Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/D07510F0B8BC11E7B9988F33C4F9AE02.roa
File: D07510F0B8BC11E7B9988F33C4F9AE02.roa (raw, json)
Hash identifier: H67M9ZGDQqRdiijXA2y5vGHfjpfQ+hJUNq+ebG6YZY8=
Subject key identifier: 48:11:23:8C:A8:C3:8D:96:51:AC:EA:A9:B5:49:02:5B:09:C5:25:68
Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial: 1D32
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/D07510F0B8BC11E7B9988F33C4F9AE02.roa
Signing time: Tue 02 Nov 2021 17:02:38 +0000
ROA not before: Tue 02 Nov 2021 17:02:38 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 134712
IP address blocks: 103.197.152.0/22 maxlen: 22
103.197.152.0/24 maxlen: 24
103.197.153.0/24 maxlen: 24
103.197.154.0/24 maxlen: 24
103.197.155.0/24 maxlen: 24
220.158.204.0/22 maxlen: 22
220.158.204.0/24 maxlen: 24
220.158.205.0/24 maxlen: 24
220.158.206.0/24 maxlen: 24
220.158.207.0/24 maxlen: 24
2405:d340::/32 maxlen: 32
2405:d340::/48 maxlen: 48
2405:d340:1::/48 maxlen: 48
2405:d340:2::/48 maxlen: 48
2405:d340:3::/48 maxlen: 48
2405:d340:4::/48 maxlen: 48
2405:d340:5::/48 maxlen: 48
2405:d340:6::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7474 (0x1d32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Validity
Not Before: Nov 2 17:02:38 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61816f2e-c600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:fd:d3:bf:d8:9e:77:48:f6:87:4d:5f:f4:
16:9d:00:4a:36:80:3e:de:12:c2:7d:00:e0:bc:23:
80:7d:8d:24:76:45:18:f9:6b:46:80:17:74:b4:64:
84:9a:ad:8d:62:43:b3:40:f8:f4:08:b8:16:50:6d:
d9:55:60:15:a7:d0:52:38:e2:9d:4c:1e:70:ef:0c:
69:16:21:22:ee:71:58:23:be:fd:82:b8:47:0b:c1:
70:1d:9a:e0:1e:e0:10:aa:0e:d4:b3:ef:89:d4:8d:
f9:5f:6f:1c:6b:26:d8:5d:9e:41:a5:40:d3:0d:e4:
26:5b:80:83:fd:9b:3e:af:af:7a:7b:0e:12:7d:b0:
aa:2e:68:d1:fb:de:16:2e:86:c8:d6:ff:55:1f:1f:
af:7b:20:63:04:d5:1e:96:8c:3c:8b:8b:88:c5:3c:
2e:30:db:a5:ae:86:1e:7a:e5:7a:2a:69:57:74:ce:
db:37:24:f7:63:32:dd:a1:f7:4f:44:c6:d4:84:e8:
32:25:89:23:14:07:d6:43:cd:bd:36:7b:72:aa:c3:
34:6d:66:f5:2e:ec:92:ef:74:c4:2e:52:4c:04:4a:
c2:27:3e:d0:0a:d9:c2:3f:d4:26:d1:be:bd:93:bc:
f2:04:5e:17:89:a3:14:1f:79:72:12:99:92:d2:0b:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:11:23:8C:A8:C3:8D:96:51:AC:EA:A9:B5:49:02:5B:09:C5:25:68
X509v3 Authority Key Identifier:
keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/D07510F0B8BC11E7B9988F33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.152.0/22
220.158.204.0/22
IPv6:
2405:d340::/32
Signature Algorithm: sha256WithRSAEncryption
55:4e:d6:c4:07:c5:17:34:76:5a:a2:44:38:5e:7d:95:25:96:
6b:ed:ce:f3:7d:42:30:46:9f:ee:b2:03:eb:68:c7:75:c3:28:
20:39:d3:30:fd:44:24:f2:44:2b:9e:1f:ba:51:fa:4e:9e:d3:
04:52:82:51:96:bf:e5:ed:8e:e7:fd:d6:b5:4a:ad:dd:b2:c3:
8b:1e:bc:7b:4b:99:63:d7:b6:71:ab:1a:6e:f0:15:8a:96:16:
04:17:0f:7f:2f:92:91:66:f5:90:68:c9:df:68:7a:8f:d4:c3:
64:9c:a0:8c:1d:fe:be:65:53:e6:e0:39:8a:af:e1:6f:1c:e0:
5c:24:ee:d4:1d:16:45:a4:f2:3c:62:4d:43:65:57:0e:44:d8:
22:eb:24:15:52:11:a4:b1:57:c3:8b:db:82:ec:7d:82:4e:8b:
06:10:35:04:b0:17:9b:9f:82:ea:7e:c3:ac:a8:62:45:bd:f2:
ec:94:c8:1b:f6:8b:a0:18:69:d9:1a:dc:fe:64:45:27:e8:53:
90:99:3c:e3:16:44:b1:af:28:e3:43:6b:63:ae:07:b5:89:18:
02:61:ea:47:76:2c:5e:23:83:01:c8:cf:89:6b:0b:95:3e:8f:
a6:8b:9e:a1:fb:50:9f:aa:4a:1d:7f:81:a1:51:bc:5e:ae:0f:
35:9d:61:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org