Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/6EDA2BACA46511ECB591832DC4F9AE02.roa
File: 6EDA2BACA46511ECB591832DC4F9AE02.roa (raw, json)
Hash identifier: VbBv5RUWteOXTecqZbQMX9st1aK17FybuKDRonHlBDs=
Subject key identifier: 2D:EE:12:80:6C:9F:77:B0:0A:05:70:7D:84:58:40:D6:C9:EE:51:E9
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 3818
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/6EDA2BACA46511ECB591832DC4F9AE02.roa
Signing time: Wed 16 Mar 2022 05:40:10 +0000
ROA not before: Wed 16 Mar 2022 05:40:10 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14360 (0x3818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Mar 16 05:40:10 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=6231783a-beb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cf:4b:d6:bb:97:95:d6:fe:28:7c:04:ce:33:
1e:e8:fd:4c:9f:1a:86:65:99:f1:87:51:fc:a4:db:
d1:a4:3c:bd:27:15:19:5e:7c:61:95:5e:d0:c7:ba:
c1:80:7f:31:d1:a6:1a:07:66:07:d2:c9:ae:70:1e:
0a:6a:5d:3b:d9:49:13:57:0c:84:61:65:62:8d:1f:
a7:34:40:97:e2:fb:99:79:ce:d0:87:ed:96:0d:44:
ee:c8:6a:1e:ff:69:76:63:77:8a:d7:8d:89:79:f0:
f0:25:86:96:90:9f:1e:12:df:f6:00:9f:aa:58:71:
7d:a9:f4:4f:9c:5b:10:09:2b:43:2a:59:1d:b3:97:
27:92:21:8d:8d:fd:54:08:6e:04:c8:69:5a:77:cf:
61:50:e2:ac:a5:40:2d:af:10:90:c8:4b:d0:60:e7:
7c:69:24:74:7e:c7:b0:11:11:d5:80:6d:b5:55:ca:
d2:db:d6:7b:a7:03:f6:47:f0:17:3a:b1:74:85:30:
11:30:2e:75:2a:d1:30:88:0e:58:af:80:3c:6c:b0:
6b:be:e2:eb:8c:f0:d8:59:91:bc:da:f7:ac:b9:d9:
1b:21:02:c6:f3:57:7c:84:29:b6:15:55:69:b0:82:
c0:cc:00:fd:ad:af:3c:d7:a6:33:e4:24:44:22:f3:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EE:12:80:6C:9F:77:B0:0A:05:70:7D:84:58:40:D6:C9:EE:51:E9
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/6EDA2BACA46511ECB591832DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
ab:32:60:8f:c5:8a:94:08:2b:20:80:fb:02:e7:e5:81:82:ae:
7c:f3:e0:f6:54:52:24:ed:4b:0d:b0:af:9e:e3:43:d0:ca:00:
2f:22:95:66:d7:d0:fb:55:95:7c:7c:c4:c1:7d:e4:de:9f:7c:
ab:7b:79:71:23:2f:6e:ed:2d:b1:f6:18:0b:b8:fe:8d:ef:81:
bc:c7:4d:18:47:16:06:97:f7:21:7b:4d:43:c0:51:85:80:f9:
3e:f8:a0:97:e2:f8:28:6d:86:2c:4b:4f:c5:29:eb:06:4c:9d:
bd:a3:fc:b5:70:45:46:a7:5d:38:86:7e:e7:2b:66:ac:89:07:
f0:2b:cf:d2:eb:28:1b:1f:f3:f2:9e:b5:83:70:c9:2b:42:17:
ea:c2:94:87:76:e5:2c:90:cf:3c:66:0b:58:cb:e2:5a:9c:a5:
e7:37:ef:f8:d7:6a:68:b3:d7:31:a7:db:7e:35:e3:f3:1e:b6:
34:5b:fb:e6:f0:54:1f:d2:b0:7d:e3:f1:2f:66:47:6b:35:b3:
b0:30:72:98:67:6f:8b:1e:44:ad:8e:3e:4d:de:c6:bf:1b:49:
f7:84:5c:5a:74:df:a8:d8:a9:02:1c:6f:a2:6d:be:82:df:8e:
66:66:5c:a1:30:08:fe:b1:b8:14:58:a4:87:a3:f2:77:72:7f:
18:f7:c3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org