Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/C25D1B7848B511EDBCC99229C4F9AE02.roa
File: C25D1B7848B511EDBCC99229C4F9AE02.roa (raw, json)
Hash identifier: UcTOIB35ef3YqKX3uLDGPPRDSz0a8YhaJGLqo+Ilgbc=
Subject key identifier: 66:5D:25:00:A8:11:A6:59:7E:71:62:8E:AD:77:E4:D3:12:9A:41:4E
Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Certificate serial: 06E1
Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/C25D1B7848B511EDBCC99229C4F9AE02.roa
Signing time: Sun 08 Oct 2023 19:17:11 +0000
ROA not before: Sun 08 Oct 2023 19:17:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59332
IP address blocks: 103.228.0.0/22 maxlen: 22
103.228.0.0/23 maxlen: 24
103.228.2.0/24 maxlen: 24
103.228.3.0/24 maxlen: 24
2400:dc80::/32 maxlen: 32
2400:dc80::/36 maxlen: 36
2400:dc80:1000::/36 maxlen: 36
2400:dc80:2000::/36 maxlen: 36
2400:dc80:3000::/36 maxlen: 36
2400:dc80:4000::/36 maxlen: 36
2400:dc80:5000::/36 maxlen: 36
2400:dc80:6000::/36 maxlen: 36
2400:dc80:7000::/36 maxlen: 36
2400:dc80:8000::/36 maxlen: 36
2400:dc80:9000::/36 maxlen: 36
2400:dc80:a000::/36 maxlen: 36
2400:dc80:b000::/36 maxlen: 36
2400:dc80:c000::/36 maxlen: 36
2400:dc80:d000::/36 maxlen: 36
2400:dc80:e000::/36 maxlen: 36
2400:dc80:f000::/36 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Validity
Not Before: Oct 8 19:17:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65230036-45cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:11:6d:04:d5:50:f7:ee:7b:7d:4e:f5:de:
30:f7:bc:ff:e6:ff:47:b1:ca:62:80:56:27:b1:7b:
23:46:42:be:3f:b5:8d:98:8d:f2:18:b3:b8:5d:6a:
20:07:cd:86:21:f0:8e:b0:c9:7f:41:e5:d6:c3:3b:
93:c0:35:d7:2d:ac:de:90:95:e1:e8:0f:72:87:f0:
9a:a2:ed:53:f7:21:3c:61:ea:c6:07:1c:49:09:cf:
0a:c8:81:44:e7:17:5f:1a:05:15:0e:6d:c1:5b:f3:
3f:63:fa:6e:f0:23:fb:1f:28:00:bf:6d:80:f0:82:
6f:da:75:88:39:20:20:f9:05:2b:94:c5:23:97:94:
aa:67:24:87:34:cb:4c:43:58:a8:b8:87:87:81:05:
81:b4:df:87:dc:bb:15:3e:c8:23:02:be:f5:15:ae:
e3:4f:0e:b2:6d:04:b4:c5:8b:6f:6b:45:74:99:8e:
4d:7d:28:fa:83:82:44:bb:8d:d1:86:3d:a9:b6:87:
ce:be:4c:87:e4:3e:9f:7c:87:fa:64:28:e5:02:df:
92:fc:80:b3:a4:30:95:d7:17:b3:51:4e:76:aa:09:
7d:6a:bb:cf:b4:52:48:8e:47:c4:e0:24:a9:7f:af:
af:ab:1d:7a:f4:a2:87:44:43:d5:a2:bf:98:0e:56:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:25:00:A8:11:A6:59:7E:71:62:8E:AD:77:E4:D3:12:9A:41:4E
X509v3 Authority Key Identifier:
keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/C25D1B7848B511EDBCC99229C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.228.0.0/22
IPv6:
2400:dc80::/32
Signature Algorithm: sha256WithRSAEncryption
26:00:97:05:6d:cf:ae:af:e9:92:70:52:1e:bc:1f:c3:05:35:
7b:53:c8:e3:25:3e:aa:e9:6d:39:07:c4:7a:0d:a8:a0:9c:2b:
e4:a7:b5:1a:8d:e8:4f:74:84:04:e1:85:9a:de:60:66:2f:8f:
92:9b:b9:69:38:01:76:a2:19:00:8c:7a:9e:be:4f:bd:8d:be:
5b:db:98:df:e5:1a:9d:17:f4:37:58:e1:38:64:03:36:3f:6b:
76:1b:1b:73:b4:c3:96:4a:ce:23:45:53:d4:fe:1e:30:5b:e5:
17:28:ff:cd:75:3e:b1:df:e9:1a:85:5f:87:69:df:52:b6:a1:
af:61:60:bb:50:b7:24:5a:ee:b2:eb:c3:22:5a:72:3d:89:e8:
da:1f:76:f8:51:85:69:99:8a:79:77:a6:d8:f2:5d:8a:0d:b1:
f0:d9:da:88:5a:d1:1a:39:64:0d:ca:31:8a:cb:bb:fc:54:ba:
ab:67:f2:ff:4f:d4:b2:67:97:33:29:58:11:06:01:19:89:5c:
be:a1:d5:64:c2:74:f6:37:68:2a:8a:28:98:c6:82:a0:d0:0f:
9d:df:a5:d5:23:27:53:32:49:30:11:b3:67:61:e3:8c:a6:50:
91:04:ec:40:71:13:90:8b:76:5e:8c:b7:9b:29:7c:ee:a9:ba:
39:01:fe:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org