Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/98B2A56EC46211EB92BB6454C4F9AE02.roa
File: 98B2A56EC46211EB92BB6454C4F9AE02.roa (raw, json)
Hash identifier: 62edwX+CqqYfm4USJKPBBRp/nT2vuWcY18Q5Mzd+gfI=
Subject key identifier: 49:B6:67:0E:AB:EC:65:5A:F3:0D:27:97:40:5F:50:D3:3E:28:4B:15
Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
Certificate serial: 046A
Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/98B2A56EC46211EB92BB6454C4F9AE02.roa
Signing time: Sat 05 Aug 2023 00:21:51 +0000
ROA not before: Sat 05 Aug 2023 00:21:51 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 132869
IP address blocks: 103.97.204.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1130 (0x46a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
Validity
Not Before: Aug 5 00:21:51 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64cd961f-5191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:ea:04:2c:b3:cc:13:c6:3d:5b:ab:e5:10:
86:0d:6f:a5:c5:76:5c:34:0d:13:c0:d4:13:59:0a:
01:fe:02:1f:fa:0e:a8:86:ab:cd:46:a4:dd:c2:91:
a1:4e:2a:30:a9:f5:d6:c8:49:af:3f:c8:f7:d5:f8:
e4:f8:2d:cb:a0:a9:2f:92:86:4a:d9:ff:63:f9:d2:
f5:50:f1:da:a7:b8:84:5e:89:3d:88:f8:2b:5f:3d:
48:3c:f1:82:25:a0:e5:a4:fc:55:ec:08:9b:61:6c:
96:6e:50:3f:3c:ab:80:b9:0a:7e:14:3b:97:39:59:
6f:c3:e8:5f:63:61:fb:85:84:ee:a0:4e:4b:87:6e:
3c:4f:9a:a6:d0:36:5b:d0:61:01:db:95:c4:d7:46:
4f:f1:4c:70:5d:4e:ac:dc:93:52:37:14:9b:7b:e2:
93:0f:9f:ea:37:98:8c:c1:04:6d:9a:ee:ca:48:da:
b6:85:e5:73:fe:9d:ce:f2:02:f6:d1:93:08:b4:eb:
11:ff:01:da:49:03:81:4e:ca:d6:70:bf:7e:8e:08:
48:36:bc:95:62:88:c2:81:bc:d9:30:40:e4:45:49:
dd:71:48:c2:12:d0:1a:bb:17:f2:cb:4e:80:fc:bc:
40:7f:9b:10:db:2a:08:65:84:5e:99:a0:00:dd:9d:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B6:67:0E:AB:EC:65:5A:F3:0D:27:97:40:5F:50:D3:3E:28:4B:15
X509v3 Authority Key Identifier:
keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/98B2A56EC46211EB92BB6454C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.204.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:67:05:7a:78:65:d7:6a:f6:4f:16:f6:c1:2b:27:84:13:3f:
e5:a9:0c:6c:46:1d:9f:35:57:33:05:07:cb:08:85:7c:9d:8a:
c9:08:a3:2e:8b:e2:41:36:07:1c:8c:c6:c8:21:67:e8:57:cb:
7b:ce:b6:e6:0a:13:61:9f:9e:52:c5:09:a2:95:26:8b:e3:df:
f7:9e:cc:db:36:f3:b0:03:84:42:1a:8a:c2:54:64:fd:29:82:
1b:72:80:58:f1:db:13:47:ab:9e:6a:ea:54:98:89:b2:28:43:
99:9a:8d:6f:e8:1e:92:59:28:79:9f:85:de:8c:7f:53:87:55:
76:ec:c5:07:15:2d:8e:9c:80:3c:f7:ae:f1:4a:6d:bc:82:e6:
20:74:eb:f9:67:08:26:fb:ff:42:70:6c:0c:75:07:aa:fc:c9:
87:64:d1:5b:ae:f3:10:97:0f:b5:3d:27:bd:51:5a:ca:af:66:
4e:35:fe:c4:c8:0d:20:a1:62:f2:dd:6d:49:ab:f0:bc:4e:f5:
2c:85:b4:d2:07:89:22:42:0a:88:cb:c0:8b:12:80:a4:b9:10:
10:15:8e:e5:5c:50:73:d0:d6:e3:4f:ad:2f:b7:db:6b:93:48:
4e:2f:76:d1:9b:22:8e:b5:14:67:02:77:fd:66:8a:8a:5c:71:
c9:9d:1e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:36 2024 by rpki-client on console-ams.rpki-client.org