Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8A2BA4E8A9311ED9F4B8F13C4F9AE02.roa
File: D8A2BA4E8A9311ED9F4B8F13C4F9AE02.roa (raw, json)
Hash identifier: yac9NTs6+EB+EqDLuKdc5nDyNU2Eh5Bn9Rm/8Lw1IbE=
Subject key identifier: E0:70:DD:B4:43:67:18:E6:BD:86:3D:67:12:C7:CC:FA:15:21:99:6A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8F48
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8A2BA4E8A9311ED9F4B8F13C4F9AE02.roa
Signing time: Thu 30 May 2024 16:23:11 +0000
ROA not before: Thu 30 May 2024 16:23:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149601
IP address blocks: 103.83.86.0/23 maxlen: 24
103.189.86.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36680 (0x8f48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:23:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a7ee-d28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:8c:27:f6:f6:34:36:4a:76:8c:27:24:77:
c2:45:a2:47:e8:9e:83:f1:e9:3c:f4:43:72:7f:3f:
fc:38:aa:ad:31:68:0c:5c:99:69:10:aa:f5:c4:f0:
11:69:87:51:82:b4:62:5d:aa:bd:e9:2b:c4:60:1f:
9a:96:d8:c8:73:d8:ef:0b:6e:1c:db:b0:e2:65:bc:
ed:47:14:d0:09:ec:6c:cb:a1:9a:5b:97:00:9c:5d:
56:b1:e2:58:0b:59:6d:91:7b:f8:84:fa:04:5f:b2:
22:56:25:4c:e3:52:d9:fd:af:90:e6:66:19:91:43:
5b:4e:4a:54:87:0a:dd:e2:84:fd:5a:f2:7a:76:67:
5c:7c:5c:99:a7:5c:a7:21:73:03:ea:e5:b5:7b:7e:
09:23:cc:e5:0d:8a:bf:ac:4c:0f:3e:ba:85:a7:b3:
cc:90:d9:75:ae:73:32:38:38:aa:81:be:2d:e9:bf:
4d:59:2b:3b:c9:95:a0:2f:37:9f:66:33:4e:22:47:
67:c4:35:d1:a8:f4:92:a4:f8:46:65:54:f3:b7:a5:
e1:84:13:7c:d2:42:67:97:ff:9f:a1:b5:2f:b7:20:
f1:4f:fb:b4:2b:0d:4a:49:cd:4d:51:79:56:f4:ac:
5e:44:c6:9e:81:73:54:49:24:85:00:a2:5a:8e:c4:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:70:DD:B4:43:67:18:E6:BD:86:3D:67:12:C7:CC:FA:15:21:99:6A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8A2BA4E8A9311ED9F4B8F13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.86.0/23
103.189.86.0/23
Signature Algorithm: sha256WithRSAEncryption
10:23:f6:b7:73:f2:47:90:51:6f:8d:d7:88:17:db:49:49:e5:
04:e9:2d:15:e4:e6:c4:41:47:fa:6f:9d:bc:53:ff:81:23:8a:
61:56:2b:dc:8c:a3:04:bd:95:12:09:db:52:5a:28:11:00:32:
24:91:97:8e:c3:8e:bd:18:de:4d:97:e7:85:ba:3e:30:28:12:
b2:ba:fc:ea:1e:9b:91:ab:c0:30:a8:1a:ca:3a:37:d0:02:1b:
1d:13:b4:ef:1d:58:8a:c5:a1:f7:7b:df:7b:4c:6c:ca:73:f4:
01:b0:7b:3b:f0:42:38:8f:d4:a3:84:ef:31:43:11:76:dd:bd:
99:31:6e:47:3a:2d:99:85:8c:77:42:e2:1d:58:1a:6e:20:61:
d0:7c:79:ab:39:a5:af:d5:75:4c:7e:e9:50:8d:71:51:5b:da:
71:6a:e3:f9:4c:2a:3a:62:4d:11:b9:0f:d6:07:bb:a7:aa:64:
3c:65:30:65:5a:41:ad:44:a5:00:db:d4:99:93:d7:93:87:45:
c6:9c:47:40:be:1f:b6:75:cc:65:1b:69:25:01:92:17:a9:b8:
0d:bb:3d:d5:34:11:6e:38:c0:45:ce:2e:72:55:a0:cd:e5:2a:
5d:24:0f:46:4a:55:76:38:d4:42:22:27:04:0a:d1:89:72:85:
dd:c4:57:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:52 2025 by rpki-client