e:
20:6e:09:a5:fc:fb:fd:5c:be:c1:68:21:c9:8d:dd:f9:25:9b:
61:6f:64:74:71:31:4d:fe:c1:d9:a2:c1:90:38:f3:5d:72:7d:
87:3b:ff:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:49 2023 by rpki-client on console-fra.rpki-client.org