Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/113E2ECE44B211EDA3189950C4F9AE02.roa
File: 113E2ECE44B211EDA3189950C4F9AE02.roa (raw, json)
Hash identifier: Qu1WS7JOpA5JUFQwrbnWFkyuC43kULP0mrbd3CrXvZU=
Subject key identifier: 27:BA:EC:66:17:98:33:8F:C8:5A:2C:CA:4C:65:FA:D0:2A:6E:7D:B2
Certificate issuer: /CN=A91575E2/serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
Certificate serial: 047A
Authority key identifier: E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/113E2ECE44B211EDA3189950C4F9AE02.roa
Signing time: Fri 03 Nov 2023 01:13:33 +0000
ROA not before: Fri 03 Nov 2023 01:13:33 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 1828
IP address blocks: 103.22.128.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1146 (0x47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91575E2/serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
Validity
Not Before: Nov 3 01:13:33 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=6544493d-7c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:da:c0:08:e9:0f:42:59:9a:68:2a:64:53:
fc:74:c4:41:1c:b0:66:89:c5:bf:38:c2:d9:64:d6:
95:e4:e1:14:67:f7:38:23:34:46:1a:bb:90:73:63:
df:fa:8f:f8:a5:a7:46:95:25:15:f3:1b:9b:0b:e8:
c6:af:14:47:00:18:f4:61:ac:ac:6c:8d:58:42:95:
c6:39:45:df:d0:8e:50:31:b2:de:8e:54:6e:e3:35:
49:8d:b3:7b:13:c2:c1:3e:0d:a5:70:a5:50:9a:ab:
24:c2:10:f5:4a:b3:94:05:c3:1c:8a:9c:44:f4:90:
7b:86:ba:ac:40:8f:93:26:8e:5a:85:cd:96:f5:cb:
e7:41:21:8c:cf:8b:9c:37:a2:14:dc:9f:23:d1:2a:
f1:99:22:e5:59:d5:f5:30:51:d4:f5:eb:7a:ec:4b:
87:af:9b:ea:2b:d0:74:4f:3f:dc:f3:ef:3f:40:98:
92:66:cc:27:fe:81:6a:84:29:c2:64:68:59:6e:f7:
eb:e1:91:10:07:01:45:96:4d:b2:83:b7:e0:f8:e0:
19:a0:8c:c7:8a:e0:1a:2a:af:ba:83:3f:71:34:fa:
6b:c3:37:2d:5f:34:3e:14:ce:c8:07:20:b3:dc:34:
a9:bd:7d:67:00:35:2e:b9:66:f9:fe:41:35:b6:c7:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:EC:66:17:98:33:8F:C8:5A:2C:CA:4C:65:FA:D0:2A:6E:7D:B2
X509v3 Authority Key Identifier:
keyid:E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/113E2ECE44B211EDA3189950C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.22.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:bc:cf:d6:a0:49:d0:fe:aa:2f:9c:95:86:b7:58:69:ff:76:
a8:34:f9:1d:e5:31:c4:b2:92:08:42:86:6f:c3:8f:f5:6b:cc:
82:01:60:d7:69:49:fc:64:41:82:33:8a:51:84:43:79:07:4e:
f5:94:78:3e:71:94:2a:8d:6a:a7:e3:3d:55:aa:0b:56:7f:3c:
c3:f5:80:74:bc:b4:34:95:a8:73:1f:51:51:92:ef:17:cf:04:
ca:df:ac:e2:7b:17:7e:b1:dd:f2:db:8b:19:f1:28:9a:c5:91:
b5:0d:10:e1:49:f7:a9:ad:64:ef:60:d8:23:c8:38:a1:fd:8a:
71:6e:9a:80:97:48:d6:a4:01:1b:9f:85:a5:44:d2:e6:71:d4:
26:be:71:3c:c4:15:87:35:0b:c3:79:73:f5:42:e6:16:00:07:
8b:27:4d:29:d2:32:4f:74:ec:49:6a:fd:45:7b:a3:51:ab:b8:
68:34:bc:f7:2f:b9:c4:1e:36:d4:6b:d6:ed:17:9e:b2:59:9b:
7c:4b:76:90:9a:56:e3:c6:e9:cc:5c:bb:7d:45:ae:cb:c6:03:
bc:d5:0c:3d:a5:1b:d4:a4:7a:a4:dc:4f:c9:c5:19:88:3d:47:
d3:eb:fd:2d:ad:04:2a:6f:e8:3e:f5:a6:9c:4e:f8:84:f0:68:
e2:16:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org