Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/805283A86FF311ECA55E1E54C4F9AE02.roa
File: 805283A86FF311ECA55E1E54C4F9AE02.roa (raw, json)
Hash identifier: yhAsGRn6uRi08HhsqLmiiQXOnzIGWm9QxVJDl5hBLKI=
Subject key identifier: 4B:79:4B:4D:C1:27:FD:00:E5:1D:71:3A:37:C4:7E:E2:C5:AF:8A:B7
Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial: 1628
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/805283A86FF311ECA55E1E54C4F9AE02.roa
Signing time: Thu 22 Dec 2022 17:34:17 +0000
ROA not before: Thu 22 Dec 2022 17:34:17 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 23738
IP address blocks: 103.103.240.0/24 maxlen: 24
103.103.241.0/24 maxlen: 24
103.103.242.0/23 maxlen: 24
2401:f9c0:fac0::/48 maxlen: 48
2401:f9c0:fac1::/48 maxlen: 48
2401:f9c0:fac2::/48 maxlen: 48
2401:f9c0:fac3::/48 maxlen: 48
2401:f9c0:fac4::/48 maxlen: 48
2401:f9c0:fac5::/48 maxlen: 48
2401:f9c0:fac6::/48 maxlen: 48
2401:f9c0:fac7::/48 maxlen: 48
2401:f9c0:fac8::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5672 (0x1628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Validity
Not Before: Dec 22 17:34:17 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63a49519-4d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:94:38:1f:6d:32:bb:58:0b:cf:64:a3:f0:
04:52:cf:ef:58:e7:d2:0b:8b:46:33:40:81:4d:8a:
6f:9f:0d:9a:f2:bc:a3:3e:b0:44:40:d5:07:6d:87:
f8:aa:f0:ef:15:f1:79:b4:26:65:63:6d:6a:70:a6:
3f:07:c8:4a:0e:08:23:73:ea:5b:7f:72:a6:f8:7a:
a3:fb:4b:45:44:28:60:a6:70:dd:09:33:1c:bd:cf:
ea:9c:b2:b3:78:01:9b:ed:61:f2:14:01:05:d4:9b:
81:6e:80:1e:a4:7d:97:7a:aa:7b:d0:8a:ca:4e:c7:
f7:fa:7e:1d:88:24:0d:7d:5a:17:0c:62:2c:d0:71:
5e:8c:9a:fa:38:55:e7:d9:31:73:df:60:9d:08:5b:
37:31:8f:ba:ab:a2:54:16:f2:58:a3:d8:37:84:b1:
ce:8f:ea:f4:81:36:72:c4:02:1f:34:01:39:6e:b8:
1e:17:a4:cf:5c:2a:85:24:92:8d:ad:0c:af:0c:b8:
87:02:14:77:bf:62:5b:75:70:de:d9:41:fc:dd:87:
6b:6d:45:f5:94:3d:de:67:77:eb:68:7d:1d:a4:46:
f2:c7:9f:fa:e9:67:11:2e:a6:04:77:2e:f8:ad:84:
09:c2:19:49:1c:f3:d1:15:8b:85:9a:47:12:d5:a6:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:79:4B:4D:C1:27:FD:00:E5:1D:71:3A:37:C4:7E:E2:C5:AF:8A:B7
X509v3 Authority Key Identifier:
keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/805283A86FF311ECA55E1E54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.240.0/22
IPv6:
2401:f9c0:fac0::-2401:f9c0:fac8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:07:0e:cf:14:45:3d:24:03:f6:d8:de:8e:66:37:63:1f:e6:
ce:0a:89:b0:bf:26:20:b0:c3:1d:e6:7d:4b:82:bd:12:1a:08:
7a:aa:30:ab:76:8b:44:c7:ca:6b:64:ac:11:12:3b:94:f3:19:
d7:61:04:ef:e4:47:8d:e8:29:af:44:14:db:07:9b:92:a2:a9:
67:af:af:41:d6:4a:ae:4a:5e:90:a7:2a:e2:9e:bc:99:e4:2e:
86:bc:23:d1:ab:8e:55:c7:48:e4:ed:97:85:f0:4b:fb:a4:94:
55:79:de:04:4d:5f:e7:2e:78:2f:93:95:b4:e5:75:9a:9e:da:
40:4b:5c:f1:e1:69:6a:49:33:1b:02:76:b9:51:69:2c:70:c2:
36:71:e4:15:2b:c5:0d:67:ac:02:0f:e2:7c:32:15:60:ff:b7:
ee:a0:5a:0a:c7:9b:27:56:db:94:7b:75:2b:4b:65:ee:28:8f:
b1:4b:f9:90:47:74:2e:10:04:b8:93:5b:7d:c7:d5:05:21:77:
b2:ec:69:0a:a4:fd:e4:6b:49:16:9a:e5:e3:b0:6d:a3:8d:e5:
1e:3e:42:a1:b5:f9:f3:73:72:bd:a9:7a:8f:bd:32:a9:da:23:
65:a0:05:66:a1:ad:3c:b1:c1:43:21:5e:55:19:5c:6f:2c:4a:
85:59:32:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org