Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05188B84F40311EDA8253225C4F9AE02.roa
File: 05188B84F40311EDA8253225C4F9AE02.roa (raw, json)
Hash identifier: CLTUXJwqx0lWMJYOoQcVixAQDYnnFZ+jVJUpKDd6fhk=
Subject key identifier: 79:DE:4B:69:89:F1:4A:0B:D6:C5:36:A4:ED:A5:EA:F4:4D:07:90:E1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7239
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05188B84F40311EDA8253225C4F9AE02.roa
Signing time: Tue 16 May 2023 16:02:13 +0000
ROA not before: Tue 16 May 2023 16:02:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135260
IP address blocks: 45.250.8.0/22 maxlen: 24
103.219.16.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29241 (0x7239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 16:02:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6463a904-fe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:d6:df:30:55:b1:ec:22:d5:cc:66:65:25:
b2:51:ea:72:19:69:7b:0a:87:52:ea:27:32:49:c5:
6a:9d:2e:61:d9:25:4b:41:28:5d:5c:e6:ee:aa:06:
8b:91:7b:9c:2c:17:49:8e:0e:11:dd:26:0a:76:2e:
bb:34:d0:8a:dd:26:53:0e:fd:d0:2a:d5:b4:23:51:
d1:c3:79:4d:fa:c8:88:0d:13:d6:23:4b:60:01:d2:
22:21:9f:f9:6d:76:72:c4:5b:ca:fe:ba:a0:39:6e:
7e:de:24:77:8d:f2:8a:4e:b5:8d:4b:7f:f1:94:b4:
ce:a7:b7:de:c8:d3:db:66:db:34:28:d0:13:fd:d6:
6e:9d:6e:9b:84:10:4f:f8:07:ec:0e:9f:44:c1:ab:
37:d7:4c:7f:ae:e7:d2:be:c7:23:ef:31:26:20:d1:
06:7e:be:b7:b2:41:06:01:b8:53:1d:90:8c:81:a0:
99:fe:84:cc:21:c5:d1:e7:3a:c7:6f:1e:22:5d:f7:
79:da:00:43:fe:ca:82:2c:b1:50:56:2f:9a:25:e7:
9a:aa:1e:e2:30:6b:8e:a4:19:2a:d2:a7:d9:84:c4:
f7:b0:23:81:3c:7f:2a:57:25:ba:2f:8d:bd:9b:0a:
5a:c7:71:34:43:d7:28:12:42:cb:1a:49:16:53:74:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DE:4B:69:89:F1:4A:0B:D6:C5:36:A4:ED:A5:EA:F4:4D:07:90:E1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05188B84F40311EDA8253225C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.8.0/22
103.219.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:2e:5b:ff:9a:da:18:1e:c0:86:fd:42:65:44:d7:ab:fb:17:
43:0e:4c:59:ed:89:cc:01:41:31:d9:6a:44:87:6f:33:ff:bf:
7d:8a:49:2f:f2:28:0f:1f:ec:98:47:f2:af:23:51:2d:5f:de:
81:c5:d9:2d:7b:0c:9d:82:f3:87:7b:ac:5f:9e:a6:10:63:41:
1f:ae:7b:dd:aa:d4:29:01:af:22:35:8d:a6:15:7d:b3:00:89:
9e:5c:5b:f7:97:a7:4f:5d:7e:4e:48:fa:2a:a6:76:4a:4d:92:
91:83:6a:1c:53:1b:a8:55:1e:63:91:3a:26:1e:0b:5f:b3:a8:
0d:7b:9c:c8:bf:57:f7:9b:52:81:b3:42:54:df:e2:e1:f1:d3:
e2:fe:04:06:3b:79:05:94:59:8a:e2:a1:21:3f:52:d3:45:a2:
d1:86:6f:51:97:e1:1b:12:01:fd:57:81:f6:42:18:31:83:5e:
85:90:14:2f:dd:9b:69:1d:73:13:58:f6:d5:51:21:17:d4:7e:
af:35:2d:17:b8:b9:e5:13:23:0f:c4:d4:2a:f4:26:4d:b8:63:
da:60:3f:92:0a:e1:b0:ea:41:15:8c:1f:a6:6c:fd:4c:06:d9:
21:fa:c8:27:8f:b9:09:ef:3a:aa:a1:57:84:40:75:56:d0:3a:
94:e5:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:50 2023 by rpki-client on console-fra.rpki-client.org