Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/0FD66B2A61F011EA91090929C4F9AE02.roa
File: 0FD66B2A61F011EA91090929C4F9AE02.roa (raw, json)
Hash identifier: HUJwHIF+1+544fSMsAU0pKxJeLUhX41hLVQoB/2Vj4w=
Subject key identifier: 49:7B:39:21:A8:87:E2:49:21:CA:04:84:83:08:55:FE:52:EA:35:7E
Certificate issuer: /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
Certificate serial: 079B
Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/0FD66B2A61F011EA91090929C4F9AE02.roa
Signing time: Mon 13 Jun 2022 09:35:49 +0000
ROA not before: Mon 13 Jun 2022 09:35:49 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 45204
IP address blocks: 43.243.160.0/22 maxlen: 22
103.9.88.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947 (0x79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
Validity
Not Before: Jun 13 09:35:49 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62a704f5-5982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:39:86:bc:a6:bd:98:d1:46:61:4a:ad:89:5d:
d0:f4:67:31:63:c0:b8:b3:8e:e0:de:ac:9c:3e:15:
bb:cf:1e:0e:43:e3:bc:17:a6:7e:84:2e:51:2e:89:
da:eb:4f:74:9a:fb:8f:57:50:d4:28:02:b5:39:70:
93:ac:3b:f1:8a:3a:24:d8:98:98:ef:a8:a4:c4:09:
10:92:7f:98:e8:44:8b:4f:34:06:fc:12:d4:c3:5f:
43:65:82:3f:46:4b:9a:49:7c:fc:7f:c1:a8:82:27:
19:52:96:07:b4:32:6b:e0:9e:57:3e:2f:f3:07:7f:
40:d4:f5:94:ba:c5:9d:2f:74:30:49:4c:1b:08:d5:
aa:0c:72:ea:9c:eb:23:cf:1f:a5:83:6f:63:b0:dd:
86:b5:79:26:58:99:60:66:1c:9e:74:ba:f2:a4:fd:
85:bd:02:a9:b9:35:8c:6a:46:65:86:bd:dd:ce:c3:
8b:24:62:4d:c0:11:3f:39:59:c5:88:43:d1:17:ab:
e4:9e:bb:8b:9d:2c:5a:4c:67:3c:6a:19:3d:e4:7e:
bb:67:61:16:c3:b8:7d:c5:f6:11:eb:0e:9b:33:26:
4d:de:d3:ec:0c:0f:94:53:92:dd:13:a5:b5:25:72:
72:a3:1e:df:1b:d4:b1:2c:b5:28:f5:cb:af:57:36:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7B:39:21:A8:87:E2:49:21:CA:04:84:83:08:55:FE:52:EA:35:7E
X509v3 Authority Key Identifier:
keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/0FD66B2A61F011EA91090929C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.160.0/22
103.9.88.0/22
Signature Algorithm: sha256WithRSAEncryption
44:fb:f2:6b:66:50:9e:69:3f:04:cb:4d:76:6c:c3:57:56:eb:
1b:a3:b8:fb:7a:5f:f9:e4:61:6b:15:d6:ab:4a:b9:37:1c:a9:
3b:93:2e:5c:5c:93:21:a4:7f:53:d4:dd:70:19:a6:8a:7b:3d:
32:06:de:e0:4e:e0:10:53:0a:f8:a7:83:d8:68:ed:0f:30:59:
a6:da:90:ba:9a:02:0a:9d:02:65:d3:ac:25:78:13:f1:dc:12:
33:8a:20:c1:5e:5a:01:9a:63:05:7f:2c:6e:f3:33:35:ea:10:
98:1e:21:c2:c8:7c:6e:87:53:77:a9:f4:69:8c:1f:20:b5:9d:
28:d4:f0:fc:26:3b:ac:27:80:77:d5:f3:0f:cf:ef:9c:5b:88:
7b:99:16:9e:14:d8:26:0a:0d:e9:dc:42:f6:09:7f:c7:d4:5e:
47:d7:17:b5:69:3f:60:1d:51:9e:db:a0:cc:b9:7c:47:96:c3:
5d:13:df:d6:a8:b4:4c:ab:a4:e9:f3:84:53:8e:ba:09:d8:dc:
f5:4f:45:a7:21:74:4c:8e:69:4a:0a:1d:97:35:f4:79:60:fc:
ff:b9:ad:30:60:ee:44:07:ea:37:d9:59:de:94:49:ce:8b:cf:
e0:39:f5:65:45:d8:da:dc:56:a3:26:43:8a:75:ec:9e:1d:56:
41:71:99:95
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVBRDAxMTAvBgNVBAUTKDUxNjI5QkVCODBGQkRGOTRFRDlBNjQzRkQ3OEM4MURB
NzNCNkJBMUEwHhcNMjIwNjEzMDkzNTQ5WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmE3MDRmNS01OTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1zmGvKa9mNFGYUqtiV3Q9GcxY8C4s47g3qycPhW7zx4OQ+O8F6Z+hC5RLona
6090mvuPV1DUKAK1OXCTrDvxijok2JiY76ikxAkQkn+Y6ESLTzQG/BLUw19DZYI/
RkuaSXz8f8GogicZUpYHtDJr4J5XPi/zB39A1PWUusWdL3QwSUwbCNWqDHLqnOsj
zx+lg29jsN2GtXkmWJlgZhyedLrypP2FvQKpuTWMakZlhr3dzsOLJGJNwBE/OVnF
iEPRF6vknruLnSxaTGc8ahk95H67Z2EWw7h9xfYR6w6bMyZN3tPsDA+UU5LdE6W1
JXJyox7fG9SxLLUo9cuvVzaKLwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEl7OSGo
h+JJIcoEhIMIVf5S6jV+MB8GA1UdIwQYMBaAFFFim+uA+9+U7ZpkP9eMgdpztroa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUFEMC8yMUZBNUIwNjYx
RUUxMUVBOTI1RDYyMjVDNEY5QUUwMi9VV0tiNjRENzM1VHRtbVFfMTR5QjJuTzJ1
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VXS2I2NEQ3MzVUdG1tUV8xNHlCMm5PMnVoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUVBRDAvMjFGQTVCMDY2MUVFMTFFQTkyNUQ2MjI1QzRGOUFFMDIvMEZENjZCMkE2
MUYwMTFFQTkxMDkwOTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIr86ADBAJnCVgwDQYJKoZIhvcNAQELBQADggEBAET78mtm
UJ5pPwTLTXZsw1dW6xujuPt6X/nkYWsV1qtKuTccqTuTLlxckyGkf1PU3XAZpop7
PTIG3uBO4BBTCving9ho7Q8wWabakLqaAgqdAmXTrCV4E/HcEjOKIMFeWgGaYwV/
LG7zMzXqEJgeIcLIfG6HU3ep9GmMHyC1nSjU8PwmO6wngHfV8w/P75xbiHuZFp4U
2CYKDencQvYJf8fUXkfXF7VpP2AdUZ7boMy5fEeWw10T39aotEyrpOnzhFOOugnY
3PVPRachdEyOaUoKHZc19Hlg/P+5rTBg7kQH6jfZWd6USc6Lz+A59WVF2NrcVqMm
Q4p17J4dVkFxmZU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-fra.rpki-client.org