Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/BC79C37CCAFA11EABE7A0C4EC4F9AE02.roa
File: BC79C37CCAFA11EABE7A0C4EC4F9AE02.roa (raw, json)
Hash identifier: PRLIISYkJaDdHxGFZb4V0GjfnoX/yd5xH3XI6oSxhyg=
Subject key identifier: 05:46:CD:4F:45:22:29:49:1A:C1:6F:67:C2:FC:66:91:31:FF:BE:74
Certificate issuer: /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A
Certificate serial: 09E7
Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/BC79C37CCAFA11EABE7A0C4EC4F9AE02.roa
Signing time: Sat 02 Jul 2022 07:45:48 +0000
ROA not before: Sat 02 Jul 2022 07:45:48 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 138398
IP address blocks: 103.139.78.0/23 maxlen: 23
103.139.78.0/24 maxlen: 24
2404:ddc0:6000::/36 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2535 (0x9e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160EEF, serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A
Validity
Not Before: Jul 2 07:45:48 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62bff7ac-9838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:44:7b:82:dc:0b:ab:af:dc:4b:d6:b0:92:
a8:2c:09:62:5f:2b:e8:36:58:a8:db:f8:67:4e:61:
7f:1c:92:f9:95:7f:39:c0:03:d1:00:ae:87:f9:fc:
8b:d3:d1:a3:a3:ea:dd:a1:ec:17:13:97:f9:cb:be:
a7:af:98:bc:19:c3:f2:77:e4:56:fd:cb:72:f2:6d:
97:c7:e4:dd:02:52:a3:81:90:71:d7:96:98:12:14:
65:17:87:a5:a4:6b:b2:60:83:e0:5f:45:c7:e4:1d:
fe:78:7f:27:11:4c:7f:80:45:47:6b:ab:fc:2b:9d:
38:72:8c:4e:c8:94:67:89:03:4f:46:c8:14:07:b7:
5e:5a:e0:e1:01:cc:e3:73:fe:eb:12:9d:ee:da:2b:
c6:11:67:59:50:42:80:b1:b2:be:fa:1b:bf:6f:49:
89:09:68:da:8f:58:b6:a3:d6:a9:02:d7:51:91:af:
02:ff:de:2c:d5:22:17:6f:72:eb:1a:5e:82:e2:ca:
08:96:fe:49:a6:9b:01:bc:b3:17:d0:a7:54:18:c0:
a8:55:1d:fb:79:38:67:f0:e5:73:12:f3:c2:89:dd:
78:0a:7e:ac:74:a7:65:1c:5f:3e:ab:46:99:42:10:
ca:6a:0c:c1:12:38:a8:ac:13:27:7d:90:a5:fe:fd:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:CD:4F:45:22:29:49:1A:C1:6F:67:C2:FC:66:91:31:FF:BE:74
X509v3 Authority Key Identifier:
keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/BC79C37CCAFA11EABE7A0C4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.78.0/23
IPv6:
2404:ddc0:6000::/36
Signature Algorithm: sha256WithRSAEncryption
3c:b7:11:56:49:a0:fb:40:ea:ab:2f:4d:c0:1e:50:8f:52:99:
c9:5c:da:ae:cc:4d:23:82:1f:28:cd:32:d9:f1:9b:88:85:8b:
6d:2d:c6:16:4b:7b:4d:df:43:5d:14:1c:4e:63:7b:ba:7f:4c:
7b:f7:54:e7:86:c3:44:66:56:9c:53:f6:7e:08:92:02:bb:4c:
dc:b9:d3:f4:11:7c:b8:a0:44:63:87:13:1d:d8:67:f6:ee:d2:
b4:da:29:8d:25:4e:db:dd:ad:16:6e:1b:80:c2:38:8c:87:83:
39:25:35:3e:7a:ea:9e:e1:79:bd:68:fb:df:7f:70:63:80:eb:
d4:43:69:ef:25:96:f6:82:35:9b:80:4a:b3:be:cf:db:73:cf:
d5:e3:93:09:43:d2:b8:c3:0c:4e:ca:88:3e:c8:28:74:72:5f:
5d:1b:4b:e7:17:e5:2e:4c:a8:e2:aa:3f:9c:87:fb:2c:8e:a5:
ae:55:ae:d4:ff:ad:f5:91:ca:32:a7:c2:78:4c:1b:39:fb:bf:
08:25:8a:f6:8e:37:ef:e4:b7:7a:c1:40:ea:f0:e3:4e:bb:57:
14:cc:28:77:aa:5d:e2:b5:b8:1a:0c:64:9c:2b:a2:7a:af:82:
90:e7:db:f0:30:6c:70:97:32:27:5d:75:8b:76:0e:89:d5:95:
00:52:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:19:44 2025 by rpki-client