Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/EF5E247C668E11EDBD457638C4F9AE02.roa
File: EF5E247C668E11EDBD457638C4F9AE02.roa (raw, json)
Hash identifier: kZvfxBMPxzD6EIIF59jqRrsv/6bre1ern9I48s80rBQ=
Subject key identifier: 16:69:35:63:78:61:E2:B1:48:38:58:7A:33:A2:F6:C4:AF:E4:14:69
Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Certificate serial: 0B75
Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/EF5E247C668E11EDBD457638C4F9AE02.roa
Signing time: Mon 04 Sep 2023 05:25:20 +0000
ROA not before: Mon 04 Sep 2023 05:25:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134806
IP address blocks: 103.89.26.0/24 maxlen: 24
103.89.27.0/24 maxlen: 24
160.238.0.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2933 (0xb75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF2
Validity
Not Before: Sep 4 05:25:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f56a40-4517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:a8:1c:f7:49:91:59:c2:3d:4a:56:40:82:
24:08:a3:6b:a5:f3:44:08:fc:8a:c5:9a:f4:04:1a:
a7:85:b5:74:37:a5:c1:3c:73:2e:92:d1:7c:ca:b9:
f9:3d:1e:22:04:71:35:bc:7c:d2:f4:a2:ef:8f:44:
ee:aa:2b:c5:93:1c:e9:e2:fe:f0:b1:3f:c4:ae:c1:
94:59:4a:7b:19:22:ce:1d:3d:a0:53:6b:6a:b9:02:
5b:df:b1:02:22:f1:b9:b3:dd:5f:f2:96:57:c7:c9:
e4:bb:fa:52:2d:9f:f4:cc:81:95:23:28:25:9e:71:
23:dd:52:43:d0:33:30:27:e1:56:97:9e:a1:46:ec:
de:fb:74:18:a1:f6:80:f1:65:09:6f:db:92:f0:1e:
82:27:2e:ad:b1:df:95:30:4d:e0:d3:d8:92:c7:2b:
77:83:4e:56:5b:7c:4d:9e:f4:1d:7c:8d:c5:2f:23:
35:1e:b0:b7:77:e8:48:cd:6d:7f:60:68:4b:97:6b:
9b:1c:32:c3:a5:e0:62:e9:85:5f:44:0c:c8:19:c3:
a3:f1:89:d0:05:44:df:46:93:70:07:f8:99:2c:45:
0e:5b:e2:9a:54:01:86:e6:eb:f4:57:d9:b6:51:46:
d6:26:7b:18:85:39:7d:de:62:84:63:58:e8:ea:82:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:69:35:63:78:61:E2:B1:48:38:58:7A:33:A2:F6:C4:AF:E4:14:69
X509v3 Authority Key Identifier:
keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/EF5E247C668E11EDBD457638C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.26.0/23
160.238.0.0/24
Signature Algorithm: sha256WithRSAEncryption
48:af:35:ec:d3:7e:72:ea:6d:8c:02:1a:9c:bc:b9:0a:5b:b5:
b8:31:50:14:e9:7e:7e:88:cb:ba:4d:38:3b:01:d2:d8:76:2a:
58:bb:1e:56:10:11:69:0c:34:3d:a1:4c:00:fc:13:5d:bf:b0:
fe:9e:45:9f:ab:61:d0:ca:37:b4:04:d4:1a:bf:02:17:71:66:
82:0d:5c:9f:5c:09:e0:ca:7a:f5:2b:4e:8b:e2:ce:e8:04:91:
2a:67:38:4b:c1:c9:a2:98:04:5b:3c:45:24:2c:b0:44:ee:1b:
e1:7a:fd:2a:c2:5e:cf:44:ca:fd:17:77:bb:bd:05:00:71:7b:
22:15:70:1c:63:7b:8b:4c:ba:3e:99:57:df:64:04:d3:17:dd:
f3:7c:78:da:47:8c:30:42:be:10:3b:0f:5b:90:65:0d:8a:15:
41:91:68:a7:85:a5:26:ed:31:cc:19:70:11:b9:61:72:a9:2b:
67:35:29:f1:8c:fe:0f:82:08:7c:d2:51:53:66:0e:6e:3a:b7:
61:47:26:a1:23:6d:1b:54:89:42:8d:33:4a:24:00:d6:b2:4f:
0f:1e:75:7f:74:e9:56:1b:c3:69:f8:8f:3a:cf:66:90:a7:86:
d5:a9:9b:9d:6f:01:ea:d6:f9:48:81:e1:28:0b:c6:db:7a:97:
1e:c4:b1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:37 2025 by rpki-client