Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/575F61F0D42411ED8AA9290AC4F9AE02.roa
File: 575F61F0D42411ED8AA9290AC4F9AE02.roa (raw, json)
Hash identifier: ZFM+jC3wd/wkujk1DOTiRDhSXe5AH1dA2wj0BSYfmNE=
Subject key identifier: 73:DC:00:93:90:00:8A:14:1A:6E:AC:65:D2:C5:39:7C:E4:F4:1D:0B
Certificate issuer: /CN=A914C07F/serialNumber=D91F77BE22011D7E1D575D9F9ADB5F8E160E5FD9
Certificate serial: 0623
Authority key identifier: D9:1F:77:BE:22:01:1D:7E:1D:57:5D:9F:9A:DB:5F:8E:16:0E:5F:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2R93viIBHX4dV12fmttfjhYOX9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/575F61F0D42411ED8AA9290AC4F9AE02.roa
Signing time: Thu 06 Apr 2023 02:40:07 +0000
ROA not before: Thu 06 Apr 2023 02:40:07 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 138181
IP address blocks: 103.101.176.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C07F/serialNumber=D91F77BE22011D7E1D575D9F9ADB5F8E160E5FD9
Validity
Not Before: Apr 6 02:40:07 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=642e3107-7a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:37:f0:a6:27:9d:11:61:91:10:c1:8b:3f:
60:b3:88:db:e1:9d:0e:17:59:f8:03:70:04:e1:5f:
c0:aa:b7:97:55:4d:e2:8b:bd:12:45:a9:27:0e:97:
a4:4f:50:37:2d:da:e9:80:fe:f3:d2:c6:14:60:3f:
a8:b0:7d:e4:94:f1:66:41:d7:d8:4d:de:2d:46:dd:
0a:70:3b:89:92:d6:bf:e0:72:bb:b6:a8:4e:be:ae:
fd:15:2b:f6:d4:3a:19:60:5c:15:22:4c:c7:9a:5a:
74:b8:bc:a6:f9:af:20:dd:af:91:a2:44:ba:ea:30:
28:ac:70:5e:29:a6:fb:32:b2:f8:14:6b:55:63:e4:
b9:ad:fa:9c:49:91:d4:12:73:d2:44:e9:c0:b0:54:
49:58:3b:ae:40:b8:f6:91:c7:eb:b5:94:82:4d:4f:
a9:f3:95:ac:1d:93:dc:8d:74:de:12:64:b9:a5:50:
47:2e:e6:ab:6d:97:2a:94:12:69:11:24:87:41:1c:
b3:a2:53:58:2c:35:05:ae:09:63:ee:bb:5b:fe:13:
de:9c:02:ce:14:92:80:eb:c1:ba:5c:e1:2b:e7:8b:
bf:ed:08:a0:d6:b3:21:05:25:fd:17:ff:85:89:c8:
be:ae:a2:5d:a0:97:ea:5c:1f:18:59:3b:03:9c:d3:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DC:00:93:90:00:8A:14:1A:6E:AC:65:D2:C5:39:7C:E4:F4:1D:0B
X509v3 Authority Key Identifier:
keyid:D9:1F:77:BE:22:01:1D:7E:1D:57:5D:9F:9A:DB:5F:8E:16:0E:5F:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/2R93viIBHX4dV12fmttfjhYOX9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2R93viIBHX4dV12fmttfjhYOX9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/575F61F0D42411ED8AA9290AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:d7:f0:95:58:02:57:86:46:ba:74:57:b5:ae:b7:a1:c1:8b:
3b:be:dc:ba:3d:8f:a8:6b:a7:dd:a0:77:68:34:05:47:9c:80:
55:e1:90:2e:be:b1:3c:83:d9:dc:00:22:79:07:23:e2:84:5c:
25:06:73:47:9b:36:05:7e:5d:c1:bc:21:03:91:3d:f3:b1:6a:
26:ee:fb:1f:8e:2b:cc:e0:84:4d:68:fb:af:ba:79:b1:9a:f6:
ce:9b:7d:a8:43:6f:fb:24:c5:f3:6a:19:44:3c:7c:09:dc:e0:
c0:52:1a:63:1e:c2:90:f0:62:7e:f4:a3:a3:32:d2:80:77:b3:
fa:45:b2:4c:8b:a2:3c:6e:0c:02:02:ef:88:6a:e0:ca:b3:9a:
3a:80:29:4e:65:ef:ab:be:5e:b3:e2:fa:91:ea:21:6a:05:41:
5e:d4:38:f0:e8:5a:cf:bf:52:00:7f:13:45:27:29:09:62:56:
87:c0:85:58:36:98:93:7f:26:b7:18:eb:e3:5a:70:25:51:3a:
06:6a:05:fe:73:43:88:18:2e:0e:85:b4:87:5f:b4:01:5a:97:
c4:ab:58:b1:a1:f6:b3:20:58:1a:ff:30:84:c8:d3:a0:13:a4:
6c:9d:15:b7:cc:5d:aa:2e:ee:74:89:1d:1b:8d:9c:f9:73:de:
a8:a0:2f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-ams.rpki-client.org