Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/677F7C9A152C11EC94BCB264C4F9AE02.roa
File: 677F7C9A152C11EC94BCB264C4F9AE02.roa (raw, json)
Hash identifier: EpBu2/6awnzuzrYF/a+B4gbOEaOPltCUJeY6lhit2Ps=
Subject key identifier: 12:77:BA:E0:63:FE:C8:AA:89:18:E9:8C:63:D0:11:4B:A3:45:61:9A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 3D10
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/677F7C9A152C11EC94BCB264C4F9AE02.roa
Signing time: Tue 14 Sep 2021 07:21:40 +0000
ROA not before: Tue 14 Sep 2021 07:21:40 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 133265
IP address blocks: 103.239.59.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15632 (0x3d10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 14 07:21:40 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61404d84-1571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:fe:7f:4c:ca:90:b9:70:97:9e:b9:58:65:
5d:49:2b:cb:7a:d6:fa:f4:b5:0f:56:40:77:45:54:
4a:1c:85:e4:d4:0d:a0:71:12:56:fe:11:1b:8f:ba:
ae:5f:7b:3c:b4:fc:ec:7e:4c:2c:a7:ab:55:dc:cb:
14:d4:17:e4:95:4c:bf:c9:7f:34:bb:23:5a:d0:96:
32:b9:56:db:ca:19:0f:a9:28:55:2f:ca:fb:7c:59:
96:1c:df:06:97:5a:a6:3f:32:1f:88:87:e1:47:f2:
c6:c8:70:38:7a:2c:09:7c:ca:64:0d:9b:6d:b8:aa:
7b:10:13:99:91:e5:b6:6b:b4:1d:53:a4:dc:e4:a8:
17:cb:7b:84:60:2c:d6:e4:a3:d9:36:36:9f:98:37:
68:86:6b:b7:b6:43:c8:8c:6a:eb:56:7b:98:2e:e5:
01:3e:5e:ef:cb:70:26:ce:dc:33:56:60:9e:f4:33:
fb:44:65:8e:b4:90:84:a2:be:4c:9b:27:be:f5:c6:
70:28:70:9b:14:02:b8:27:8a:e8:5a:4e:71:f6:c4:
ba:9b:2e:2f:80:57:e6:ad:88:0a:62:9e:c1:00:25:
e2:97:0c:39:ec:7c:11:20:88:42:7f:c4:ce:54:22:
38:33:ee:5f:4f:67:4a:fe:fa:71:d4:9e:9c:56:cf:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:77:BA:E0:63:FE:C8:AA:89:18:E9:8C:63:D0:11:4B:A3:45:61:9A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/677F7C9A152C11EC94BCB264C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.59.0/24
Signature Algorithm: sha256WithRSAEncryption
24:71:5e:ec:eb:d7:c6:34:83:15:72:87:aa:bd:d8:e7:f5:99:
83:a1:f0:9a:5f:3b:bd:05:74:58:7b:45:1b:ba:b6:16:b8:10:
3e:44:cf:df:e9:a2:bb:db:da:79:0b:69:05:80:ab:50:7f:90:
8b:a9:c2:ff:41:5d:c6:7e:a8:63:0f:3e:9c:0f:87:36:15:93:
80:f8:ec:0a:2a:d1:cd:a8:e6:9c:36:b3:01:3f:95:90:87:68:
2f:09:61:52:bd:89:82:a0:d2:bc:11:80:ed:e4:6b:c1:17:0d:
49:8b:aa:58:76:1d:48:a6:91:e0:f8:ed:e5:de:e2:a2:b1:e3:
91:aa:16:54:c1:0f:7c:5b:52:d0:2f:c9:a1:5c:8f:a3:d6:59:
4b:94:b9:6e:c9:09:a3:4e:0f:87:92:b6:b6:76:b6:86:eb:9d:
a7:e8:bb:cd:36:d4:03:d1:a0:2e:9c:c3:58:02:d5:4c:65:b5:
8f:ac:b3:5c:b6:3e:8d:14:22:29:ac:71:3a:4c:c9:e0:aa:48:
f4:58:f1:cf:58:25:f8:46:46:8c:f1:40:4c:54:52:6f:e6:d7:
82:4f:f3:08:70:06:ac:7b:21:cf:98:e2:5a:ab:f8:a3:ba:2f:
86:b9:c9:30:37:da:e1:17:31:05:65:d9:a0:a3:a6:d2:fd:01:
1f:db:5c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org