Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/1D8C552C49A511EE92466E18C4F9AE02.roa
File: 1D8C552C49A511EE92466E18C4F9AE02.roa (raw, json)
Hash identifier: Gct7wQsvmmp5nmSeRZ04VoPL+i3Vl77eGPJMs34Gx/w=
Subject key identifier: 7E:F2:5E:7B:01:F0:CC:9D:3C:2F:69:D2:6A:E1:06:76:64:9B:CD:D9
Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial: 09B5
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/1D8C552C49A511EE92466E18C4F9AE02.roa
Signing time: Sat 02 Sep 2023 15:26:41 +0000
ROA not before: Sat 02 Sep 2023 15:26:41 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 131243
IP address blocks: 103.103.98.0/23 maxlen: 23
103.103.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2485 (0x9b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Validity
Not Before: Sep 2 15:26:41 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64f35431-fdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:d6:09:a3:b4:e2:c4:f8:3a:cc:21:08:49:
4f:a4:29:8f:52:f8:05:37:22:ff:70:66:75:58:b6:
c7:5f:f4:31:01:22:83:d7:1a:a7:a9:5f:b6:89:79:
31:71:7b:ec:7e:34:c0:5e:27:9b:33:bc:09:8b:9c:
e1:4e:99:cf:03:b0:b0:9b:11:e1:96:24:b6:db:e8:
f1:db:56:fd:d9:c8:a0:df:15:00:47:34:ea:78:b7:
46:af:78:76:cc:be:29:82:dd:e0:7c:78:47:d8:5c:
5c:f7:b6:19:29:7d:c5:07:6f:21:e1:9d:8d:9e:42:
5d:59:4e:89:86:15:ec:64:58:b7:29:b2:48:95:72:
89:f0:7b:2a:4e:c2:0c:75:89:86:d5:9b:ed:8a:81:
92:93:5e:a0:00:0e:2d:90:4d:73:85:17:8a:97:fd:
3f:5d:3c:c2:93:c5:27:26:59:49:25:f9:89:cc:93:
dc:a9:09:0b:8a:ba:25:f1:81:e7:2f:34:a5:3c:52:
cb:97:b5:6b:4f:ed:90:89:65:09:ab:1a:6d:2b:c9:
d9:bd:fd:16:3d:78:b4:8f:f4:03:ed:67:93:78:a6:
47:0f:5b:e1:37:ff:aa:49:a0:eb:59:06:4e:5f:1c:
a1:b6:be:4d:53:da:aa:7d:3c:13:03:97:5d:e5:ad:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:5E:7B:01:F0:CC:9D:3C:2F:69:D2:6A:E1:06:76:64:9B:CD:D9
X509v3 Authority Key Identifier:
keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/1D8C552C49A511EE92466E18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.98.0/23
Signature Algorithm: sha256WithRSAEncryption
76:7b:ed:8b:32:12:39:a9:0d:cb:33:00:0a:59:36:73:9b:10:
52:35:32:10:c7:c2:8c:4f:bf:eb:11:2d:99:23:4d:ff:80:43:
4c:08:22:7b:29:30:ab:9b:b3:51:ed:82:20:ab:5f:05:f3:07:
15:48:bb:5f:b4:a8:2e:0e:6f:7b:13:ae:52:f4:03:b7:06:f6:
3c:46:c1:60:82:b6:24:a6:d6:16:28:93:74:b1:bf:a4:8c:d3:
50:3b:4c:e7:f2:f2:17:92:ca:66:6d:59:87:d7:4e:22:36:3c:
53:9b:43:c4:2f:d7:aa:d2:77:ac:45:3f:fd:b8:b5:af:4a:80:
54:f4:65:30:05:f2:8c:54:48:59:23:e4:32:e1:b0:0b:8a:ff:
28:80:8f:b6:77:65:c0:8c:3c:59:10:2d:c9:da:91:af:f1:38:
5e:78:3e:64:c6:83:9d:62:fb:37:df:5c:98:58:3a:19:c7:70:
29:3d:7b:f1:3e:cb:6b:c4:fc:7b:6c:db:86:8b:55:c6:45:75:
b5:f6:b6:51:b2:87:ae:d8:67:d2:7f:c8:68:c2:c5:40:5c:07:
47:50:b2:fc:20:05:5a:e7:7b:93:28:a0:9d:be:4b:0d:07:9d:
33:dd:78:2d:a2:b0:af:dd:78:e9:ac:3f:ce:13:1b:00:e0:09:
4a:d8:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:13:59 2025 by rpki-client