Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0D040649F9211EC9C724125C4F9AE02.roa
File: B0D040649F9211EC9C724125C4F9AE02.roa (raw, json)
Hash identifier: r2GBLt+dF203eJW0m1yCe4QdgYBa5ZJFo1I5PMU1b5s=
Subject key identifier: 5A:E3:86:CA:49:39:61:4B:CF:84:DD:AF:7C:F0:D8:00:06:A7:77:3D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6D85
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0D040649F9211EC9C724125C4F9AE02.roa
Signing time: Wed 10 May 2023 16:29:46 +0000
ROA not before: Wed 10 May 2023 16:29:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138520
IP address blocks: 103.84.80.0/24 maxlen: 24
103.133.64.0/24 maxlen: 24
103.133.65.0/24 maxlen: 24
103.133.67.0/24 maxlen: 24
183.87.42.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28037 (0x6d85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:29:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc679-4326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:3c:69:53:d3:9b:4d:c9:cf:0f:c0:50:dd:
81:6f:50:f7:38:1f:4a:6c:aa:f8:1d:a4:6a:b7:6c:
3a:24:18:3f:16:7f:59:7e:54:1c:d6:58:aa:41:66:
82:61:91:86:6f:0f:d2:f9:73:db:4f:bc:af:8b:70:
77:35:e0:92:6e:fe:5b:a4:25:04:dc:0c:ff:2e:29:
39:81:f4:c8:f1:43:88:85:f6:55:94:b8:86:93:e0:
53:5e:6b:20:fd:81:08:34:a8:40:55:cf:fe:fb:3c:
90:ac:50:09:46:64:ff:5d:66:05:5f:2a:5c:4c:55:
06:5f:48:e6:34:e2:40:2e:ea:02:20:1f:a5:31:a9:
02:52:c3:10:1f:46:23:9b:f1:2d:fd:e5:16:75:64:
8c:d1:1b:b8:1c:5a:4b:2b:05:fc:c5:3f:32:96:4c:
57:fd:63:ba:30:61:9c:d9:31:62:d4:9a:48:32:02:
17:bc:cd:49:16:e3:b2:39:57:09:50:a6:d8:a0:a4:
02:b9:ab:d1:c5:dc:8c:74:d9:fa:9a:ec:2f:c5:a1:
4a:81:5f:ee:72:8e:fd:b9:b4:c5:7a:20:40:64:ed:
98:c8:a3:bf:92:33:84:66:49:99:d3:3d:3c:bc:b5:
7f:68:61:2a:2b:91:df:53:ec:c3:e9:7a:a4:bb:e8:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E3:86:CA:49:39:61:4B:CF:84:DD:AF:7C:F0:D8:00:06:A7:77:3D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0D040649F9211EC9C724125C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.80.0/24
103.133.64.0/23
103.133.67.0/24
183.87.42.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e8:c0:5a:56:db:be:7c:e2:5e:23:6c:9f:d4:cf:ce:84:7b:
51:49:35:b9:11:b7:16:d5:57:ca:29:7e:0e:a1:a3:f0:01:fd:
1e:c6:be:44:6f:a0:f4:32:1d:5d:4a:92:56:7c:87:49:e4:c9:
30:ae:ee:78:bf:02:b7:f9:43:1c:27:62:df:e1:85:91:7d:22:
ee:43:00:16:8c:c2:18:3b:c1:4f:ed:69:c7:4f:9d:44:08:84:
82:8a:6c:7c:77:0a:b2:45:ac:24:16:7c:66:16:cd:e5:27:e2:
b4:96:45:ed:2b:f1:67:e3:b0:13:04:e1:80:84:6b:c5:49:6b:
3b:49:ca:f3:06:53:ee:38:97:cd:30:a3:34:10:4e:df:bf:1b:
21:c1:87:96:8e:9b:23:18:04:54:a8:99:a3:9a:cb:e5:02:67:
a6:4a:7f:6f:23:31:48:80:90:04:9b:95:6d:e5:26:b3:dd:44:
82:9c:56:ba:69:f4:b3:90:77:3e:c6:83:80:ca:1d:e2:46:84:
c4:2e:f2:dd:4d:a1:79:f5:cb:9a:24:f6:19:b2:b5:8e:1b:7f:
1b:fa:83:04:b4:60:93:07:b0:72:f6:20:db:c8:f4:4c:1a:34:
0c:4b:aa:e5:32:33:da:63:6e:3a:bd:2a:d7:6e:2c:a6:98:05:
9c:2a:f4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 22:35:33 2023 by rpki-client on console-fra.rpki-client.org