Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6E5ACCC6F41711EB8BCE7253C4F9AE02.roa
File: 6E5ACCC6F41711EB8BCE7253C4F9AE02.roa (raw, json)
Hash identifier: ydaVPmcw22QHExcPLdgyIymJJOQPnW53yJUZ8zuUgT8=
Subject key identifier: 2E:BE:EF:4A:87:33:DA:EA:F9:EE:AA:06:1F:0C:69:A2:97:9C:70:25
Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Certificate serial: 07A3
Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6E5ACCC6F41711EB8BCE7253C4F9AE02.roa
Signing time: Thu 02 Nov 2023 22:09:52 +0000
ROA not before: Thu 02 Nov 2023 22:09:52 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 132404
IP address blocks: 103.244.144.0/24 maxlen: 24
103.244.145.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1955 (0x7a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Validity
Not Before: Nov 2 22:09:52 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65441e30-12e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:72:9b:89:94:66:97:e2:6b:bd:7f:b5:23:
19:d8:57:ae:66:5e:42:15:8e:38:f3:e5:cc:b1:95:
56:44:4d:8e:38:f5:e7:d9:de:a9:8f:6f:1a:c6:f0:
3b:2b:bf:81:40:5b:90:f3:3b:54:63:e5:e6:d0:f5:
f5:b5:16:45:d8:23:89:25:b8:a2:96:2d:ab:75:e0:
a5:ad:2a:6b:fd:31:65:16:57:89:e1:b5:f3:ba:cc:
38:26:16:0d:ad:98:57:c1:44:90:7a:b0:25:44:e9:
3d:e0:93:9f:eb:de:29:66:df:21:b2:25:c1:35:8b:
b9:94:5c:4d:91:2f:76:c4:f6:13:6e:a9:e9:4d:25:
85:21:9b:b7:a9:08:68:30:5a:c6:a5:7d:14:e2:47:
1a:94:18:3e:3d:eb:19:c8:e2:6a:ee:ed:a0:53:eb:
33:18:8d:42:9a:b0:5d:09:2b:6c:b1:e9:51:7a:32:
31:6e:b5:d1:81:7d:35:38:cd:8e:2f:d2:d9:20:6a:
a2:11:14:42:87:d2:9a:05:c6:38:cd:b3:65:56:07:
60:e8:4b:a1:fb:74:f2:72:3e:64:29:be:14:01:d7:
8c:94:cb:6b:29:2f:a6:b7:b2:ef:0c:a4:63:b3:67:
c7:2d:82:a8:04:12:80:20:bb:1f:9e:6e:24:4e:4b:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BE:EF:4A:87:33:DA:EA:F9:EE:AA:06:1F:0C:69:A2:97:9C:70:25
X509v3 Authority Key Identifier:
keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6E5ACCC6F41711EB8BCE7253C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.144.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:d3:0c:d1:a3:00:49:83:80:12:47:ee:7b:c8:74:c5:06:5f:
31:9e:91:5a:d3:67:0e:cd:2d:c2:0d:0a:4a:94:de:04:a9:b4:
78:e9:51:8e:45:8b:67:b5:38:e5:51:5a:9f:d1:5f:6f:ee:7a:
38:51:7a:80:74:19:9a:83:fa:14:9b:d1:5b:81:53:05:3d:49:
b1:26:8e:ec:48:2e:a7:29:2f:00:0f:2f:5d:e5:e4:c7:af:b8:
a1:20:3a:51:a2:89:0a:69:db:9d:06:ad:2d:59:b8:de:8f:71:
6a:86:28:dd:03:29:3b:cf:a8:74:76:f7:6e:f3:37:6f:91:b2:
b5:d2:d9:2f:24:f4:02:19:be:cd:37:ee:fb:ac:10:85:30:3b:
d4:f2:60:3a:20:26:96:f8:84:2e:c2:6e:a9:d5:72:4c:b0:84:
0e:ca:1b:65:0d:a0:b3:39:c0:41:f8:42:ea:12:e9:33:5b:d6:
c1:e0:9c:dc:c2:11:b6:a8:33:59:2a:92:e3:19:09:57:32:9a:
f9:68:4d:48:ca:d8:9d:55:7e:37:0e:e4:f2:f2:4b:17:d5:0f:
2f:5c:9a:ad:01:42:5d:7b:00:67:9e:8a:cd:1e:63:f2:dd:22:
ed:e0:c8:3a:10:3d:9a:15:e2:98:5d:9c:19:61:ed:2a:a3:ae:
88:01:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org