Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62B6ED2C52C111EE8A0C9539C4F9AE02.roa
File: 62B6ED2C52C111EE8A0C9539C4F9AE02.roa (raw, json)
Hash identifier: BPwFBzVB0FLV08KUkhvq8VdToG+K+8XnTeLiASKmh9E=
Subject key identifier: 4A:60:58:C4:57:C5:02:82:EE:75:CE:5E:B9:C1:A4:E4:C9:C3:56:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7A33
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62B6ED2C52C111EE8A0C9539C4F9AE02.roa
Signing time: Thu 14 Sep 2023 05:41:43 +0000
ROA not before: Thu 14 Sep 2023 05:41:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150584
IP address blocks: 103.140.242.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31283 (0x7a33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 14 05:41:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65029d17-1261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:7a:e3:29:0a:5b:14:6d:20:15:95:9f:4e:
d5:e0:79:13:ba:f2:22:50:79:41:f6:d1:11:3d:a1:
72:0f:ee:39:91:28:79:7f:42:21:a5:4c:f7:73:1c:
42:af:e6:00:ec:6b:ad:ca:93:15:ad:4f:b5:de:fc:
c0:03:17:6e:47:cb:d3:c5:b3:23:56:46:27:75:07:
97:fa:f9:a0:08:1c:a1:e4:13:75:4e:23:04:c1:6a:
97:d5:f9:47:04:e5:8f:41:7b:ea:e0:b3:a3:8a:d2:
43:43:71:7c:86:e4:bc:ec:3a:c7:de:b3:46:af:b0:
0e:c7:10:5f:d0:a3:0d:e2:4b:57:e2:57:3f:d2:4a:
8c:a4:c8:0e:05:a1:de:f1:ea:1f:20:3a:db:39:2c:
c7:d5:e4:fe:34:ac:86:92:6e:13:18:d3:45:17:24:
43:7f:97:ba:3e:44:65:e0:6e:c1:00:ba:70:3a:00:
87:ce:d0:fe:54:19:08:9a:fd:1a:3a:42:80:7a:c6:
3f:45:50:58:7d:e1:13:9e:7c:7b:40:fc:7b:79:9a:
d6:a8:80:d7:d2:9f:c3:56:0e:4f:f1:d3:2a:ee:12:
d8:2b:cd:25:02:35:7d:c4:8e:6a:71:8d:b3:30:b8:
db:f8:0f:1c:01:44:d8:f0:66:8b:3c:5a:e9:61:78:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:58:C4:57:C5:02:82:EE:75:CE:5E:B9:C1:A4:E4:C9:C3:56:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62B6ED2C52C111EE8A0C9539C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.242.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:56:f4:ed:43:59:50:00:fe:62:44:e1:b3:75:70:87:10:d8:
2c:6d:f7:d7:df:41:7d:40:93:f7:17:1f:f6:07:bc:3a:10:1a:
cd:52:44:fb:22:4c:7a:ac:29:15:ab:71:7b:52:e9:21:cd:74:
4a:50:3e:7e:14:5c:19:e8:af:c8:be:ea:17:a7:7c:e2:78:df:
1a:fa:f9:db:63:6e:e3:80:df:32:65:b4:8b:e9:1e:7c:52:9a:
14:58:8d:2d:f8:52:9f:75:50:c2:66:8f:70:71:4f:75:a6:26:
ba:5f:a0:aa:d1:12:a4:43:db:c1:58:36:e8:c9:7e:b3:fd:ea:
4d:e4:63:d2:ca:07:31:6c:a1:53:84:88:51:28:62:97:bb:60:
58:32:05:2f:f0:4b:2a:5f:e7:dc:75:87:23:75:ee:2d:3c:11:
2c:6b:7e:9c:47:19:6d:7d:84:99:bc:d7:8d:53:6c:13:31:9f:
d8:79:db:2b:ce:64:e1:b2:4f:a3:13:8c:7b:18:ee:39:ce:1c:
38:1a:55:3a:4f:6b:ee:89:a4:72:d3:7e:b8:3a:42:fb:9d:a5:
21:e1:f3:5e:99:98:3c:6b:2c:f9:a1:03:f8:a9:37:04:bb:2c:
84:3f:d3:f3:91:61:f8:b3:6c:4d:e0:71:13:41:2f:59:b9:6e:
ba:b1:61:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 16:11:04 2023 by rpki-client on console-ams.rpki-client.org