Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/4A0B5240652111EABE44516FC4F9AE02.roa
File: 4A0B5240652111EABE44516FC4F9AE02.roa (raw, json)
Hash identifier: RVJp+t6dnVW5pzaZWO/m6Eg33bFii4rPZ0sJlzB91bU=
Subject key identifier: 7F:E5:1A:5C:F4:CD:48:33:27:F9:53:CD:1D:3F:AA:72:7D:92:3D:19
Certificate issuer: /CN=A9129FD1/serialNumber=6C6989AF18EEAFDE0CAF2EEBB514883C75ED4456
Certificate serial: 0777
Authority key identifier: 6C:69:89:AF:18:EE:AF:DE:0C:AF:2E:EB:B5:14:88:3C:75:ED:44:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGmJrxjur94Mry7rtRSIPHXtRFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/4A0B5240652111EABE44516FC4F9AE02.roa
Signing time: Sat 04 Jun 2022 21:51:26 +0000
ROA not before: Sat 04 Jun 2022 21:51:26 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 136516
IP address blocks: 103.91.144.0/22 maxlen: 24
2403:6640::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1911 (0x777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129FD1/serialNumber=6C6989AF18EEAFDE0CAF2EEBB514883C75ED4456
Validity
Not Before: Jun 4 21:51:26 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=629bd3de-1f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:c6:6a:8c:b2:c5:3c:3b:44:00:49:31:4f:
f0:5f:61:a8:9d:e5:f4:f8:f3:90:23:85:38:bf:0b:
2b:e5:72:1c:ca:5d:c7:1c:f6:5d:92:f7:51:c2:95:
06:05:bb:d3:fc:ed:a0:ec:37:31:8a:df:ab:0b:58:
cb:65:6b:c3:7f:d5:89:b1:a2:08:0a:6c:41:42:70:
ea:88:47:ad:56:36:97:f0:cc:31:e0:5e:b3:6f:b1:
25:04:e5:d6:45:ed:03:07:1d:43:2d:ea:d2:32:18:
9a:d8:3b:e6:ef:e4:5f:fa:ed:61:b6:cd:c8:d5:11:
db:d9:a7:d6:94:d2:24:d9:5a:95:b1:56:10:10:1a:
da:9e:fd:be:c7:ae:e6:a3:8f:bb:ca:8d:6e:f5:a2:
0c:30:0a:36:a0:cc:46:27:31:de:7a:f4:40:ca:a1:
e1:a1:77:dc:b1:d4:9d:1d:ae:68:7c:af:f1:6c:1e:
1a:d8:08:99:5b:a7:d2:20:d7:e6:86:e6:30:be:b5:
16:ad:4c:95:f6:20:e9:b7:9d:7f:d5:4c:2f:3b:73:
53:f9:83:c9:b5:41:86:21:e2:01:eb:34:fa:61:8a:
07:4a:e1:b9:d5:9e:91:6a:7c:ab:56:59:4d:9a:be:
45:88:fe:be:e5:40:b3:55:0d:f0:76:46:94:29:a1:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:1A:5C:F4:CD:48:33:27:F9:53:CD:1D:3F:AA:72:7D:92:3D:19
X509v3 Authority Key Identifier:
keyid:6C:69:89:AF:18:EE:AF:DE:0C:AF:2E:EB:B5:14:88:3C:75:ED:44:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/bGmJrxjur94Mry7rtRSIPHXtRFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGmJrxjur94Mry7rtRSIPHXtRFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/4A0B5240652111EABE44516FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.144.0/22
IPv6:
2403:6640::/32
Signature Algorithm: sha256WithRSAEncryption
74:9a:e6:c2:fe:b9:a3:fa:01:34:9d:b0:6f:eb:ed:01:2e:5b:
cd:66:19:a2:f6:e1:67:f6:77:59:ba:36:50:31:ff:ad:ea:20:
ca:69:19:db:65:c3:05:69:1f:52:8a:be:98:d2:f9:a9:da:d8:
e9:77:ee:35:75:b5:e4:45:97:5c:33:e6:ff:5a:89:eb:c8:33:
10:25:93:e8:e7:9f:b7:f8:71:25:5b:90:da:50:fe:a4:43:77:
30:93:b8:ac:e8:dd:05:88:93:63:3f:e1:bd:40:ba:fc:c1:30:
a8:be:8f:dc:ce:62:68:21:3b:d7:a4:7f:dd:86:00:8c:27:2b:
4f:99:5e:4c:19:f9:20:40:51:e4:52:b6:6e:3c:ba:5c:a3:97:
f7:b8:33:6c:11:22:ef:09:08:be:4b:b4:a1:38:60:26:85:2c:
a8:90:73:94:2e:75:4c:4b:6e:97:5e:b5:db:ca:71:89:fe:61:
54:33:14:83:3b:74:7c:a5:50:d1:23:f3:a9:96:49:01:66:f4:
75:e3:10:d9:4f:16:d1:0b:7a:9c:13:69:88:8c:28:47:4a:fb:
99:60:4e:2a:25:b5:d0:22:0e:d3:e2:7a:0a:59:5e:26:76:cb:
67:c4:16:10:a0:10:84:b0:e0:1e:52:fd:48:ab:f6:b9:db:4a:
ad:41:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org