Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/7FFF9A1CF0DF11EDB367913BC4F9AE02.roa
File: 7FFF9A1CF0DF11EDB367913BC4F9AE02.roa (raw, json)
Hash identifier: IbcLM+cWCUXJi2jiSHp4YjRgxDOAzOi+RQEnKKEDF5I=
Subject key identifier: 00:6D:9E:AF:12:06:F5:B2:79:95:0B:FC:0A:0A:1B:48:D9:2B:96:2D
Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial: 056D
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/7FFF9A1CF0DF11EDB367913BC4F9AE02.roa
Signing time: Fri 12 May 2023 16:10:24 +0000
ROA not before: Fri 12 May 2023 16:10:24 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.104.140.0/24 maxlen: 24
103.104.142.0/24 maxlen: 24
103.104.143.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Validity
Not Before: May 12 16:10:24 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=645e64ef-0473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:2b:11:b5:fc:66:11:b7:a0:9b:a8:3b:b6:
3b:56:5f:f1:3d:99:88:4c:a1:9a:ba:c9:9e:67:64:
48:03:7d:74:12:8f:88:30:80:8f:b0:10:bf:e0:0e:
1d:c7:52:15:61:37:59:26:5f:58:b8:c5:81:1d:51:
61:90:12:6f:b3:f3:bd:40:fd:a0:f1:2e:7a:ab:67:
56:8d:8f:10:fa:1e:b2:e0:9d:3e:45:50:41:82:98:
c0:24:f2:52:1a:83:74:e0:3a:2e:19:ec:0a:82:c6:
f9:02:87:19:46:f6:00:d8:76:c3:c9:7d:ec:36:9c:
0f:1b:32:f9:87:ef:71:74:b9:e0:60:3b:31:79:61:
cb:5b:b9:d0:9e:dc:9a:60:de:6b:cb:d3:2a:64:3b:
2c:64:c2:5e:92:3f:31:3f:7a:83:9e:58:e9:df:7f:
5f:f4:94:92:6b:72:36:eb:ee:29:4e:cc:23:ad:ec:
6c:0e:45:9e:33:d5:44:db:04:31:cb:12:46:30:33:
f7:f5:51:2a:25:e4:f4:3c:ce:9e:81:a7:08:f5:40:
fd:44:1b:0b:34:fa:1b:b2:7b:32:bf:93:00:f8:b9:
fc:23:b2:4c:fb:ab:c9:ee:e6:0c:b0:2e:55:65:27:
92:47:f0:e6:54:7a:f2:6c:d5:3c:6d:d2:39:cf:f5:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:9E:AF:12:06:F5:B2:79:95:0B:FC:0A:0A:1B:48:D9:2B:96:2D
X509v3 Authority Key Identifier:
keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/7FFF9A1CF0DF11EDB367913BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.140.0/24
103.104.142.0/23
Signature Algorithm: sha256WithRSAEncryption
48:90:8e:d2:f6:3d:8e:7e:a6:22:9a:6e:44:f0:2a:7c:e2:3e:
32:0b:2c:c1:8d:25:26:31:be:2f:16:47:04:a4:41:71:2f:07:
bb:32:5a:4b:ba:48:e7:c7:21:19:ea:4c:a2:53:ee:e4:00:25:
6d:86:89:7b:7a:bc:21:0d:95:81:a0:0f:b0:49:44:54:82:ad:
34:83:26:ba:44:1a:04:64:fc:ce:4a:06:5b:ad:4b:85:b7:92:
09:55:a2:45:6d:cf:1e:40:37:09:c8:a9:5e:35:03:be:1d:75:
69:fb:7a:da:9d:ee:44:b8:9e:e4:11:65:f9:e4:10:be:df:89:
5d:19:2f:e7:66:50:84:fb:92:55:6d:c6:bd:a0:a7:f0:77:e8:
8d:48:3f:3a:72:5a:ca:98:e4:4b:2b:5e:24:1b:c4:cf:59:36:
e8:c9:97:8d:0d:27:d7:2f:e8:b6:0d:34:a1:95:8c:e8:71:f4:
62:50:27:25:28:8f:96:fb:1d:37:b8:37:82:71:ca:29:26:44:
3e:71:55:78:3a:cb:02:bf:51:c3:02:1c:9e:c9:e8:81:17:e2:
5d:f3:7f:19:b3:99:88:52:61:aa:61:aa:ec:e2:47:30:fa:e5:
78:e0:1a:45:0d:23:ab:17:69:55:42:db:18:45:69:a9:e7:04:
48:45:8e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org