Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/CB1E166C779011EEB34C006CC4F9AE02.roa
File: CB1E166C779011EEB34C006CC4F9AE02.roa (raw, json)
Hash identifier: dDAvaCFOEsD2km3ToF4w/H5UA/yKPXhKrq7O0M2/kEE=
Subject key identifier: 5A:C0:FC:99:2D:1C:62:70:7B:A5:EC:F4:67:FF:39:CA:1F:27:6F:50
Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Certificate serial: 01FA
Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/CB1E166C779011EEB34C006CC4F9AE02.roa
Signing time: Tue 31 Oct 2023 01:58:31 +0000
ROA not before: Tue 31 Oct 2023 01:58:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135391
IP address blocks: 103.211.193.0/24 maxlen: 24
103.211.194.0/24 maxlen: 24
139.5.108.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Validity
Not Before: Oct 31 01:58:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65405f47-d104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:6d:cb:16:52:47:f7:a2:2e:57:d0:7c:16:
e4:d1:ea:61:ce:42:55:5d:b7:17:3c:d4:db:66:0b:
15:f0:ac:b4:49:b9:b7:fc:29:d5:fa:bf:9f:21:de:
22:48:a6:52:11:57:05:ef:4f:b7:26:51:2b:10:b7:
21:bd:c8:aa:2c:de:1d:eb:77:44:6a:bb:5d:8a:39:
dd:c5:60:c6:29:ef:0f:e8:66:9e:23:da:d7:d6:f5:
7a:80:1b:f6:ea:a3:81:b5:d0:0b:f7:04:c8:c3:ad:
d1:cc:9a:a4:02:80:a0:fa:60:e2:cb:d9:fc:f5:6a:
67:f6:bc:62:56:9e:96:6c:7f:fd:e2:1f:41:a6:9c:
c5:60:a2:fb:8c:a1:03:5a:0c:07:e9:c8:c3:51:a2:
a2:0f:0c:fe:86:f1:e8:a0:e1:1f:79:15:30:2c:67:
49:68:94:ca:5d:67:32:70:ae:5f:a7:7c:7a:e7:59:
83:8d:41:9d:b4:7d:48:16:c5:ba:f8:f5:c0:77:73:
f6:19:5b:11:4d:be:70:92:94:8a:66:09:d5:a4:6b:
d2:59:cd:c7:59:c1:d1:2c:dc:63:d5:cf:ea:99:14:
e5:f0:16:a6:e1:bc:dd:92:1a:f4:00:77:84:ba:71:
af:1a:d4:40:81:fb:2d:3a:c1:ab:2c:af:80:ec:d5:
7d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C0:FC:99:2D:1C:62:70:7B:A5:EC:F4:67:FF:39:CA:1F:27:6F:50
X509v3 Authority Key Identifier:
keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/CB1E166C779011EEB34C006CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.211.193.0-103.211.194.255
139.5.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:64:2b:df:25:05:ca:cd:24:d2:d5:e0:e5:f3:62:97:96:b1:
55:cc:21:bc:c3:4e:7e:e4:9e:09:31:d8:8b:80:37:8e:fd:07:
b6:1e:4c:10:93:ac:13:26:60:4e:63:33:0d:b5:bc:76:3f:0b:
52:aa:56:a4:94:f9:5b:bd:99:92:cc:11:7d:78:55:44:66:3c:
36:1a:c5:76:d8:2d:71:41:d3:6e:4b:0d:8b:1b:f1:2e:09:f0:
9a:0d:00:98:57:62:a7:ab:16:bb:0b:1c:d1:14:12:fc:c2:d8:
b2:a8:f3:e1:bd:11:05:f1:69:34:82:d3:1d:54:17:47:f9:e7:
40:d3:6e:ea:c8:b7:c1:09:66:b7:e2:1b:b5:11:b4:b6:c4:92:
13:77:ae:0f:16:26:f7:8c:ed:09:a3:5c:0b:de:65:4d:47:61:
73:e5:0f:0c:e8:19:cd:33:44:65:8f:e6:f5:ad:cc:da:2c:d4:
f8:28:f2:19:a7:72:4c:72:4c:c8:a7:8e:2b:9a:33:65:8e:89:
cf:e8:b8:07:62:eb:db:68:a8:3a:76:92:71:73:8f:68:76:88:
99:07:e6:72:4b:93:5d:a8:26:e0:73:94:4b:7b:4d:8e:d3:4b:
1e:21:25:7a:f4:14:ca:f7:a4:4a:49:bc:9d:cb:e2:a2:91:bb:
ca:3f:03:88
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw
NDc0QzkxQzYwHhcNMjMxMDMxMDE1ODMxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQwNWY0Ny1kMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0U1tyxZSR/eiLlfQfBbk0ephzkJVXbcXPNTbZgsV8Ky0Sbm3/CnV+r+fId4i
SKZSEVcF70+3JlErELchvciqLN4d63dEartdijndxWDGKe8P6GaeI9rX1vV6gBv2
6qOBtdAL9wTIw63RzJqkAoCg+mDiy9n89Wpn9rxiVp6WbH/94h9BppzFYKL7jKED
WgwH6cjDUaKiDwz+hvHooOEfeRUwLGdJaJTKXWcycK5fp3x651mDjUGdtH1IFsW6
+PXAd3P2GVsRTb5wkpSKZgnVpGvSWc3HWcHRLNxj1c/qmRTl8Bam4bzdkhr0AHeE
unGvGtRAgfstOsGrLK+A7NV9kwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFFrA/Jkt
HGJwe6Xs9Gf/OcofJ29QMB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND
RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r
Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTVCMDcvNzJBNDhBNzZDQ0UxMTFFQ0JCQTA1QzJDQzRGOUFFMDIvQ0IxRTE2NkM3
NzkwMTFFRUIzNEMwMDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQwDAMEAGfTwQMEAGfTwgMEAosFbDANBgkqhkiG9w0BAQsFAAOC
AQEAb2Qr3yUFys0k0tXg5fNil5axVcwhvMNOfuSeCTHYi4A3jv0Hth5MEJOsEyZg
TmMzDbW8dj8LUqpWpJT5W72ZkswRfXhVRGY8NhrFdtgtcUHTbksNixvxLgnwmg0A
mFdip6sWuwsc0RQS/MLYsqjz4b0RBfFpNILTHVQXR/nnQNNu6si3wQlmt+IbtRG0
tsSSE3euDxYm94ztCaNcC95lTUdhc+UPDOgZzTNEZY/m9a3M2izU+CjyGadyTHJM
yKeOK5ozZY6Jz+i4B2Lr22ioOnaScXOPaHaImQfmckuTXagm4HOUS3tNjtNLHiEl
evQUyvekSkm8ncviopG7yj8DiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:54 2024 by rpki-client on console-ams.rpki-client.org