Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/9578EE62EA8111EC8906F23DC4F9AE02.roa
File: 9578EE62EA8111EC8906F23DC4F9AE02.roa (raw, json)
Hash identifier: tWm16w3O8RgpGQ8mx7vMG1yohexPVJQAHxU01b3Z6b8=
Subject key identifier: EB:49:A4:B2:44:33:17:6E:55:29:E2:31:2F:03:DF:F5:2D:99:B8:21
Certificate issuer: /CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948
Certificate serial: 0ABE
Authority key identifier: 29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/9578EE62EA8111EC8906F23DC4F9AE02.roa
Signing time: Sun 12 Jun 2022 18:58:02 +0000
ROA not before: Sun 12 Jun 2022 18:58:02 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 140616
IP address blocks: 103.115.135.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2750 (0xabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948
Validity
Not Before: Jun 12 18:58:02 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62a6373a-14c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:7a:c4:b1:1a:37:20:e5:30:8a:ba:35:f2:
d4:34:6d:b2:3a:13:5f:da:0f:74:79:98:f4:ca:3b:
80:da:10:03:c9:16:48:8d:e4:51:be:21:a5:61:7f:
6f:bc:93:3d:a8:af:3b:04:fa:43:40:c3:8f:f0:89:
81:59:3b:ed:54:96:e6:bc:56:75:0e:f5:5b:1d:31:
16:40:2a:6d:13:ec:74:c6:cb:40:00:cd:6a:57:e0:
72:65:3e:5a:d2:69:d9:b1:ae:ad:c7:e5:a5:14:26:
73:59:2d:7a:ef:43:a0:a2:bc:5f:b7:68:3d:30:ed:
34:1b:f9:4b:c5:a9:7d:f4:1c:30:76:5d:d5:44:82:
0f:66:f7:02:b8:0c:49:2f:db:90:05:2d:1b:67:26:
28:d2:8b:f2:8c:37:02:88:18:89:db:e2:26:e2:6b:
62:89:99:5b:c6:7e:e6:67:b6:6f:1f:9b:b7:bb:ca:
4c:9c:7a:ce:9c:31:3c:06:13:2d:fa:49:ba:6e:fd:
59:87:8c:97:1a:12:40:c2:05:ea:39:bd:9a:8c:e5:
7e:c5:c7:25:79:4e:d9:bf:db:44:7b:34:19:23:f5:
84:70:05:fb:9a:42:89:3c:e8:9d:61:88:9d:d9:2c:
9b:b2:bc:75:9a:84:e8:aa:14:05:b3:64:c5:15:2b:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:49:A4:B2:44:33:17:6E:55:29:E2:31:2F:03:DF:F5:2D:99:B8:21
X509v3 Authority Key Identifier:
keyid:29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/9578EE62EA8111EC8906F23DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:68:ee:20:e5:a7:9d:fd:77:ab:1e:06:8d:9d:04:7b:b2:62:
d7:78:a3:9e:44:e3:a3:d0:05:c7:60:6f:e5:22:3c:6a:80:de:
ea:2b:86:3a:0d:1f:1d:47:23:0a:19:5f:23:d5:ca:4b:2e:81:
b9:64:17:76:2f:1f:06:bf:09:9f:c4:95:83:a6:7a:fc:b1:c7:
d7:9b:b1:23:1c:0b:2d:c4:01:47:62:65:b1:b1:c4:03:5a:60:
93:0d:8c:34:6a:30:ae:44:a9:75:f5:a8:e9:1e:75:0b:b9:c2:
6e:30:08:64:ad:e1:1a:3d:b4:8c:77:ea:47:37:b5:6a:9c:6e:
1c:e0:a4:5e:22:b2:82:df:95:08:3a:8b:f7:34:7e:86:26:40:
71:74:31:ee:5d:13:e4:92:2f:c1:10:6b:6d:e6:4d:46:9d:f0:
b1:90:38:67:ae:c0:77:d6:7a:c1:bd:fe:5b:bd:4a:71:d3:0a:
46:ba:7b:ec:86:13:8f:96:3a:54:d1:01:d7:e3:86:c4:ae:e4:
97:47:c6:95:d1:cc:5a:25:c4:53:17:4f:52:14:ea:38:16:6d:
e6:54:ed:a0:5c:7c:f5:49:8f:cf:3e:c9:b9:ec:fe:35:a7:c2:
bc:53:d4:1d:90:52:94:ae:ae:6c:85:6e:2b:f2:00:9a:45:20:
eb:c2:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-ams.rpki-client.org