Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/354B6C22476611EC81E6E658C4F9AE02.roa
File: 354B6C22476611EC81E6E658C4F9AE02.roa (raw, json)
Hash identifier: QmKmzNGWy/VnNcl412IUh5Nk3QB4kx6yFboqOqKttPY=
Subject key identifier: 16:41:3B:9E:99:DB:D1:7C:72:CB:32:6A:4A:17:1E:40:2A:5B:F6:27
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 457C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/354B6C22476611EC81E6E658C4F9AE02.roa
Signing time: Fri 07 Jan 2022 07:51:23 +0000
ROA not before: Fri 07 Jan 2022 07:51:23 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 133717
IP address blocks: 103.41.236.0/22 maxlen: 24
103.170.214.0/23 maxlen: 24
103.173.240.0/23 maxlen: 24
103.175.134.0/23 maxlen: 24
103.175.190.0/23 maxlen: 24
103.177.82.0/23 maxlen: 24
103.177.112.0/23 maxlen: 24
103.177.204.0/23 maxlen: 24
103.178.126.0/23 maxlen: 24
103.199.176.0/22 maxlen: 24
111.125.214.0/23 maxlen: 24
111.125.238.0/23 maxlen: 24
111.125.246.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17788 (0x457c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 7 07:51:23 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61d7f0fa-9c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:2a:3f:b1:be:f8:b9:55:cd:ab:43:37:4b:
69:12:75:69:66:e3:ec:bd:aa:56:13:b4:34:a7:47:
3b:a6:44:66:91:f3:fb:aa:4e:ad:e6:07:32:ba:77:
e8:ad:92:55:12:c0:4f:7b:b0:5c:cf:73:47:fc:65:
bc:ad:d6:0b:07:c5:e3:50:1c:97:32:0f:bb:b9:71:
38:a4:38:03:46:73:68:9c:47:c9:c8:18:a4:ba:e9:
0a:29:9d:99:f7:f5:ef:7e:0d:28:c3:06:2c:67:85:
72:2e:de:76:9d:87:16:dc:b2:e9:77:ba:87:51:a2:
42:99:9a:90:79:5c:c6:6a:ef:00:9a:41:ce:a0:7d:
b9:05:87:b3:a5:c8:10:86:99:3e:c8:5d:b4:60:44:
46:43:7a:66:79:b7:c6:88:8a:e0:0a:48:67:8a:99:
c6:f2:48:6d:7d:b2:e1:8a:70:c8:85:bc:a1:fe:c8:
ad:c3:b7:71:00:d9:89:2d:79:9f:31:05:0b:68:1c:
2d:29:47:53:31:fe:3c:58:f2:26:83:db:68:46:1c:
41:f4:76:44:3c:30:73:e7:88:8d:d7:f5:10:b8:9f:
ab:78:21:3c:8c:a1:03:d5:9b:b3:9a:78:c6:37:77:
e1:e1:84:bb:70:56:c8:be:c0:1a:c9:28:83:ab:bc:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:3B:9E:99:DB:D1:7C:72:CB:32:6A:4A:17:1E:40:2A:5B:F6:27
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/354B6C22476611EC81E6E658C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.236.0/22
103.170.214.0/23
103.173.240.0/23
103.175.134.0/23
103.175.190.0/23
103.177.82.0/23
103.177.112.0/23
103.177.204.0/23
103.178.126.0/23
103.199.176.0/22
111.125.214.0/23
111.125.238.0/23
111.125.246.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:f8:6a:15:b3:44:b3:e0:ee:c1:8a:e2:5d:50:a3:19:cf:82:
06:9e:97:0c:be:ca:61:8e:4a:54:41:3f:ba:b3:0e:4a:4c:c4:
bc:c0:80:b9:50:f6:72:fb:44:b9:ff:10:ec:03:22:6a:5e:70:
57:92:cc:21:ba:dd:2e:ee:5c:4b:d7:f2:4d:a5:c0:6d:8e:94:
75:06:b3:24:0d:d9:5c:de:86:48:95:ab:00:5d:0c:12:84:24:
01:36:87:a2:c9:84:60:a9:fb:a3:e3:35:4e:ab:33:a0:55:dc:
90:bd:0a:5d:3d:93:9b:c5:87:94:e3:0c:a7:86:46:b8:85:15:
fa:c5:ac:91:fa:f9:21:5e:25:71:0e:ba:5e:06:17:9c:a2:cc:
e5:65:0a:c0:15:94:12:d8:0b:60:75:4f:a5:77:89:e3:0a:ce:
3d:03:18:ac:a5:54:0f:f6:a5:fd:c0:3e:21:05:9d:0f:c6:b4:
8b:4a:2c:bb:2e:25:b6:f2:1e:88:b9:3b:1e:d6:4b:6d:58:17:
e9:2b:44:18:b5:56:b7:51:78:f7:6a:2c:86:c7:ae:a1:90:cc:
e0:44:e8:71:25:2f:f6:75:09:a7:79:f8:4f:a3:be:40:ea:d7:
57:04:00:02:ba:1f:d6:6f:36:9a:09:01:bb:aa:7c:70:8e:6c:
fa:d7:5f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-fra.rpki-client.org