Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C3A5938789D11EEAB6EFE16C4F9AE02.roa
File: 9C3A5938789D11EEAB6EFE16C4F9AE02.roa (raw, json)
Hash identifier: UbhoABKQOPpLzQaRN8HsGoFXl3Fkvsw+A/MSWZWM4h8=
Subject key identifier: 61:BA:20:42:07:26:FA:CE:F2:81:51:C2:E3:D8:FB:EE:7A:74:FE:3B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7CF3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C3A5938789D11EEAB6EFE16C4F9AE02.roa
Signing time: Wed 01 Nov 2023 10:01:22 +0000
ROA not before: Wed 01 Nov 2023 10:01:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138769
IP address blocks: 103.109.82.0/24 maxlen: 24
103.109.83.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31987 (0x7cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 1 10:01:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=654221f2-0a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:db:24:51:be:8c:e6:cd:4c:f5:60:5d:42:
0f:ca:de:ae:0a:f5:c4:e4:c1:93:56:c9:f3:b3:69:
04:04:26:b0:14:a0:0b:50:ce:16:53:16:b4:b9:23:
8f:95:71:da:de:94:08:24:45:05:c8:b7:3b:5f:2c:
4e:0d:7a:97:8e:22:35:10:1c:16:92:5a:c8:40:b0:
e2:99:f6:47:68:1f:4c:36:9c:f5:9c:da:f2:1d:54:
b8:ed:2c:38:86:e9:48:c1:59:8c:08:a8:9e:4b:e2:
21:46:de:05:db:10:59:b1:ea:71:e0:47:e8:49:4a:
14:30:c5:07:cf:59:7b:56:3f:bf:be:96:d6:70:ad:
95:38:55:68:7e:3a:41:27:82:29:1e:eb:81:3e:78:
ce:ba:17:91:67:52:3e:4d:1f:1a:fa:09:84:74:1c:
02:76:b2:71:d1:91:f3:58:85:8e:d0:f6:34:ac:e0:
9f:2a:06:94:44:c5:02:83:eb:c9:89:da:90:c5:31:
64:a7:8d:51:e5:01:0e:98:95:f4:2a:5f:f0:ba:91:
20:fb:25:85:4a:6c:2b:6e:99:dc:6a:84:ff:b7:70:
81:2a:e3:82:7b:3e:a1:b5:fb:44:99:19:38:b5:71:
0c:e8:63:c0:a0:6f:c7:b3:f9:83:30:a2:2b:62:bc:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BA:20:42:07:26:FA:CE:F2:81:51:C2:E3:D8:FB:EE:7A:74:FE:3B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C3A5938789D11EEAB6EFE16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.82.0/23
Signature Algorithm: sha256WithRSAEncryption
07:2f:76:54:7a:aa:8d:83:11:a2:24:27:03:05:47:05:49:5d:
71:7c:3e:23:ba:71:11:6b:0c:b0:5b:20:a3:05:04:45:b6:05:
55:d8:ec:8e:87:8d:fd:45:34:eb:8e:af:08:c7:4b:11:08:e4:
3a:6b:02:ca:34:3d:f9:44:76:b2:96:97:1d:9a:80:cb:f4:21:
00:a4:db:1e:19:a3:55:da:4f:af:97:e1:37:7a:88:2f:53:04:
da:bb:90:cf:97:eb:9f:33:bb:77:4d:35:e8:96:89:e7:e1:91:
cd:75:5f:22:ec:e8:b1:72:32:a1:ea:d0:16:88:84:55:76:d2:
39:b3:d1:a8:44:99:3d:5f:de:f5:bc:25:2f:51:e7:a6:79:1c:
6d:75:ae:4f:05:a8:11:ff:6c:b8:38:3f:5a:36:9b:5c:8e:dc:
44:39:03:47:20:73:89:1f:12:04:8c:0d:2d:f9:43:35:fa:be:
97:86:e0:8d:c2:a6:7a:6b:29:92:46:98:4c:37:6f:78:7b:46:
9f:1f:b1:37:db:de:1e:e9:e5:27:09:1a:62:79:5c:90:77:e0:
65:f5:90:f6:94:8a:d8:b0:56:01:ea:62:17:43:31:eb:42:63:
76:2c:20:0d:a4:90:c2:74:2f:4d:04:c2:11:fe:b1:3f:8d:d3:
7d:03:39:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:48 2025 by rpki-client