Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/D6040BB2D51311EB969E406EC4F9AE02.roa
File: D6040BB2D51311EB969E406EC4F9AE02.roa (raw, json)
Hash identifier: fUuH73J3xwvkoHwXNvri872qiZE2qLyEfShekcc8Jks=
Subject key identifier: C2:D4:8E:21:7D:6F:E1:1A:82:79:CE:5E:5E:5D:BF:60:87:9D:50:69
Certificate issuer: /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial: 12CD
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/D6040BB2D51311EB969E406EC4F9AE02.roa
Signing time: Sun 31 Jul 2022 05:44:05 +0000
ROA not before: Sun 31 Jul 2022 05:44:05 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 137964
IP address blocks: 103.114.39.0/24 maxlen: 24
103.114.61.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4813 (0x12cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Validity
Not Before: Jul 31 05:44:05 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62e616a5-e795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:2d:20:20:28:0c:d7:5b:be:8c:32:19:12:
f6:92:43:39:1b:54:55:33:5e:51:be:46:cf:c2:58:
5e:60:e6:57:e5:90:ae:1f:76:a8:6e:9e:e9:20:b5:
c9:80:69:b1:f1:4e:68:10:1c:82:6f:cf:75:f9:e5:
65:ea:24:c0:cd:fe:f0:c4:ad:3d:9a:65:3c:3d:48:
c5:c9:21:c9:47:96:a1:69:0e:8b:e2:cd:3f:66:48:
35:32:76:a3:57:33:73:5f:1f:ff:5d:7f:ea:93:3c:
78:e2:fb:c5:5a:87:e8:90:73:11:3d:1e:3d:06:21:
a6:9c:56:02:c2:dd:2c:02:cf:21:c7:24:52:bb:b4:
f0:14:b8:1f:04:90:45:ab:dc:11:76:a9:b8:f7:2b:
4d:7b:02:f6:29:4c:fa:00:61:d2:1b:16:76:98:4e:
a7:5e:99:09:4f:90:28:1d:d7:d5:63:23:67:c7:a6:
d5:94:0c:b5:82:95:20:65:60:92:d2:2f:e4:e8:36:
bc:b1:5a:49:1d:bf:9b:d7:77:a2:f4:5f:98:28:bc:
c9:34:1b:bb:21:b5:7b:f0:21:88:94:2e:7d:cb:e5:
62:39:41:b9:df:01:8a:39:57:06:6d:c8:c8:a9:f7:
09:f8:a6:5c:56:b2:f5:5b:fc:f9:88:cf:7b:cb:0a:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D4:8E:21:7D:6F:E1:1A:82:79:CE:5E:5E:5D:BF:60:87:9D:50:69
X509v3 Authority Key Identifier:
keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/D6040BB2D51311EB969E406EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.39.0/24
103.114.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:dd:d5:fb:ca:a3:27:89:64:4a:94:d5:79:f8:87:40:a2:12:
b2:b8:9a:0c:cd:79:38:ac:69:a6:6b:18:13:44:0f:06:d5:81:
6e:c6:a0:89:2a:e9:51:3d:b7:1a:98:2d:f4:21:24:10:35:bc:
28:0a:7d:28:6c:c1:59:72:4b:d9:28:0b:00:d3:ea:1c:f2:dc:
71:02:f6:8a:13:92:4e:57:c5:7f:da:b3:88:33:4e:74:37:c9:
79:71:17:c6:6c:04:63:79:ef:5c:90:eb:14:0f:9e:76:a4:3c:
80:5d:b8:2f:de:94:2b:7f:9a:c1:ea:ec:f3:52:ca:d0:8b:c7:
3b:4a:7b:05:16:44:13:94:e8:ff:c0:9b:fd:6a:d2:65:c6:47:
e7:4b:bc:c5:8c:fe:e7:81:80:30:2f:63:62:24:f9:2a:c3:fe:
c8:98:1f:71:7c:ae:4d:e3:27:33:b2:36:2c:1d:9b:02:30:e3:
e3:99:b6:2a:7e:79:48:01:33:13:67:fe:b4:42:ad:44:ee:dd:
77:87:1e:3b:b1:ea:6f:0d:f5:8d:05:fb:ee:ad:e8:f7:36:76:
8c:44:59:9e:05:00:ba:ab:d4:20:be:34:c7:c8:8b:66:a2:c4:
40:f1:78:54:e4:16:78:1a:14:92:3b:88:7d:9b:d7:fd:21:fa:
a7:3f:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org