Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/9E5DBE04136F11EF91BD086BC4F9AE02.roa
File: 9E5DBE04136F11EF91BD086BC4F9AE02.roa (raw, json)
Hash identifier: jjdGzXS/oagmrkw4+SNs1eUlmBMJzHqoO32omkjGOM4=
Subject key identifier: E9:14:B5:4E:C2:F2:D6:1B:59:FF:11:73:7A:7E:95:98:21:D2:6C:7F
Certificate issuer: /CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902
Certificate serial: 06F4
Authority key identifier: 28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/9E5DBE04136F11EF91BD086BC4F9AE02.roa
Signing time: Mon 20 Jan 2025 21:41:21 +0000
ROA not before: Mon 20 Jan 2025 21:41:21 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 63969
IP address blocks: 103.106.166.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1780 (0x6f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5021
Validity
Not Before: Jan 20 21:41:21 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=678ec300-5081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:41:af:6a:d5:1f:24:83:c2:5c:0e:35:0e:89:
3d:c8:4d:ef:99:67:0c:d4:7a:59:19:4b:b5:fd:ab:
03:9c:77:2f:d7:be:05:9b:b2:2e:44:6c:ec:fb:4c:
ed:42:3d:7c:e9:8a:ca:18:f9:fb:cd:ec:e4:75:d1:
e3:0f:28:6e:10:3a:10:2a:7e:1f:59:d8:b9:76:25:
5b:42:f0:90:65:8f:cf:32:95:da:32:a7:2e:ab:b6:
b4:44:2c:c4:35:27:40:5b:c6:e0:96:d1:18:49:e1:
54:08:7e:84:4d:00:e0:92:06:41:48:5c:7b:f8:dd:
17:15:ec:64:99:1a:c4:17:d5:d7:d1:5d:14:82:c6:
0b:ed:c7:cd:5d:e1:00:23:05:e8:56:9f:aa:4d:38:
03:b6:9e:18:c5:46:c1:57:de:b6:05:16:a8:15:b4:
5d:6a:9f:cb:55:c3:77:70:42:eb:9a:64:d3:c4:54:
94:7f:96:1c:44:c4:04:23:2d:d3:d1:e3:ca:42:24:
20:10:89:26:29:8e:f1:93:5b:9a:06:24:98:fb:d2:
12:29:5d:3f:34:7b:86:33:55:9e:8c:31:0b:41:3f:
32:42:e7:c2:ec:21:e6:99:fe:27:82:fd:b8:25:c5:
3d:1a:cd:6b:12:cc:5b:59:6a:bf:02:fc:1d:ec:05:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:14:B5:4E:C2:F2:D6:1B:59:FF:11:73:7A:7E:95:98:21:D2:6C:7F
X509v3 Authority Key Identifier:
keyid:28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/9E5DBE04136F11EF91BD086BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.166.0/23
Signature Algorithm: sha256WithRSAEncryption
93:4a:f7:7f:a9:50:ed:00:c9:90:64:af:c6:34:6c:f6:fc:e3:
3d:d7:3b:89:af:37:6a:ca:80:19:a0:35:b0:a2:b1:7f:6f:a2:
50:dc:f2:18:f7:73:68:e7:6e:90:4f:47:16:e1:b5:0f:da:f9:
15:1b:80:63:9b:b8:be:03:fa:ed:9f:22:e0:f3:e3:a9:26:c5:
c9:ac:fc:16:41:f3:e1:f7:c7:18:c1:17:05:6d:bb:09:b8:76:
fe:a0:25:58:f1:0b:1e:23:84:a5:13:33:de:9f:d7:5a:8f:87:
8b:5a:fb:f6:74:68:f3:f3:53:e9:f7:e7:97:bd:48:5c:92:a2:
af:69:e1:a2:92:92:61:95:38:15:8f:15:da:6b:fb:e0:ec:5e:
06:10:b0:9f:69:8a:6b:90:c5:de:03:73:ba:e8:46:6e:f8:0e:
78:eb:fa:d0:47:5c:3f:51:7e:00:9e:e1:b3:52:15:ed:15:2a:
7c:dd:69:a2:20:11:8c:bb:03:d4:c0:89:68:9c:32:63:c2:f9:
30:c1:eb:95:5d:2e:3a:e7:d2:ae:58:a2:e4:44:c2:c6:c4:7c:
23:c7:21:8a:c1:1a:1a:b8:c6:11:1d:7c:ed:08:ae:dc:30:60:
07:6f:d0:5e:1f:b5:6c:d2:98:3d:95:6e:ed:af:ae:15:40:e4:
76:28:6d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:47:38 2025 by rpki-client