Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/A595C7AA1EF111EBAB2E146AC4F9AE02.roa
File: A595C7AA1EF111EBAB2E146AC4F9AE02.roa (raw, json)
Hash identifier: 9EbbOgScKgJ4MoamfckfN07hBBbkDXscoiKbdY46x18=
Subject key identifier: 40:2A:11:BB:E4:F4:DA:44:0F:14:29:87:AF:D4:05:AD:69:52:E0:01
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 25D4
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/A595C7AA1EF111EBAB2E146AC4F9AE02.roa
Signing time: Sat 01 May 2021 04:11:42 +0000
ROA not before: Sat 01 May 2021 04:11:42 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 58443
IP address blocks: 103.227.30.0/23 maxlen: 24
103.248.191.0/24 maxlen: 24
103.255.248.0/24 maxlen: 24
103.255.249.0/24 maxlen: 24
2400:7180:1::/48 maxlen: 48
2400:7180:5::/48 maxlen: 48
2400:7180:a::/48 maxlen: 48
2400:7180:110::/48 maxlen: 48
2400:7180:111::/48 maxlen: 48
2400:7180:120::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9684 (0x25d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: May 1 04:11:42 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=608cd4fe-e770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:4b:4c:ca:e9:2b:fd:1b:1e:fc:9c:d1:0a:
9e:c6:c9:fd:25:f3:a6:42:4f:f1:12:e4:6a:98:e2:
2c:4c:6a:0d:88:f3:5f:be:34:e4:17:27:17:51:bf:
b7:3e:ca:e9:f7:ba:9d:dc:93:53:16:ac:14:7d:0b:
af:11:83:a5:5d:68:9c:28:0a:cd:dc:60:88:1b:3d:
a9:47:4c:79:8e:72:f4:d8:6d:31:1b:ee:45:a8:8e:
7b:13:ef:a2:d8:88:ca:18:88:8f:50:3d:04:f7:01:
c2:44:be:34:98:26:02:a4:df:ee:e0:f9:8f:b3:3b:
26:df:d6:f9:ae:ca:85:0b:3a:79:4c:ef:20:2b:d2:
3a:51:f5:13:94:e2:99:6d:6c:45:9e:9c:d9:18:be:
76:39:78:89:14:b1:d7:37:87:d8:a4:a3:99:14:72:
b4:5d:ae:f3:15:8f:f6:35:15:1f:2e:af:91:d8:e9:
3a:2c:6d:38:b9:34:ec:96:80:0a:8a:81:98:e8:52:
56:30:3f:23:9e:f5:3b:cf:d4:57:00:29:6f:fd:69:
24:ab:67:df:65:a5:d3:d9:fd:d4:c8:0f:58:b4:e2:
9a:9e:09:41:9e:29:2e:c4:57:31:82:70:ce:79:36:
1d:7b:4f:a5:d0:80:cd:ab:d2:b2:fc:13:54:81:92:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2A:11:BB:E4:F4:DA:44:0F:14:29:87:AF:D4:05:AD:69:52:E0:01
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/A595C7AA1EF111EBAB2E146AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.30.0/23
103.248.191.0/24
103.255.248.0/23
IPv6:
2400:7180:1::/48
2400:7180:5::/48
2400:7180:a::/48
2400:7180:110::/47
2400:7180:120::/48
Signature Algorithm: sha256WithRSAEncryption
58:27:78:97:8e:1d:d8:df:95:0a:8f:b9:26:b9:bf:9d:4a:ff:
ff:1e:0a:74:87:c4:7a:72:c8:83:14:9a:37:da:c8:c7:0a:97:
60:ab:e9:28:c1:7b:ce:17:12:88:ec:7d:49:07:33:cd:b1:12:
15:0c:74:40:54:8b:6a:a2:6d:0a:54:37:b7:1f:67:c0:f4:a3:
85:0f:7a:8b:48:5c:57:85:c0:e1:c0:f4:b1:2d:d8:1d:be:3a:
f0:3a:7e:ef:6d:78:fb:a9:65:6f:a8:fe:45:4c:86:ab:3f:6f:
64:33:5e:b1:d1:78:1f:7c:eb:60:a7:ff:07:04:3b:e5:8b:d4:
f2:8c:55:60:54:7e:45:3a:7d:74:c8:2e:dd:b7:de:00:c6:dc:
5c:e9:d4:e8:96:b4:87:73:bc:6b:4c:b9:21:26:18:80:f5:1d:
a4:56:67:23:45:5d:83:24:5e:45:04:ed:6a:0f:34:9a:cd:94:
be:05:01:01:29:b4:c6:b8:ee:1c:80:e3:04:6f:13:f6:84:79:
1c:99:71:db:6e:6d:73:c1:d1:97:6e:15:ac:34:c0:77:e7:25:
22:9f:ce:0a:35:78:18:f8:49:63:4b:7b:2e:91:fd:a8:4d:6d:
ef:3f:e7:93:b1:a8:f1:fe:b2:8c:11:a8:76:6d:f8:f6:11:86:
b9:b9:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org