Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/3A96E4AA981011EB9466711FC4F9AE02.roa
File: 3A96E4AA981011EB9466711FC4F9AE02.roa (raw, json)
Hash identifier: VVMPdBfhjGTejOPb+WfS/ukZ7USSzLhihyLoLwHUg6U=
Subject key identifier: 96:57:55:01:61:F8:C3:9F:21:F2:0B:AC:12:46:AD:8B:34:30:BC:FB
Certificate issuer: /CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4
Certificate serial: 0923
Authority key identifier: 71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/3A96E4AA981011EB9466711FC4F9AE02.roa
Signing time: Mon 30 Oct 2023 20:49:02 +0000
ROA not before: Mon 30 Oct 2023 20:49:02 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 135386
IP address blocks: 103.79.240.0/22 maxlen: 24
2400:4740::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2339 (0x923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4
Validity
Not Before: Oct 30 20:49:02 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=654016be-68be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:13:cd:40:b9:67:d0:93:cb:80:d8:18:9c:
c8:59:42:59:df:03:7b:2c:d5:13:c9:74:92:9f:34:
1c:42:bf:b1:d3:d1:f1:b7:01:fa:3f:bc:de:5c:89:
42:73:6c:21:97:d2:32:f5:fe:13:80:bf:aa:4d:58:
98:29:82:bf:9e:5f:61:c5:6c:96:b9:96:a9:01:64:
62:55:81:f0:d8:a7:2a:fd:1b:98:5e:21:8f:c7:2f:
2e:5a:d6:c2:7d:16:7d:f3:28:c8:f7:c0:63:42:0a:
ec:7d:df:2b:1f:10:25:7b:c1:62:5f:0c:c3:50:ac:
f9:df:5f:06:a6:e0:53:30:9a:db:e2:96:80:25:39:
1c:30:c1:49:72:01:8c:65:7e:aa:50:9c:17:39:af:
0f:8a:4b:eb:e7:9e:89:39:45:06:9c:ae:7d:a1:ed:
d7:08:47:92:79:85:8d:65:62:9e:2c:16:d1:e9:8e:
6c:15:d5:06:6b:2c:74:28:fd:00:80:79:5e:3e:5e:
87:51:11:4e:cb:fd:5b:f5:6e:27:25:be:cb:d0:4c:
78:69:21:4d:91:45:88:3d:ba:41:0a:13:8c:2d:93:
7d:11:6d:ad:a6:95:f3:3d:c1:2e:88:c2:4a:dc:05:
93:cb:c7:0b:11:1a:af:a6:a7:fc:9a:66:b4:9c:8e:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:57:55:01:61:F8:C3:9F:21:F2:0B:AC:12:46:AD:8B:34:30:BC:FB
X509v3 Authority Key Identifier:
keyid:71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/3A96E4AA981011EB9466711FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.240.0/22
IPv6:
2400:4740::/32
Signature Algorithm: sha256WithRSAEncryption
5d:51:8d:f2:ed:e2:d7:2a:1e:6d:9a:37:e4:49:97:41:26:50:
e5:b8:f4:1c:b9:10:1e:49:e8:0b:83:cc:d6:70:78:4f:4c:03:
4c:04:20:11:63:42:21:72:98:46:a3:83:be:3a:46:8d:20:6f:
6f:f7:06:c2:fe:1b:9d:c4:da:50:5b:2f:ec:41:39:0d:12:e6:
85:0e:51:97:ec:4f:89:fc:ea:a6:63:22:39:6d:2e:cc:d1:c3:
bf:13:4d:3a:ea:ca:74:2c:72:ff:df:22:cb:90:52:e1:b1:eb:
01:77:44:94:74:e4:88:52:5b:c5:d7:ef:62:8d:2e:2e:3e:ca:
16:6b:34:b6:ba:c1:7b:37:26:14:da:30:2e:c1:95:d4:2e:60:
6c:34:fe:cd:b7:cf:df:22:0c:e6:76:07:95:13:15:35:ed:2f:
16:5e:89:9c:78:48:79:7c:35:d6:77:9d:94:ff:9d:65:b8:08:
1b:86:f4:c6:cf:86:62:15:ae:7f:21:ca:99:76:c7:9a:a8:f9:
fe:37:43:4c:f5:4d:86:df:c7:ef:0c:87:62:46:2c:4c:24:ae:
b6:f7:59:a0:d5:38:53:32:1a:31:ea:fe:14:9b:1f:43:30:03:
bb:d8:f2:d6:91:2f:55:32:1e:07:5d:2e:e8:ad:ba:49:4a:b9:
cd:61:cb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org