Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/BAA89C8E95DC11EEB90BC245C4F9AE02.roa
File: BAA89C8E95DC11EEB90BC245C4F9AE02.roa (raw, json)
Hash identifier: iRNgvVF92EWl248e8CqJQ/KNDDZhjsW8jAKZIzC6+60=
Subject key identifier: E8:5A:DC:8C:2E:46:3A:28:3C:4A:1B:68:9C:8E:C0:0D:AF:4A:A1:C4
Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C
Certificate serial: 1C
Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/BAA89C8E95DC11EEB90BC245C4F9AE02.roa
Signing time: Fri 08 Dec 2023 15:28:37 +0000
ROA not before: Fri 08 Dec 2023 15:28:37 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 137871
IP address blocks: 103.139.178.0/24 maxlen: 24
103.139.179.0/24 maxlen: 24
2406:1dc0::/32 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C
Validity
Not Before: Dec 8 15:28:37 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65733625-c0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:af:97:fe:c6:6d:d6:b0:83:97:2e:47:50:
e6:b0:fa:e1:f2:af:e8:b7:73:82:a5:7b:84:3c:96:
6a:a7:1b:5f:2d:6a:b8:86:40:38:a1:56:a5:77:6d:
d6:d8:0c:20:75:21:9e:34:b3:e0:62:ef:80:bc:1c:
fa:a4:57:93:ca:b0:39:b2:16:e0:a8:64:0e:41:18:
76:f3:ad:20:6e:fb:14:e9:a9:ba:4a:52:fa:1c:92:
d9:e2:a2:ae:72:a6:4e:06:6e:4e:11:de:1e:5f:7e:
a0:34:31:20:91:b8:d5:cb:09:fd:45:4d:6d:ba:4d:
f6:28:db:44:3c:41:03:04:02:a3:54:17:f3:fd:8f:
7a:1d:d7:77:71:49:63:71:61:82:94:32:63:13:15:
96:b4:26:9d:c0:83:14:77:12:97:f1:de:9f:47:3b:
10:7b:85:45:af:64:9b:71:5c:98:d6:ba:23:0c:83:
f1:a9:3a:42:e6:81:09:b8:17:6b:b8:52:41:d7:12:
68:d2:6e:2e:c4:81:4f:90:b4:95:86:d2:6d:62:a2:
a8:63:af:2c:cd:36:15:d1:16:dd:ac:a0:38:cb:5b:
70:20:34:15:99:4a:0c:c7:90:d1:96:5d:ef:fc:85:
88:b5:46:7d:a8:89:da:bd:2d:e8:0f:52:0b:3d:d0:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:DC:8C:2E:46:3A:28:3C:4A:1B:68:9C:8E:C0:0D:AF:4A:A1:C4
X509v3 Authority Key Identifier:
keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/BAA89C8E95DC11EEB90BC245C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.178.0/23
IPv6:
2406:1dc0::/32
Signature Algorithm: sha256WithRSAEncryption
53:9b:0b:a7:ac:fb:b8:98:70:47:2a:be:a0:9f:67:3a:0c:30:
91:8f:e0:16:a5:dc:74:0c:58:12:7f:be:d7:f6:ad:66:e6:41:
4e:ca:52:97:7e:58:a4:2a:8e:0b:bc:1c:61:8e:20:58:c6:87:
2b:a9:32:90:ef:06:c2:b3:0b:2c:1c:1e:e4:21:be:06:d1:34:
12:18:be:9e:97:57:61:e0:f3:8f:d3:df:00:85:3c:f5:0e:06:
ac:b4:c0:dc:77:cf:93:85:29:60:80:ed:a2:e0:c0:d7:9b:a9:
fc:20:b9:d6:dd:5b:df:cf:06:08:d1:f3:86:0b:1b:67:08:3f:
5d:f6:64:e9:d8:09:13:29:7c:9e:e7:2d:62:d5:fa:e8:b7:c5:
8e:d5:56:af:ab:4f:72:29:f3:5c:96:df:6c:54:06:67:a4:7c:
09:e7:e5:6f:d7:37:d8:84:2a:4a:91:37:a8:26:9e:21:64:e8:
da:b9:50:65:f9:e1:6e:b3:e0:b8:42:55:35:d2:b0:05:51:d4:
13:da:3d:b0:22:51:b8:03:7d:cf:01:6e:10:da:96:b4:ce:07:
cf:57:ac:67:11:92:d9:7f:e1:47:0b:60:98:de:82:6f:b0:8b:
cb:af:06:5c:14:31:86:23:b0:6d:c9:64:d1:7a:cb:9e:32:70:
e1:d9:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:46 2024 by rpki-client on console-fra.rpki-client.org