Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/6CBBC25602A511ED8277D41AC4F9AE02.roa
File: 6CBBC25602A511ED8277D41AC4F9AE02.roa (raw, json)
Hash identifier: YVkrNJKJxaiOUkGvgEZkRsxADzp5O0Zfbj/YNPuxxas=
Subject key identifier: 4B:1A:9F:F4:79:D3:44:EE:09:C6:B3:26:A6:07:76:3D:4A:73:45:17
Certificate issuer: /CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4
Certificate serial: 0141
Authority key identifier: C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/6CBBC25602A511ED8277D41AC4F9AE02.roa
Signing time: Tue 25 Jul 2023 03:24:01 +0000
ROA not before: Tue 25 Jul 2023 03:24:01 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 135602
IP address blocks: 103.234.237.0/24 maxlen: 24
103.234.238.0/24 maxlen: 24
103.234.239.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148E62, serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4
Validity
Not Before: Jul 25 03:24:01 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64bf4051-614c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:4b:5e:61:c1:03:84:37:51:ef:e3:46:3c:
14:c2:de:7e:15:39:0b:21:aa:a3:bf:21:21:d6:a0:
57:63:58:1c:5a:f1:15:eb:2d:76:67:d2:0c:5b:91:
b4:e9:c3:a5:a8:1d:c1:86:69:18:fc:58:af:b8:d7:
07:2b:2b:e8:58:4a:a9:4b:d3:12:99:5d:04:1e:17:
fa:98:1e:e9:41:06:30:1f:62:22:84:a4:b1:09:79:
57:9c:9d:f1:7a:7c:77:5e:a4:61:c8:73:2e:54:36:
5b:a9:1f:ab:2c:e1:42:6d:43:05:de:3c:b7:30:f3:
d0:8b:90:5c:b1:d8:42:4a:ad:24:38:d3:36:d7:93:
bd:92:74:7b:6d:cb:1a:87:d2:86:7e:e8:88:1a:f4:
26:4d:b2:ba:c9:11:11:28:91:f2:aa:39:d3:19:cf:
bd:8c:ca:65:8f:0e:56:77:2f:12:79:07:06:1f:74:
e9:c4:03:96:b5:77:54:a8:f9:d4:31:7c:87:96:0a:
e7:81:78:08:76:68:20:1c:7d:53:14:cb:64:e0:06:
2f:db:4d:b8:ca:96:e0:80:51:e5:91:c7:36:8a:9b:
a7:ea:6b:99:da:1a:30:92:3b:66:97:7a:95:66:0d:
94:8d:0b:38:dc:7e:d9:92:15:a4:88:0f:22:a6:67:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1A:9F:F4:79:D3:44:EE:09:C6:B3:26:A6:07:76:3D:4A:73:45:17
X509v3 Authority Key Identifier:
keyid:C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/6CBBC25602A511ED8277D41AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.237.0-103.234.239.255
Signature Algorithm: sha256WithRSAEncryption
06:2b:3b:42:ea:e5:a4:23:b1:57:49:31:ab:9a:e9:27:2c:02:
94:0a:44:77:df:d2:ac:94:41:f3:78:d0:52:68:41:7d:ec:7e:
c7:75:df:62:42:b2:fe:14:e8:dd:e9:9a:f7:16:5e:51:9d:89:
00:e3:64:91:7f:0f:2b:38:7a:31:b8:4a:96:54:0e:a6:95:96:
28:1c:c9:64:05:48:22:3c:f9:a0:34:35:39:8d:6c:cd:f3:b5:
c6:ee:89:89:00:a1:a9:a9:43:a5:05:5e:41:04:16:c1:32:e8:
08:d0:fd:af:7f:72:b5:d9:9a:70:d3:2e:c3:8b:30:be:ef:56:
4f:c3:3c:ef:dd:9f:f5:24:b6:e0:7d:1f:ef:db:a9:b5:a5:c7:
c2:c8:6a:d3:d7:d1:2f:c7:4d:3c:c1:5c:2a:27:7d:a9:9d:7d:
0a:77:92:eb:63:d7:ca:c5:2f:99:e4:e5:b5:f1:99:6a:c7:a5:
53:ae:fa:30:d3:3d:81:04:20:41:2a:95:e9:08:fd:6e:d5:5d:
66:49:91:ed:15:0e:8c:90:64:d6:1b:88:ec:28:4a:29:c1:6b:
dd:6a:a4:50:8d:53:d6:fd:67:5a:2e:95:2a:4e:b6:00:43:ca:
2a:f2:75:42:9b:48:b7:65:ad:36:64:1c:f2:2a:61:a9:cb:0e:
13:11:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:07:17 2025 by rpki-client