Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60D330F4BDCF11EA8755D90DC4F9AE02.roa
File: 60D330F4BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: 1ntTg0rxfBAR643SCzdsNbDuaGbAksA7wbR6QxuFsKY=
Subject key identifier: D8:06:38:87:0C:05:33:7F:D3:5C:47:31:6A:BE:DB:A3:92:C9:E4:99
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8C48
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60D330F4BDCF11EA8755D90DC4F9AE02.roa
Signing time: Thu 30 May 2024 16:10:39 +0000
ROA not before: Thu 30 May 2024 16:10:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138759
IP address blocks: 103.140.252.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35912 (0x8c48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:10:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a4ff-ec57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:a9:94:62:9a:23:4d:b3:52:39:47:af:6d:
ca:35:46:65:5a:34:7d:c3:85:e6:f9:a6:f0:c9:b7:
58:bb:46:f3:5e:96:b3:3d:aa:cd:f2:86:8d:70:d1:
e9:28:6e:33:fb:39:ba:a9:0a:1f:c3:39:bb:c4:b0:
f5:4f:09:7b:26:94:b1:7c:1c:ba:f2:35:56:2e:5e:
0e:74:25:96:d1:21:24:b8:ce:e5:fa:dd:f1:65:cd:
74:88:da:35:7f:69:74:70:17:82:5c:e6:51:51:e8:
c9:32:08:e0:11:15:f2:99:eb:95:e9:0e:9c:1b:77:
e7:a9:e5:c4:84:e2:1c:e1:34:02:29:26:71:77:83:
0e:f8:18:f6:da:18:85:1c:63:fd:96:bf:5f:ac:84:
a7:99:d4:0d:1d:3f:b0:77:89:08:37:26:d9:04:a2:
ba:f9:3f:32:c0:70:e7:6a:a2:56:3d:bd:0f:f8:dc:
73:d9:1a:a3:fb:a5:c1:15:0a:f6:32:00:1d:11:98:
3e:c7:6c:c8:33:59:63:27:48:9e:68:c8:54:55:47:
85:92:ba:2f:c1:e9:18:48:9d:72:44:c4:5c:e6:1d:
fe:bc:9d:6b:b4:9b:5c:97:82:af:55:2f:21:36:b1:
f1:4c:0f:9a:2e:70:0a:4a:58:e5:75:63:b7:17:29:
f7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:06:38:87:0C:05:33:7F:D3:5C:47:31:6A:BE:DB:A3:92:C9:E4:99
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60D330F4BDCF11EA8755D90DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.252.0/24
Signature Algorithm: sha256WithRSAEncryption
00:19:de:54:62:9a:44:2f:ef:2f:fe:e3:d6:fc:e8:cb:5d:cf:
cc:cf:54:71:ee:58:e6:66:de:16:99:16:c2:44:2f:08:9a:c2:
2a:4c:a4:ac:5e:7f:e9:d8:1c:e7:54:91:35:c4:60:e3:e8:72:
25:d0:2f:38:22:00:ee:9d:6c:9a:0f:e4:5a:56:36:8d:6f:fa:
c8:c1:07:76:cf:7f:24:dc:d1:b2:0b:bf:6b:9d:3f:d0:76:fd:
1b:13:34:26:f6:ae:67:50:c7:85:a3:d2:fe:84:6d:52:49:13:
c5:10:f2:f4:94:d9:47:b4:d4:c8:2d:db:65:49:06:9f:5c:8d:
ca:9d:44:ee:35:98:33:37:fd:d2:9c:da:da:07:ad:b8:67:04:
31:ff:17:0a:06:4e:8c:dd:75:e0:59:6b:04:b0:6f:ba:17:db:
07:26:5a:36:dd:19:37:b0:7a:0f:f0:e0:01:40:ba:fe:36:11:
ce:e9:2f:00:ee:eb:3e:2d:29:b2:6c:68:e3:33:86:d9:0e:91:
6d:53:71:01:ad:17:de:83:c6:38:03:a9:64:ed:1d:4c:c6:eb:
ee:5e:c4:8a:f3:5c:78:1f:be:d4:ab:32:6a:8f:06:ca:58:55:
7f:d6:78:47:7e:27:1f:85:4a:d1:da:c6:36:e3:96:f2:2c:c9:
7b:cd:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:30 2025 by rpki-client