Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/D2CBE0E44EDF11EEBD5D0368C4F9AE02.roa
File: D2CBE0E44EDF11EEBD5D0368C4F9AE02.roa (raw, json)
Hash identifier: aR/WZ7tvIvkP4xsThnwXn0svbLyLD1EZVCW1YdsksXI=
Subject key identifier: 50:F3:CE:01:2D:42:F8:7B:71:48:39:A0:75:A7:3B:74:13:CB:30:28
Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial: 05B3
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/D2CBE0E44EDF11EEBD5D0368C4F9AE02.roa
Signing time: Sat 09 Sep 2023 07:11:07 +0000
ROA not before: Sat 09 Sep 2023 07:11:07 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.104.140.0/24 maxlen: 24
103.104.142.0/24 maxlen: 24
103.104.143.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1459 (0x5b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Validity
Not Before: Sep 9 07:11:07 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64fc1a8b-9614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:5a:29:d3:b3:c6:1b:8f:21:44:86:90:b3:
f2:fb:9b:da:b9:1c:f9:c3:f0:e5:cc:9e:85:6d:42:
34:90:cc:e7:a0:b3:45:69:d2:53:24:eb:94:ef:47:
fa:60:a4:16:51:f7:88:28:75:d2:46:e1:7f:3b:82:
af:3d:42:ea:ae:57:f6:b7:56:29:7c:a0:59:0e:66:
df:9b:e9:92:30:43:df:96:18:30:96:37:47:07:de:
b1:f8:3f:24:88:d1:c6:2e:ec:ac:f6:11:46:18:89:
24:da:53:ad:6b:3a:d1:84:d9:a2:94:77:2d:bd:d0:
54:7d:78:62:3b:37:8a:e9:3b:dc:35:74:bb:51:ef:
15:90:bc:e1:60:f5:51:85:67:04:98:d9:5c:66:c8:
5f:fd:fb:8e:d0:14:10:bb:80:01:0d:ce:b2:52:06:
ce:ef:21:e6:51:db:65:13:62:5f:42:50:a8:05:85:
68:26:ea:e0:ad:b2:0a:31:c3:27:f8:45:b1:9c:9f:
88:b6:99:9d:45:d9:60:34:60:36:e6:3e:fb:b4:88:
8e:ac:9a:c6:ae:f3:f3:10:96:65:6a:a8:4a:1e:fc:
52:4d:2d:3b:af:d8:bb:15:07:18:dc:28:29:96:69:
1b:ec:8b:f4:5a:6b:09:fe:1b:fd:c7:13:7f:06:66:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:CE:01:2D:42:F8:7B:71:48:39:A0:75:A7:3B:74:13:CB:30:28
X509v3 Authority Key Identifier:
keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/D2CBE0E44EDF11EEBD5D0368C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.140.0/24
103.104.142.0/23
Signature Algorithm: sha256WithRSAEncryption
34:43:34:a4:57:92:89:ef:32:79:74:c6:17:a1:65:60:a5:23:
ff:b4:f7:e7:e6:ff:0d:d9:3f:4a:45:a4:6e:51:3c:1f:8e:ad:
b3:17:d3:87:f5:08:8e:34:b1:47:a9:d6:54:09:cb:51:9e:f4:
4e:2c:0b:cd:88:62:1c:5a:56:d2:e4:a6:67:02:81:c9:88:29:
01:fb:f5:ef:39:4e:38:25:b7:be:36:ef:12:7a:21:3f:f1:58:
57:b4:23:0d:48:73:97:e7:32:4e:6a:36:85:37:0f:33:9d:19:
93:c6:99:ea:e2:92:ba:cf:62:6e:6c:14:c4:89:0d:9c:e0:95:
4a:69:ec:97:b8:ed:b0:2d:37:1d:9f:de:34:f3:68:8b:95:df:
92:a3:d8:72:ed:f9:ea:76:e3:ff:32:4c:5e:5b:31:4a:a3:21:
db:f0:3f:7e:55:35:17:b1:6c:70:c1:71:74:96:05:97:43:0f:
30:9e:32:a3:38:10:32:5f:2d:ca:c1:1f:1f:ed:9e:17:09:dd:
a4:f8:57:bd:22:61:16:5c:7a:08:14:ad:53:6b:30:b8:2a:36:
49:ed:fc:ba:f7:b9:e6:1e:b0:1f:2c:79:a7:b7:82:66:4b:93:
5a:72:1a:d4:5b:90:4c:dc:c3:ac:f5:05:04:11:ae:a9:aa:40:
7f:46:ee:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:26 2024 by rpki-client on console-ams.rpki-client.org