Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/1B2A8CC2D0F711EC8673072FC4F9AE02.roa
File: 1B2A8CC2D0F711EC8673072FC4F9AE02.roa (raw, json)
Hash identifier: StwxdJBd9AyctTLUF3MtoYfZQXPhzR9X4ebnZP2syHc=
Subject key identifier: D5:F1:60:8F:C2:5F:FE:A7:90:1B:AE:A1:A2:39:28:EF:DE:92:15:EE
Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial: 012E
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/1B2A8CC2D0F711EC8673072FC4F9AE02.roa
Signing time: Tue 04 Oct 2022 05:14:32 +0000
ROA not before: Tue 04 Oct 2022 05:14:32 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 131260
IP address blocks: 103.244.195.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Validity
Not Before: Oct 4 05:14:32 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=633bc138-eb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:b5:c5:e3:2c:7b:98:bc:8b:76:3f:3e:24:
60:e1:21:80:c4:76:cd:00:77:0f:99:69:1e:ff:6d:
eb:7e:61:df:1d:9f:7d:99:a4:8a:33:42:47:7b:f6:
9d:38:d8:c7:4d:f0:98:ba:cc:56:c2:dc:ca:9f:b6:
74:f7:a4:fc:6b:93:d7:aa:70:e9:ba:38:a9:64:94:
dd:86:33:95:6d:cd:47:e3:5e:81:28:60:1d:55:85:
ff:f7:f6:39:61:fa:62:9b:0a:df:c4:0e:d7:60:6a:
b9:e4:80:6e:6b:17:0b:2d:b9:ad:cb:db:e2:42:a7:
d7:2f:78:7d:21:7c:d8:2e:76:04:6c:9c:32:57:fd:
4e:07:e6:fc:fb:91:42:74:1e:58:5d:c4:67:27:0b:
28:69:ab:f2:fb:2b:e7:19:d8:f6:e3:52:9d:a2:2b:
42:5f:22:ff:b1:d0:e4:ed:27:31:c3:21:e4:5e:6d:
51:0a:93:b5:e6:69:e7:b4:74:e5:f6:42:ae:0d:af:
d2:fd:3e:f2:f8:bb:4d:c8:d6:1b:3a:e5:1c:86:7a:
34:d3:37:78:62:e5:69:6d:51:a0:03:d8:57:6d:7a:
1d:b6:c1:3a:b1:76:bf:e7:68:62:41:a2:2d:c9:55:
92:bd:1c:66:bb:14:1e:2f:af:49:6a:4b:79:e6:29:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:60:8F:C2:5F:FE:A7:90:1B:AE:A1:A2:39:28:EF:DE:92:15:EE
X509v3 Authority Key Identifier:
keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/1B2A8CC2D0F711EC8673072FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.195.0/24
Signature Algorithm: sha256WithRSAEncryption
22:11:76:be:a8:59:9d:5f:84:2a:6f:a7:6a:6b:70:88:05:97:
ad:81:ab:5e:3f:75:82:2d:1b:4a:3e:5c:f0:dc:ce:cd:11:06:
91:2a:7b:63:41:de:f4:39:ac:8c:c4:bd:d3:e2:36:bb:98:04:
b6:9e:05:2d:1d:e5:34:1c:64:a8:7e:12:40:5f:3a:fc:70:b5:
7b:59:62:47:9a:ae:b0:58:cf:8d:88:84:61:a6:78:36:ff:3d:
41:ff:2e:7e:ba:09:98:d7:67:5b:bc:d1:56:37:6c:6a:92:1f:
89:c3:1f:06:70:cf:6c:0c:06:ff:c1:8c:be:42:d0:d9:6e:c2:
ef:08:77:e7:fe:03:2f:cb:db:10:88:97:0f:5e:10:0b:04:3d:
de:31:e9:94:70:e5:6c:af:73:66:ef:a5:48:fb:95:5a:5a:49:
d3:2b:80:9e:64:dc:5b:7b:bf:40:64:ec:b6:b6:d5:99:b3:61:
d3:f6:0b:57:b0:4e:2a:e6:b5:02:19:0b:ae:a0:d1:0b:6b:b5:
96:5b:9d:6d:5c:20:a8:87:47:f0:ae:11:a3:6e:76:7b:c0:d1:
45:ff:f2:fa:76:64:6a:b7:74:7a:9a:63:36:af:e5:f3:cb:30:
b4:9a:68:80:40:62:5f:09:68:54:4e:65:b9:25:51:48:b9:d7:
68:bb:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org