Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40CC99048FB411ECB3EFDF86C4F9AE02.roa
File: 40CC99048FB411ECB3EFDF86C4F9AE02.roa (raw, json)
Hash identifier: o/ftJ3zYuO/SWKyVDScyxJZIJLLJXoziyBjKqIAE6pA=
Subject key identifier: 1F:5F:9A:E9:DF:51:0F:90:90:D4:8B:DF:EE:C0:45:E5:76:FA:70:FE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 55A0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40CC99048FB411ECB3EFDF86C4F9AE02.roa
Signing time: Thu 19 May 2022 11:31:49 +0000
ROA not before: Thu 19 May 2022 11:31:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135175
IP address blocks: 103.77.154.0/24 maxlen: 24
103.77.155.0/24 maxlen: 24
103.200.72.0/24 maxlen: 24
103.216.145.0/24 maxlen: 24
103.216.146.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21920 (0x55a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 19 11:31:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62862aa5-ca3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:b3:83:b8:df:87:be:89:0f:07:d0:5b:07:
ac:6e:1d:60:53:2a:ab:8a:99:3b:e2:47:f0:5b:10:
d8:3b:b5:f5:a9:50:25:22:67:60:ee:4c:cf:72:7b:
39:c7:d7:15:b1:67:fa:f4:63:78:79:c1:46:03:f4:
58:45:67:15:73:a5:07:92:8f:e4:15:37:ad:fe:15:
ef:c7:84:0e:a3:1d:5f:25:0f:09:de:1f:5f:f3:5b:
2e:92:ae:9e:2d:dd:2c:5d:11:ab:66:d2:bd:f0:6b:
20:a3:c2:1f:f5:fb:f8:9d:52:59:2e:6b:fb:f8:df:
2e:1a:f4:f4:a5:b5:4d:0d:2d:53:66:a0:3f:37:dd:
5c:71:e8:7c:29:6a:e7:7c:c6:f0:27:d6:87:36:c6:
2a:36:8f:68:62:f1:91:b0:ed:18:96:7e:f3:30:33:
3b:94:54:65:be:96:f4:70:93:9d:f3:16:5b:2a:dc:
da:ff:6b:b9:cc:70:17:ca:7c:e9:d4:ab:6e:30:f9:
9d:e9:e8:f6:17:80:bc:21:91:6c:66:85:66:1c:c8:
20:29:59:ac:0d:9c:74:70:02:fb:82:7d:fc:04:7a:
4f:1b:0a:38:cb:e3:35:9a:f9:db:2c:8c:1a:7c:a5:
2e:f9:9d:7e:8b:e9:c9:85:a6:b0:b1:d0:a1:64:23:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5F:9A:E9:DF:51:0F:90:90:D4:8B:DF:EE:C0:45:E5:76:FA:70:FE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40CC99048FB411ECB3EFDF86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.154.0/23
103.200.72.0/24
103.216.145.0-103.216.146.255
Signature Algorithm: sha256WithRSAEncryption
84:da:40:d5:dc:d9:eb:1a:f5:22:0c:de:e0:d0:ac:e7:7d:43:
56:04:fd:08:78:fc:c4:89:65:03:29:21:e3:c8:84:62:32:e3:
09:65:c6:fb:dc:75:b7:a8:fa:de:8e:a5:79:0d:37:bc:bc:c9:
d6:88:71:a0:59:3f:a9:a8:9a:cc:0d:2e:6c:4b:85:f9:54:bc:
25:1b:44:3f:ff:b3:3e:78:fa:b6:e3:24:61:07:94:0a:8a:94:
91:a6:59:7d:63:6d:7e:b3:d6:17:22:ff:74:6e:37:b8:df:25:
09:61:5c:59:53:7f:e7:fc:37:8f:83:1a:f9:75:b2:00:eb:72:
e4:51:68:73:72:dc:1d:1c:b1:de:1d:64:fc:57:2e:64:dd:f8:
1e:2d:06:f0:1e:b5:bb:20:92:70:0e:dd:f4:fb:a6:98:3b:74:
07:ce:32:90:91:f0:59:38:f3:05:8c:d1:d9:c1:2c:f8:eb:46:
64:d5:df:b1:10:79:ac:37:d3:67:75:04:21:3f:35:28:c8:71:
fa:b0:bf:dc:32:ba:4c:14:dd:90:60:f2:81:c1:cd:43:5a:5f:
14:70:77:55:42:08:fd:dd:13:88:18:63:39:26:e8:7c:50:2d:
24:b8:fc:6c:4f:cc:26:7e:2c:a8:24:9a:4d:5c:df:ea:b5:79:
62:11:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-fra.rpki-client.org