Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/6CA5D7C61F5211EB8671560EC4F9AE02.roa
File: 6CA5D7C61F5211EB8671560EC4F9AE02.roa (raw, json)
Hash identifier: KzFiqcr1cxG6f/dOijJRhBPQ6Fu36y5voGbCWJciSh8=
Subject key identifier: 73:0D:B5:18:44:75:20:F1:A4:2D:79:EC:5B:13:F8:48:22:84:A5:2E
Certificate issuer: /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
Certificate serial: 0956
Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/6CA5D7C61F5211EB8671560EC4F9AE02.roa
Signing time: Fri 02 Sep 2022 20:56:58 +0000
ROA not before: Fri 02 Sep 2022 20:56:58 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 132222
IP address blocks: 103.71.59.0/24 maxlen: 24
103.112.177.0/24 maxlen: 24
103.112.178.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
Validity
Not Before: Sep 2 20:56:58 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63126e1a-735c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:57:ae:66:00:69:ff:bf:4a:cb:ca:82:4f:
08:70:e2:08:39:f4:14:ce:25:f9:84:d8:04:2a:0f:
1c:70:f6:5e:db:43:b5:d4:b9:c9:ab:39:9e:da:85:
52:32:42:f9:e6:89:2c:4d:0d:0f:b2:7b:32:de:99:
fc:d8:54:f8:c0:2a:1d:03:ad:6e:b9:38:1e:0c:87:
b3:8a:85:02:7a:b1:8d:dd:4e:9d:49:50:26:b2:ea:
98:3d:13:4d:46:23:aa:65:00:68:d4:63:60:71:6a:
2d:64:54:b0:f6:e1:8f:69:98:1e:2c:5f:62:b8:aa:
da:a8:61:70:0a:56:bf:66:e3:38:18:eb:6f:92:d5:
93:c5:77:68:48:84:e3:6e:e8:10:8e:c7:bd:b5:03:
b0:7e:54:f6:7a:f6:d7:a4:b6:e6:d9:0c:3f:99:e5:
77:85:15:62:0c:1b:13:47:4b:b2:58:89:db:4b:72:
39:37:dd:f7:dc:22:d5:59:5e:c8:d4:6f:30:27:0a:
1e:a1:8f:71:63:81:4a:12:11:ff:d1:5b:73:b7:7b:
89:0d:d3:d0:2f:84:d2:6e:d7:42:b4:2c:0d:42:43:
4f:d7:f7:d5:53:f5:c5:24:e2:c0:05:dd:18:74:03:
80:0d:73:16:7b:57:9e:3e:6d:a3:6c:d9:5a:db:6b:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0D:B5:18:44:75:20:F1:A4:2D:79:EC:5B:13:F8:48:22:84:A5:2E
X509v3 Authority Key Identifier:
keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/6CA5D7C61F5211EB8671560EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.59.0/24
103.112.177.0-103.112.179.255
Signature Algorithm: sha256WithRSAEncryption
c0:a0:e5:fc:e7:8b:18:5f:47:e3:2f:26:b8:fe:81:38:b7:38:
c0:89:65:cb:3a:24:6b:55:86:e3:3e:99:73:02:2f:98:62:23:
ba:d7:53:ca:6a:25:ab:cd:6e:fa:de:4d:c4:45:dd:6b:dd:13:
9c:e5:59:82:5f:41:d5:5d:22:fa:78:50:6a:e9:d8:af:ed:f7:
00:ac:67:6b:ab:45:14:67:f1:7a:95:b2:d5:ec:d1:58:48:60:
fa:6c:fd:c2:a9:1d:ff:00:db:72:08:59:3e:ea:2e:8c:90:3e:
49:ee:47:07:78:c0:b2:69:0a:7d:4a:75:8a:2d:16:ed:f0:58:
6d:11:e1:59:42:8c:25:3a:8e:86:5b:55:0e:e1:e0:34:7b:74:
90:85:95:41:70:69:fe:79:53:7e:d5:bb:81:81:b6:a5:12:7f:
68:e1:a3:75:e2:a2:90:05:64:1f:b0:c9:8b:77:bf:79:60:4a:
61:9e:e3:77:16:e9:2b:d4:f4:54:b5:ad:1f:8a:18:09:4c:e1:
e5:ff:dc:70:b9:0a:41:91:47:18:28:b8:f9:a2:18:5b:6f:25:
72:b0:3f:a4:bf:c9:c5:94:d9:36:80:79:ca:5b:31:f2:2a:46:
98:76:98:29:d6:fa:88:69:d4:64:99:98:4f:b2:9e:95:8a:8a:
47:c5:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org