Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/D38562CEE02911ECB5DA272AC4F9AE02.roa
File: D38562CEE02911ECB5DA272AC4F9AE02.roa (raw, json)
Hash identifier: kMMZN/aXR2By7CVyRQBUzNke4QbKXluzaWbHefTZx3k=
Subject key identifier: AE:7D:7C:83:C7:3F:4C:9A:1F:A6:C5:C0:42:47:B3:96:E4:FE:FC:BD
Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial: F7
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/D38562CEE02911ECB5DA272AC4F9AE02.roa
Signing time: Tue 27 Sep 2022 17:44:54 +0000
ROA not before: Tue 27 Sep 2022 17:44:54 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 134529
IP address blocks: 103.35.156.0/22 maxlen: 22
103.35.156.0/24 maxlen: 24
103.35.157.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Validity
Not Before: Sep 27 17:44:54 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63333695-0e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:16:09:cb:99:4c:6f:91:d6:eb:da:dd:0e:
ff:d0:04:e3:26:ce:68:95:73:6c:6c:52:c6:5e:2a:
f1:36:0a:e9:4a:6a:57:e2:20:63:a9:d6:a2:0d:b1:
23:14:b5:cc:cb:67:50:de:45:21:ef:b0:f1:b9:e0:
d7:21:90:cf:bd:de:0b:97:00:cf:8f:c4:48:99:85:
bc:88:d4:22:85:e6:8e:8b:14:46:31:17:20:f4:0c:
1e:a1:23:a8:a1:77:a3:bd:5f:37:57:5e:0b:ba:cd:
7c:2e:f3:7a:11:56:fd:8d:b9:78:86:93:d3:65:d0:
b4:75:fa:46:2e:03:63:df:64:63:10:2f:2a:d0:68:
f8:bf:e4:93:0c:db:4b:6f:18:ae:33:00:35:e2:d6:
54:58:d1:82:e7:c6:7f:b0:7d:36:42:91:e8:0a:9f:
3b:58:c2:63:ed:0b:33:a1:c7:f3:75:d1:73:17:c2:
4d:3d:f7:75:bc:5a:fb:4e:21:e5:4c:d2:1c:e0:0d:
ec:6f:ea:d9:52:63:23:38:a6:72:e3:dd:f9:7c:73:
3d:99:9b:8f:7b:a7:4a:84:b8:17:b3:f0:b0:6c:f2:
da:03:e5:7c:36:88:9b:06:5a:d5:fb:89:59:f5:b0:
9d:c5:12:5c:21:4d:bb:5d:34:58:72:f7:a2:2e:1c:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:7C:83:C7:3F:4C:9A:1F:A6:C5:C0:42:47:B3:96:E4:FE:FC:BD
X509v3 Authority Key Identifier:
keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/D38562CEE02911ECB5DA272AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.35.156.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:ce:24:6d:ce:e9:7d:da:0d:9a:b0:18:ef:03:69:16:9c:e3:
a7:c5:d5:02:bc:18:b3:70:73:54:aa:2b:49:8b:7c:36:30:30:
05:49:13:60:a2:51:82:65:80:ce:04:02:35:79:4e:3e:99:dc:
62:b6:06:10:74:88:92:45:b5:eb:55:ba:d6:6a:f6:a3:08:c3:
e9:f7:0b:2b:bc:12:a2:57:f7:65:70:69:94:18:eb:0b:fb:81:
48:12:d0:f0:64:b4:cd:9e:9f:b7:78:5b:cb:34:6f:fe:5c:ba:
41:37:92:7e:73:76:3b:08:96:66:02:7e:52:e0:9e:b7:b5:cd:
73:82:af:e2:c2:8f:7c:e0:79:ef:10:a6:0f:82:66:d1:6d:e6:
95:1e:57:0b:ea:93:33:79:5a:0c:f9:6a:f1:fd:a0:a4:1a:6e:
c3:ae:d6:f3:fa:47:84:5e:07:78:f9:87:50:11:03:ba:64:b0:
01:2d:54:be:2a:08:25:18:a2:c6:a0:14:35:08:42:01:74:68:
4c:b9:00:d1:59:ff:27:53:ce:ec:7c:4f:19:71:a8:b5:1d:ca:
ac:e8:59:c2:1b:6e:41:33:2c:2a:99:b6:3c:7a:65:25:5f:07:
d3:ed:01:73:6c:24:3a:9f:0a:d2:84:42:d2:22:3e:d0:fb:a4:
14:52:d9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-ams.rpki-client.org