Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/CF85E9FCC9E911EB8AA3476CC4F9AE02.roa
File: CF85E9FCC9E911EB8AA3476CC4F9AE02.roa (raw, json)
Hash identifier: xqYb6akgWBNiPkQU4Grxm+Y23/zeuJp65Msi8qBOpHA=
Subject key identifier: 9D:5D:52:84:35:00:92:15:F8:48:7F:46:9A:F5:0C:F1:6E:9C:0C:C2
Certificate issuer: /CN=A9128963/serialNumber=7B5FB6970D374BFF75872EB87DBB4030437A6188
Certificate serial: 0BC8
Authority key identifier: 7B:5F:B6:97:0D:37:4B:FF:75:87:2E:B8:7D:BB:40:30:43:7A:61:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1-2lw03S_91hy64fbtAMEN6YYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/CF85E9FCC9E911EB8AA3476CC4F9AE02.roa
Signing time: Wed 01 Jun 2022 19:18:04 +0000
ROA not before: Wed 01 Jun 2022 19:18:04 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 54054
IP address blocks: 103.219.56.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3016 (0xbc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128963/serialNumber=7B5FB6970D374BFF75872EB87DBB4030437A6188
Validity
Not Before: Jun 1 19:18:04 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=6297bb6c-2021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:ce:21:60:24:44:cc:af:e3:10:96:d7:94:
56:30:79:c3:eb:0b:9d:0c:24:78:75:e6:03:de:f3:
31:d4:3d:ce:dd:2e:c9:03:8c:4e:2e:82:38:3a:24:
34:95:a8:a1:df:78:4e:58:23:76:62:77:88:80:e7:
10:39:85:fb:54:a3:53:dc:5b:4d:49:72:d7:ab:f0:
7a:0e:be:43:65:b1:bf:c2:34:72:1b:9d:7c:16:c3:
56:0c:b0:23:05:43:01:69:fc:e4:e0:ff:c5:32:8a:
97:d9:bb:85:b3:93:18:82:08:c3:b7:c1:c4:76:f8:
1f:c4:fa:21:97:0b:ef:1e:88:ae:59:c0:a1:cc:cb:
6a:d3:56:72:5d:d2:c3:7a:3a:fd:f5:71:86:cf:1f:
02:12:13:57:4e:2d:7c:74:16:49:7c:b4:ba:16:56:
09:39:8d:a1:7e:a1:8e:00:12:61:5a:e5:af:9a:63:
c2:a4:9c:b0:94:10:a3:2e:14:f5:8c:6a:0e:86:93:
04:3c:2b:47:ed:32:30:c5:f5:07:f0:c3:48:62:d4:
58:48:52:ca:70:cd:f6:b9:c3:2e:f0:d3:23:7c:01:
ae:5b:07:77:92:88:92:02:9d:71:18:18:f4:44:3b:
f1:30:6d:40:55:83:e9:5b:41:aa:94:94:b8:e3:9c:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5D:52:84:35:00:92:15:F8:48:7F:46:9A:F5:0C:F1:6E:9C:0C:C2
X509v3 Authority Key Identifier:
keyid:7B:5F:B6:97:0D:37:4B:FF:75:87:2E:B8:7D:BB:40:30:43:7A:61:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/e1-2lw03S_91hy64fbtAMEN6YYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1-2lw03S_91hy64fbtAMEN6YYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/CF85E9FCC9E911EB8AA3476CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.219.56.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:a4:cb:0e:5d:89:eb:9a:c6:c1:9f:73:24:db:f9:f8:82:46:
44:78:11:b4:fa:f1:6e:43:e5:ee:92:06:14:2f:70:3a:be:58:
a3:48:d0:43:73:bf:b3:35:7c:45:33:c4:96:ad:32:92:00:f8:
8b:d7:f3:c7:6f:2c:d3:f3:8d:56:8e:54:cf:ee:06:45:e1:20:
26:63:00:4f:db:7a:3f:43:41:15:9f:dd:0b:3f:91:f6:39:d3:
e2:57:34:ea:d2:6d:96:27:f2:9f:8c:43:2c:25:ec:2a:4e:c1:
77:77:da:99:a3:54:c3:0f:fa:ad:98:13:e1:60:9f:b6:7d:af:
e4:c7:a3:06:c7:dd:1e:32:3d:50:a9:3c:66:a0:00:23:08:86:
01:b6:85:60:ad:c9:a1:15:1c:bb:cd:42:f6:5d:b1:d5:02:e7:
7a:01:9c:7e:61:4b:d8:19:cb:5f:a8:54:26:86:ea:35:b7:34:
d9:f3:bb:e7:09:a6:9b:95:ba:7f:e3:98:84:eb:3b:a1:c4:e3:
90:36:9f:99:16:2d:e2:0c:26:51:db:f2:ac:56:a8:a9:ef:96:
b4:ab:0d:bc:3f:d2:45:12:87:a5:e5:32:9b:ba:86:7c:f1:de:
4c:e2:1d:d9:8c:ab:b6:be:70:c9:31:a7:ae:2a:7a:19:92:93:
7b:44:ee:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org