Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/6AF33C32DB0A11E7BD49DB86C4F9AE02.roa
File: 6AF33C32DB0A11E7BD49DB86C4F9AE02.roa (raw, json)
Hash identifier: UoaKc2zBhmjlqvEO3DZV5jWYegDI6iEqXiKOR9iIDfI=
Subject key identifier: 95:3D:5D:B8:95:64:C1:F3:8C:39:AD:97:C2:2F:07:7E:57:B3:AE:D8
Certificate issuer: /CN=A9125F18/serialNumber=9D2D0FB28620D1A539805A8C5C48512170E07C3F
Certificate serial: 158F
Authority key identifier: 9D:2D:0F:B2:86:20:D1:A5:39:80:5A:8C:5C:48:51:21:70:E0:7C:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nS0PsoYg0aU5gFqMXEhRIXDgfD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/6AF33C32DB0A11E7BD49DB86C4F9AE02.roa
Signing time: Wed 04 Jan 2023 17:34:19 +0000
ROA not before: Wed 04 Jan 2023 17:34:19 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 137210
IP address blocks: 103.104.248.0/22 maxlen: 22
103.104.248.0/24 maxlen: 24
103.104.249.0/24 maxlen: 24
103.104.250.0/24 maxlen: 24
103.104.251.0/24 maxlen: 24
2402:23c0::/32 maxlen: 32
2402:23c0::/48 maxlen: 48
2402:23c0:1::/48 maxlen: 48
2402:23c0:2::/47 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5519 (0x158f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125F18/serialNumber=9D2D0FB28620D1A539805A8C5C48512170E07C3F
Validity
Not Before: Jan 4 17:34:19 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63b5b89a-c2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:40:61:ae:59:2b:84:3a:cd:ce:97:5b:f0:
95:b7:c7:58:93:25:70:a1:c6:cb:2b:b9:11:85:9e:
f2:25:84:7b:11:a6:f8:12:09:4a:64:e4:f0:35:13:
45:c3:f9:ab:ac:80:53:ff:b5:99:1e:6b:6d:a1:8a:
73:d7:a6:a4:f9:df:2a:e8:c5:97:41:df:ce:70:3c:
59:54:7e:9c:ac:4f:42:ac:1f:30:41:dc:7a:90:5f:
12:49:4f:af:78:ee:95:4b:20:44:ab:78:a8:00:b6:
11:e6:94:b1:76:47:98:f2:8e:89:f5:3a:d3:ca:f4:
1d:2f:3e:29:c1:be:41:00:2b:67:e4:69:e0:8b:9d:
98:ed:c8:e1:40:07:82:9f:ae:f9:76:b5:1b:f5:f2:
6b:0b:11:69:1c:de:40:73:28:99:ce:b5:be:cd:97:
ac:be:57:81:3c:37:54:8c:99:cc:88:7d:33:c0:b0:
cc:33:34:45:87:eb:77:ee:59:d2:19:92:4c:6d:00:
63:a1:6c:83:53:84:0b:4e:e0:c7:b9:47:35:60:c2:
26:a6:6a:bb:00:7c:d9:a1:5c:39:6d:c0:4e:00:e3:
32:96:72:11:fb:7d:16:c5:bc:26:72:b6:98:1f:3c:
79:a6:7f:20:1b:b3:65:6b:96:15:37:79:5b:7a:74:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3D:5D:B8:95:64:C1:F3:8C:39:AD:97:C2:2F:07:7E:57:B3:AE:D8
X509v3 Authority Key Identifier:
keyid:9D:2D:0F:B2:86:20:D1:A5:39:80:5A:8C:5C:48:51:21:70:E0:7C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/nS0PsoYg0aU5gFqMXEhRIXDgfD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nS0PsoYg0aU5gFqMXEhRIXDgfD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/6AF33C32DB0A11E7BD49DB86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.248.0/22
IPv6:
2402:23c0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:67:f8:8e:27:a0:ba:17:81:ed:1c:ff:3f:f7:9f:ca:17:3f:
ef:df:c4:be:5e:c1:1d:7b:f8:eb:4a:d3:e6:f9:de:76:55:d7:
ce:19:c4:fa:88:8f:aa:40:64:d4:37:d0:7f:09:b5:69:b9:1e:
eb:d5:54:a4:ed:a4:5b:00:66:14:7d:3e:09:8b:8a:72:55:b5:
cf:59:d4:37:2b:67:86:ee:f1:b5:0d:08:4c:1c:5e:dc:c2:74:
df:88:fc:8b:6d:78:9b:85:13:ee:6f:2c:a6:44:90:5c:71:cc:
85:a1:c1:e7:3e:00:56:e6:62:2d:16:dc:de:52:4c:42:e7:c7:
6f:5a:04:82:94:93:69:31:9c:1f:86:eb:c2:c4:de:d9:7e:23:
56:e2:5c:d7:d9:f0:4c:f7:64:e3:c3:0d:ee:53:7b:0e:9d:d3:
29:b5:26:f1:83:e7:2c:00:96:45:9b:5f:38:2a:a7:96:de:7b:
37:72:c6:ab:fd:7f:f7:7f:a1:ed:ce:74:21:dc:37:d0:f9:10:
53:ad:10:fc:4f:7d:00:73:85:6a:a2:3e:86:3e:b8:8a:7b:72:
cb:06:59:70:78:d2:86:b4:e2:0b:97:b3:73:c1:ff:09:b1:4a:
8a:af:d0:61:1e:93:63:82:80:be:c3:9f:69:cd:74:44:aa:c4:
2c:16:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org