Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/90107A9605F811EA8784CF2EC4F9AE02.roa
File: 90107A9605F811EA8784CF2EC4F9AE02.roa (raw, json)
Hash identifier: 8OH7lbUvIK4eN6irLb978azAOUK/yg/7dQq1mzolDwE=
Subject key identifier: FA:BE:8E:2A:4B:C5:DD:CE:B3:44:B2:1E:A8:49:37:7A:2A:49:01:EE
Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Certificate serial: 0A97
Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/90107A9605F811EA8784CF2EC4F9AE02.roa
Signing time: Wed 22 Feb 2023 20:07:35 +0000
ROA not before: Wed 22 Feb 2023 20:07:35 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 136207
IP address blocks: 103.83.164.0/22 maxlen: 24
203.89.108.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Validity
Not Before: Feb 22 20:07:35 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63f67607-72ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:9f:24:88:63:28:c4:08:9f:d9:1f:45:2f:
fe:d0:c8:89:de:7a:b6:de:9f:43:fe:bb:6e:a1:85:
d5:e9:84:ba:4b:15:be:c6:6e:2b:e2:0c:34:d5:7a:
a4:ec:ae:07:85:18:ab:29:27:f1:ec:57:0c:21:6c:
ba:22:58:f4:0d:58:f7:cc:54:95:ac:fd:18:02:f5:
90:8f:c3:51:0c:eb:00:96:b9:67:3b:5f:63:e4:3e:
cc:3b:a3:bd:6c:c9:72:a4:d0:05:e2:45:5a:a2:b1:
98:d7:c4:6e:5b:e0:b1:d2:c8:3a:67:2c:a6:ed:1f:
da:9c:56:57:4d:58:fc:38:cd:e9:d8:8e:89:c1:7b:
f4:43:d9:d7:da:e9:04:90:89:ae:8b:f5:9c:44:4b:
10:9e:2c:50:35:a2:d8:95:3d:78:c1:03:11:19:85:
6c:53:93:db:02:63:22:c9:70:4e:42:35:eb:67:a1:
a1:6e:52:16:22:10:d1:7d:b0:59:8c:7c:18:e8:d1:
d9:a0:cb:ba:eb:93:58:4d:30:92:7e:b2:61:96:f1:
22:ba:54:70:5f:c1:07:80:5a:78:08:74:ed:4a:1d:
b0:59:c8:3a:0a:cd:3b:b4:40:29:d0:8b:ec:bb:8f:
e1:24:42:43:ba:63:0a:2a:8e:b3:8b:d6:bc:8e:f7:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:8E:2A:4B:C5:DD:CE:B3:44:B2:1E:A8:49:37:7A:2A:49:01:EE
X509v3 Authority Key Identifier:
keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/90107A9605F811EA8784CF2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.164.0/22
203.89.108.0/22
Signature Algorithm: sha256WithRSAEncryption
77:18:28:14:81:60:4d:44:0e:8a:85:6b:00:22:8a:d1:df:82:
30:71:ea:33:06:85:af:c9:b1:15:db:d2:07:2a:a9:a5:01:97:
54:c2:01:59:c8:0c:2f:e0:50:fa:93:e0:d3:98:12:1c:89:bd:
9e:e3:d4:9a:42:dd:a9:56:39:c6:26:9e:b4:a2:07:33:25:28:
30:54:a6:bc:70:72:1b:22:7c:5a:17:99:e3:67:af:a6:a0:c1:
0a:03:27:f6:a0:91:b5:58:b9:ed:b8:14:16:30:ff:5f:e8:0d:
26:44:91:78:14:ed:70:e5:4a:10:d5:e5:5b:6c:44:38:d0:ec:
f2:ce:3a:24:a3:b9:ad:c5:63:04:0a:30:67:c8:cb:25:9e:3d:
83:03:04:cd:f3:eb:62:5a:3d:bc:60:11:b4:94:d6:3b:99:25:
a5:d3:96:06:ba:48:bd:2e:8f:da:39:8e:73:72:ad:7c:6c:4b:
d0:31:92:0d:ab:6d:cb:54:44:75:73:38:68:24:1b:cf:3a:bf:
0b:fd:0a:b8:03:4d:6f:2e:fc:d1:fb:a6:04:8c:a3:e7:3a:9d:
ad:7c:1a:f1:63:99:21:6c:61:e3:2a:72:33:ad:02:9f:54:be:
59:f1:c5:5b:10:f1:2e:5a:68:1f:d9:e2:45:fa:4c:4d:ea:e6:
8a:de:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org