Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/7166B29E9AD811EE999AC186C4F9AE02.roa
File: 7166B29E9AD811EE999AC186C4F9AE02.roa (raw, json)
Hash identifier: 9L0FYBm6vBSRwVAFtNppTiFQXy8CRKKZY6ZKorYpHxA=
Subject key identifier: 15:64:11:65:8F:FA:1B:B4:37:DD:83:CC:9E:08:02:50:28:B1:FE:7E
Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C
Certificate serial: 16C9
Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/7166B29E9AD811EE999AC186C4F9AE02.roa
Signing time: Wed 24 Jan 2024 17:34:44 +0000
ROA not before: Wed 24 Jan 2024 17:34:44 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 62240
IP address blocks: 103.105.48.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5833 (0x16c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD125
Validity
Not Before: Jan 24 17:34:44 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65b14a34-3445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:70:5e:bb:d8:35:91:d6:86:93:f0:20:59:5b:
2c:ec:c6:10:bd:d3:a5:88:fa:e0:05:74:18:17:d9:
cc:81:ad:b6:e8:47:dd:62:95:f7:fe:54:e4:f8:24:
e0:06:4f:d3:40:00:13:e5:be:af:23:fb:3c:24:98:
29:40:01:c7:26:a7:06:2e:5e:51:62:99:45:09:32:
03:33:ab:a8:d3:8f:08:c4:83:f2:af:2b:14:2c:0b:
72:dc:04:fa:d7:1e:85:13:56:14:78:7c:c5:8c:2d:
1a:3a:1e:f2:1a:3f:4c:6a:91:6f:2e:fc:9b:5a:64:
1a:0f:95:61:c1:63:4c:f2:f0:e7:91:13:02:67:64:
f3:6b:61:f3:4a:dd:f5:82:c2:b1:67:03:65:0e:84:
b6:c0:e6:5f:39:bd:51:6b:d8:ae:2e:ce:59:61:b3:
13:e6:d9:ab:81:9b:26:1d:a4:ac:ed:26:de:40:c4:
65:80:ce:08:2d:5c:d6:0a:3e:ac:f4:46:44:28:bb:
68:9d:0d:d1:7b:6e:37:27:cb:68:ff:28:47:69:ce:
8a:27:99:2e:4a:d7:2d:fa:5c:e3:38:d2:1b:50:04:
cf:a8:11:ee:84:55:c0:60:e9:97:3f:8b:2c:45:f6:
9a:d1:c1:58:60:ae:e3:e1:e5:a0:e7:93:07:f9:7f:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:11:65:8F:FA:1B:B4:37:DD:83:CC:9E:08:02:50:28:B1:FE:7E
X509v3 Authority Key Identifier:
keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/7166B29E9AD811EE999AC186C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.48.0/24
Signature Algorithm: sha256WithRSAEncryption
99:bf:af:56:76:37:2f:51:c5:f9:05:cd:1e:5f:e1:0e:0d:e9:
cd:08:a1:fb:80:18:98:16:8c:e4:8d:b6:19:f6:63:91:84:97:
2f:99:e4:a9:a5:87:39:95:dd:fe:8e:94:1b:b6:90:e4:8b:75:
d1:29:bf:04:eb:25:15:aa:3b:e6:9a:ae:1f:da:d1:d8:6f:f7:
ae:22:46:d9:76:e3:ea:c4:0b:e2:43:eb:3b:97:44:3b:92:69:
2c:79:9f:72:0c:29:3c:0d:4f:c0:e7:ef:4c:fe:33:0b:2b:49:
c2:a5:c7:64:3d:8f:43:bc:e6:6b:a0:7c:5e:20:82:bf:ef:c5:
42:4f:79:fa:c4:cb:9e:da:8f:4b:1c:49:f2:32:7b:42:27:d7:
61:3c:cd:03:73:4c:57:8f:ac:f9:86:c6:10:ab:5e:2a:2f:5e:
75:7f:13:34:31:15:13:e0:89:6a:58:6d:f3:71:9a:92:38:3c:
17:60:10:3b:32:9a:c7:a9:53:cc:be:09:06:82:7d:c5:01:d5:
b8:31:20:9a:4d:c1:68:b9:0d:5c:f5:70:b7:a8:00:56:f7:37:
e1:fe:1d:dc:9d:84:86:d1:31:83:cf:e3:71:7d:41:42:b2:47:
d5:4e:5a:0a:25:6e:a6:01:b8:f2:b8:8f:81:ae:84:d8:21:ad:
04:0a:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:56:21 2025 by rpki-client