Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/581D3392147711EC8F43B242C4F9AE02.roa
File: 581D3392147711EC8F43B242C4F9AE02.roa (raw, json)
Hash identifier: oE+uD9cXlPthEKgYmbUjrldVHyMe2byIdV0oO9rOciw=
Subject key identifier: CA:1F:B5:79:25:51:D6:DC:CC:FA:E1:FF:0F:7A:16:CC:55:25:E4:6C
Certificate issuer: /CN=A9130626/serialNumber=54CD681089E7F49552BAEC56A076B1ECF25EFE06
Certificate serial: 0583
Authority key identifier: 54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/581D3392147711EC8F43B242C4F9AE02.roa
Signing time: Wed 02 Feb 2022 19:45:35 +0000
ROA not before: Wed 02 Feb 2022 19:45:35 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 18022
IP address blocks: 103.85.35.0/24 maxlen: 24
160.202.128.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130626/serialNumber=54CD681089E7F49552BAEC56A076B1ECF25EFE06
Validity
Not Before: Feb 2 19:45:35 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=61fadf5e-b83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:3f:48:f1:0e:a6:a6:fe:67:1d:b2:4b:52:
5e:c1:33:5b:29:1a:e6:88:c9:ea:e0:4f:b7:e4:2e:
61:f0:4c:6e:13:de:55:3e:89:f6:0b:82:c4:3f:cf:
77:47:88:b8:df:0b:06:46:c9:3d:a5:e5:04:f5:92:
40:2a:bf:d1:61:26:fa:e2:89:93:34:15:c1:c3:0c:
4e:eb:45:bd:93:e0:8c:ff:a2:37:46:16:41:6a:3a:
6f:0b:d9:12:ee:bc:cc:44:77:25:93:59:95:51:81:
ef:7c:af:3a:e7:46:2f:98:6c:bd:4e:2a:42:88:61:
62:55:10:e8:12:90:34:0a:17:36:15:71:77:1b:d1:
29:96:b0:9b:82:5c:fd:69:f7:39:fa:cc:de:1f:0b:
ac:dd:9d:15:34:c6:8a:4f:0b:64:d4:16:2f:c3:c3:
6c:e1:df:71:3c:ba:d1:bf:b9:a0:52:8f:b3:73:cd:
d7:c9:ff:25:f4:04:dd:55:50:15:84:a8:c2:be:85:
3b:7f:0d:86:65:09:aa:7b:f6:e1:3b:91:3d:87:c0:
82:b9:2d:b7:c4:db:25:b5:8f:47:63:2e:19:0f:a1:
2f:bf:31:ea:58:9f:75:e1:7a:4a:71:98:e5:87:55:
c8:e5:c8:ba:00:0d:db:b1:c5:3e:f6:ad:c2:d1:06:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1F:B5:79:25:51:D6:DC:CC:FA:E1:FF:0F:7A:16:CC:55:25:E4:6C
X509v3 Authority Key Identifier:
keyid:54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/581D3392147711EC8F43B242C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.35.0/24
160.202.128.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:92:bb:de:8e:4f:73:1c:70:53:d5:72:76:15:60:d3:47:a5:
0b:b1:ad:5d:72:b8:db:92:06:59:4b:a4:41:f8:26:f9:ec:81:
2e:b9:b8:9d:f1:20:24:59:21:ee:81:a5:46:32:90:5b:22:fd:
6f:66:23:9e:b2:8c:1f:6f:80:56:73:e0:ab:d3:5d:7e:75:55:
d8:43:2a:4b:19:a7:9c:ec:f3:e1:22:04:84:97:7f:95:c3:de:
b2:73:b8:4f:0d:db:5f:0a:1f:26:2a:c8:99:e5:0c:bf:22:eb:
98:b7:fb:ed:e1:f0:b4:a1:c7:e5:07:1e:21:bd:8f:6c:70:d6:
c9:60:20:50:ea:60:f5:3d:5b:16:74:1a:65:21:76:15:80:d9:
64:33:31:97:a7:b6:6f:8d:e9:63:a2:0e:cb:70:e5:92:df:38:
81:9f:ea:90:de:3a:a2:e9:e0:34:f5:c6:73:54:20:32:81:7e:
b5:b1:ed:9b:02:32:72:cd:67:6e:54:15:c4:13:a6:3a:bf:b0:
1e:76:49:8a:be:8f:31:1e:8e:a0:d9:bd:b2:7c:95:66:40:ea:
41:54:57:a2:df:c7:61:78:07:3f:c9:09:b5:d3:ab:ac:9b:61:
ef:5c:d7:4d:0e:26:43:4b:8e:03:77:a6:4b:af:e6:0f:0f:71:
c9:72:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-ams.rpki-client.org