Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/1A9140764AE011EEAA526C87C4F9AE02.roa
File: 1A9140764AE011EEAA526C87C4F9AE02.roa (raw, json)
Hash identifier: 80wXt+CiwSnn5gMzsKs7rl84EH7um9Gu9gagE0B0UEQ=
Subject key identifier: E3:F7:4E:1D:4B:C2:0A:31:5A:58:E6:7C:BA:89:D4:6A:A6:78:58:9F
Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Certificate serial: 0B72
Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/1A9140764AE011EEAA526C87C4F9AE02.roa
Signing time: Mon 04 Sep 2023 05:01:27 +0000
ROA not before: Mon 04 Sep 2023 05:01:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151629
IP address blocks: 103.89.24.0/22 maxlen: 22
103.89.24.0/23 maxlen: 23
103.89.24.0/24 maxlen: 24
103.89.25.0/24 maxlen: 24
103.89.26.0/23 maxlen: 23
103.89.26.0/24 maxlen: 24
103.89.27.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2930 (0xb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF2
Validity
Not Before: Sep 4 05:01:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f564a7-066c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:73:13:4a:0a:79:be:9a:0b:a6:8d:92:8f:
7d:83:e3:c8:03:33:3c:c4:6f:f0:4c:d9:47:bd:58:
33:b4:c2:b7:8e:67:46:9a:66:1a:4a:a9:d1:dc:f6:
8e:a4:13:90:ff:79:c6:34:b7:3b:d6:df:9a:a9:a5:
b5:d2:1b:8c:e7:7c:75:f2:7c:21:a2:3d:01:61:95:
19:27:60:11:c8:a2:bf:2d:99:c1:7d:f6:ec:da:20:
55:66:7b:7c:c2:67:af:85:f8:36:2a:fd:10:e5:98:
db:05:08:d9:e1:3d:ff:04:12:48:5c:2e:12:8c:97:
db:89:18:8d:ec:c8:f9:c4:6d:86:8c:b0:18:0d:eb:
22:70:23:74:52:c6:b1:b0:28:94:0b:f5:96:c4:bd:
fc:90:44:35:24:e0:43:6d:70:f3:79:84:6b:bd:ae:
11:03:ef:b3:00:13:2f:83:ba:9e:a6:57:3d:9c:23:
2c:c0:c3:8a:de:85:f0:51:32:76:8f:47:a9:26:ba:
b5:8e:2d:9e:76:1a:bb:c1:8e:2b:80:b5:a9:9e:e9:
27:e3:91:d1:d0:a2:d5:ea:93:4e:1e:de:1a:8e:64:
4d:2a:64:06:99:91:0f:29:86:88:61:0b:ca:af:08:
06:ac:56:69:81:10:b6:5b:e3:24:66:c2:2e:37:a9:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F7:4E:1D:4B:C2:0A:31:5A:58:E6:7C:BA:89:D4:6A:A6:78:58:9F
X509v3 Authority Key Identifier:
keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/1A9140764AE011EEAA526C87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.24.0/22
Signature Algorithm: sha256WithRSAEncryption
12:76:dd:16:59:fd:d7:ba:f2:30:31:7d:19:40:c4:37:0d:c1:
07:1b:a6:f9:80:bb:2f:ae:ad:c0:5c:7b:36:a9:9c:d1:fe:cd:
87:2c:6a:59:e5:a3:85:24:c2:54:e4:0c:de:3a:b9:4c:f2:2f:
94:ee:e5:c7:e5:8e:cb:7f:8f:17:cf:54:08:1e:bb:b9:3b:87:
32:dd:19:f9:a2:1f:6f:3c:4e:a9:5e:6c:33:e2:d5:58:f7:9f:
4f:bc:56:65:b2:58:01:b5:3c:2d:9d:25:9b:cd:59:49:98:44:
1e:16:25:cb:a4:e1:50:21:50:02:58:72:16:fa:68:70:b4:0c:
20:a5:8f:11:72:f8:0f:dd:c8:79:19:df:b7:39:4f:e6:d3:bd:
56:20:41:83:ee:7a:30:2e:7a:b7:78:0e:cc:44:f3:35:ba:0a:
33:f6:1a:b2:cd:ed:8b:d5:49:da:d5:a1:17:e1:1e:9e:8e:1e:
4a:f2:45:57:13:0b:1b:f5:55:c6:36:48:9e:6f:5c:49:f2:22:
47:b6:89:fb:a0:97:c0:c0:60:e1:5c:85:fe:3c:3b:e6:a1:12:
38:6c:2c:96:40:af:08:fd:f6:88:99:bf:20:d5:2b:6b:7c:30:
3a:95:17:68:5b:88:b7:82:7f:52:52:0f:01:2d:4e:93:a5:f6:
c4:7e:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:02 2025 by rpki-client