Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/CE6B8C344EFE11E88A17BB84C4F9AE02.roa
File: CE6B8C344EFE11E88A17BB84C4F9AE02.roa (raw, json)
Hash identifier: bzYYw2277/Jolm7hdoJhRsxTcuDQ6J54VkdQBD1gc8c=
Subject key identifier: E9:8B:36:8A:3A:45:BB:91:B9:24:8D:39:58:14:26:FA:20:30:7A:CC
Certificate issuer: /CN=A911D2A3/serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644
Certificate serial: 0F34
Authority key identifier: 3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/CE6B8C344EFE11E88A17BB84C4F9AE02.roa
Signing time: Sun 30 May 2021 18:15:04 +0000
ROA not before: Sun 30 May 2021 18:15:04 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 135131
IP address blocks: 103.114.166.0/23 maxlen: 23
103.114.166.0/24 maxlen: 24
103.114.167.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3892 (0xf34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D2A3/serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644
Validity
Not Before: May 30 18:15:04 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=60b3d628-933f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:7c:97:12:40:eb:2e:64:02:3e:1d:3d:f0:
15:0f:b5:08:cf:73:2c:cb:93:62:ee:0c:2f:b1:90:
96:a4:f4:c0:04:ff:6c:ed:6b:58:b0:87:a0:73:d8:
0f:da:85:89:eb:79:15:15:e2:65:18:36:c3:39:72:
08:13:f4:99:69:d5:00:c6:08:a4:e5:fd:17:1b:5f:
8a:04:80:19:39:f9:e3:bf:9d:3a:5a:72:1b:8c:b4:
73:5d:f4:42:5e:93:19:6a:2b:e2:64:51:d1:99:59:
b2:7c:1b:2b:7c:9d:15:e9:15:48:f2:e3:e1:09:82:
a8:39:b0:c6:54:b6:b3:56:a8:12:80:3e:06:d6:09:
1b:3a:57:51:f7:24:6b:30:ca:f8:00:e1:53:eb:3b:
7f:15:eb:82:46:9c:71:44:d2:53:79:1d:dc:82:7d:
78:fd:91:26:c5:03:5a:25:56:d4:f3:27:c6:73:6b:
85:a1:ed:46:60:5f:bc:9e:70:aa:8e:38:12:18:94:
92:2f:47:1e:45:7d:67:99:2e:5a:d1:9e:4d:ad:0d:
1a:f9:5b:b5:16:56:e0:f9:12:6e:7b:60:19:12:fc:
04:a2:ac:23:56:91:de:a8:b0:ae:c2:c0:9b:8b:91:
c5:14:5f:b5:c3:69:73:b3:c5:28:cc:f1:c3:01:53:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8B:36:8A:3A:45:BB:91:B9:24:8D:39:58:14:26:FA:20:30:7A:CC
X509v3 Authority Key Identifier:
keyid:3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/CE6B8C344EFE11E88A17BB84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.166.0/23
Signature Algorithm: sha256WithRSAEncryption
89:df:8e:ce:0b:d7:a5:b5:99:1b:45:17:cd:0b:78:a6:c3:e5:
4b:ed:1f:43:d7:65:d0:f9:be:ca:b0:07:de:f7:d6:b9:5e:77:
76:fe:74:55:8f:0b:6e:7d:14:6a:14:36:a5:aa:26:1d:0f:41:
06:b3:29:f3:ce:75:8b:81:46:a5:cb:9f:3d:57:48:82:9b:7d:
b2:6c:b7:b4:89:f4:d8:a0:9e:70:35:b5:6f:17:85:4c:1d:62:
94:e1:59:61:fa:ed:f5:a8:10:eb:dd:a7:15:c6:95:3a:f0:5d:
f5:1b:23:14:a3:ab:08:ba:bc:a7:54:63:3e:af:9f:d1:f4:2a:
96:9d:3c:f9:07:e3:c0:0c:ca:ec:25:33:65:1a:44:5d:7c:a3:
9e:88:94:49:91:c3:0f:83:4e:22:18:5c:97:51:9b:8b:59:1f:
8d:ab:30:19:fe:72:4f:e3:74:17:a3:6f:a1:92:71:dd:cb:e8:
62:c7:f6:6c:d9:ef:9d:9f:cb:d2:bb:dc:02:dd:d2:44:41:00:
d6:76:90:e4:3b:88:e9:79:a2:a8:26:67:54:f9:23:dd:8e:46:
97:79:c9:3f:46:27:66:f6:da:1e:cb:f3:e1:5f:eb:56:5b:a9:
a9:7a:56:d9:b4:2c:20:a4:90:ae:80:55:08:5d:36:5b:30:8e:
f5:a3:18:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org