Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/319A31145FDE11EB8D765981C4F9AE02.roa
File: 319A31145FDE11EB8D765981C4F9AE02.roa (raw, json)
Hash identifier: mr/ie9smM6LgeT3qTKkOxIIZzxh2QJP0+BgrJ8JdZMQ=
Subject key identifier: 5F:B4:19:DA:41:AA:8A:9E:27:4F:1E:0B:E8:80:37:AD:0B:6E:06:F9
Certificate issuer: /CN=A91721E1/serialNumber=D3E87899EB2EB878CD70FA724550CFF2A96C2362
Certificate serial: 0566
Authority key identifier: D3:E8:78:99:EB:2E:B8:78:CD:70:FA:72:45:50:CF:F2:A9:6C:23:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-h4mesuuHjNcPpyRVDP8qlsI2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/319A31145FDE11EB8D765981C4F9AE02.roa
Signing time: Fri 01 Jul 2022 23:09:14 +0000
ROA not before: Fri 01 Jul 2022 23:09:14 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 137445
IP address blocks: 103.95.30.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91721E1/serialNumber=D3E87899EB2EB878CD70FA724550CFF2A96C2362
Validity
Not Before: Jul 1 23:09:14 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62bf7e99-0f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:ed:70:b3:6f:ab:9c:9d:b2:08:be:3d:87:
9b:a1:eb:4c:66:1a:3e:4a:21:a7:e4:e8:4a:56:aa:
0e:78:49:30:c5:f2:7b:0e:73:59:ea:34:98:26:f4:
c0:e3:5b:cf:0f:fb:97:76:2a:78:d9:8f:f7:b0:53:
c3:43:51:a3:be:c7:67:db:16:b0:9e:62:ae:a6:94:
33:a0:55:aa:d7:d8:07:c7:ee:66:a3:4f:4f:9e:2a:
fa:a0:08:bb:66:73:1c:83:8d:25:af:09:e1:0d:db:
96:0b:9b:ed:ba:20:dd:7d:05:71:c0:46:d4:fc:66:
d9:14:32:ce:0b:ed:8c:6d:dd:4e:43:37:81:2c:20:
29:12:77:7f:0e:a8:44:2f:12:82:59:31:6f:5f:f2:
98:7f:48:dc:78:49:33:9d:f1:33:bb:0f:0b:9d:d1:
a9:8e:16:26:84:25:b4:0b:42:27:20:0f:e9:19:26:
a5:bf:7e:e1:e0:e3:aa:9f:ab:ee:3e:98:32:33:60:
2e:b9:7d:24:2d:00:d8:f5:15:bc:4a:c1:5f:c3:4e:
2f:30:c4:66:88:c5:44:03:a8:22:04:8d:7a:70:e6:
26:0d:74:f0:a8:6f:73:e9:a7:5d:0c:fc:42:03:9f:
80:4a:2e:17:9c:95:c8:5f:af:94:29:93:68:b2:cd:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B4:19:DA:41:AA:8A:9E:27:4F:1E:0B:E8:80:37:AD:0B:6E:06:F9
X509v3 Authority Key Identifier:
keyid:D3:E8:78:99:EB:2E:B8:78:CD:70:FA:72:45:50:CF:F2:A9:6C:23:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/0-h4mesuuHjNcPpyRVDP8qlsI2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-h4mesuuHjNcPpyRVDP8qlsI2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/319A31145FDE11EB8D765981C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.30.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8e:ba:a0:5b:12:5e:33:d6:6e:51:71:c7:82:a5:82:88:8b:
99:93:76:f4:ca:1b:6b:95:36:9b:01:96:dc:10:ad:3e:70:58:
26:ae:01:9e:af:fe:4a:51:fb:bc:b8:b6:1d:b8:2b:8d:e7:63:
73:2c:6f:ed:05:1e:78:59:38:3e:36:d6:dd:e0:6f:a1:a3:f4:
a3:ec:18:cb:54:07:49:d1:cd:47:d6:0b:00:0b:55:86:a6:c5:
00:19:a9:1e:b4:c7:c7:5a:8e:9c:20:f3:e6:c8:a6:1e:c5:76:
2e:f5:93:64:f1:14:14:b9:52:71:22:9c:60:e0:9a:40:f8:05:
5a:c4:2d:f9:f0:95:85:5b:f7:55:20:cc:58:24:ed:2b:02:45:
27:34:d1:5a:0a:92:76:05:8f:cf:a8:3f:96:45:af:0b:23:66:
18:0d:3b:47:df:10:bc:0d:d2:df:5c:1a:7b:15:8d:c5:93:91:
24:a1:23:01:c6:d5:fc:c6:f0:d8:5f:a5:35:31:e6:00:a6:b7:
1c:de:c8:8d:c4:d4:50:9f:8a:e9:bd:1a:5b:51:5e:7b:ac:26:
74:25:bc:18:fe:b3:e6:8a:6c:9a:85:be:00:8c:f8:c6:09:f2:
7e:56:5d:22:17:da:b3:1b:11:da:6a:97:48:a6:e9:a7:2b:17:
d3:70:5a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-fra.rpki-client.org