Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADDED35C6EB411ECAD77FD3AC4F9AE02.roa
File: ADDED35C6EB411ECAD77FD3AC4F9AE02.roa (raw, json)
Hash identifier: 8GrzYLLHILk9bK2POF55R0qanEPgUUrMLInYgDqlAjY=
Subject key identifier: A6:71:FC:E4:23:9D:16:9A:88:8F:6A:C6:0E:B3:3A:45:17:98:C6:0B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4638
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADDED35C6EB411ECAD77FD3AC4F9AE02.roa
Signing time: Mon 17 Jan 2022 16:11:30 +0000
ROA not before: Mon 17 Jan 2022 16:11:30 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 132346
IP address blocks: 103.13.183.0/24 maxlen: 24
103.15.176.0/24 maxlen: 24
103.179.166.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17976 (0x4638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 17 16:11:30 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61e59532-7fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:23:96:79:94:e3:4e:8a:fa:ae:95:4e:a5:42:
4b:56:31:aa:7b:5b:b0:f0:57:8e:57:ae:1c:bb:fb:
8e:0f:00:30:26:8a:72:a4:8b:6f:2a:17:49:6d:6d:
e7:9a:4e:76:31:1c:d7:2d:89:32:c1:40:d5:06:ba:
a9:f4:3c:e7:18:69:f1:64:70:4c:f2:76:bc:73:87:
c0:e8:2d:ee:d0:67:aa:d7:69:65:b6:94:5b:95:09:
04:d9:db:fb:7c:d9:7c:3e:2a:28:00:ad:5d:69:0f:
d4:81:2e:c7:cc:bc:52:4a:70:21:aa:49:34:f1:b1:
59:b6:40:47:44:73:29:44:f4:79:1e:15:23:4d:a9:
a7:c1:59:38:06:a5:9f:22:7f:53:99:ef:d2:1c:fa:
70:b9:5e:59:a4:7a:e4:52:0a:35:22:0f:51:bb:d8:
dd:15:5a:48:78:5e:bb:f4:f3:a6:21:ac:86:fb:56:
aa:67:80:0a:60:bb:a8:95:0b:e6:25:54:12:e2:7c:
a4:15:b3:53:3a:91:4c:15:0d:5b:5e:ec:24:94:48:
16:09:9a:42:e3:21:44:25:3c:77:09:eb:d5:7a:04:
3b:0e:73:25:09:03:a1:ee:51:45:13:c3:b2:1d:25:
3f:25:4a:47:15:cd:a3:6e:22:b1:2c:9d:32:b8:e5:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:71:FC:E4:23:9D:16:9A:88:8F:6A:C6:0E:B3:3A:45:17:98:C6:0B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADDED35C6EB411ECAD77FD3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.183.0/24
103.15.176.0/24
103.179.166.0/23
Signature Algorithm: sha256WithRSAEncryption
09:de:5e:62:33:1e:c9:66:07:16:66:29:1d:c5:a3:ce:04:0d:
54:63:b6:f2:2e:3e:80:49:90:c9:91:d0:31:39:af:f5:16:5e:
48:7a:7f:c1:0d:da:96:98:ea:44:6e:c6:c7:22:7d:1e:f3:f2:
db:98:55:3f:d5:64:52:86:4f:88:47:3b:68:29:ad:15:0c:29:
15:ef:cb:6e:fc:99:b9:fb:29:4b:bc:c9:49:62:47:f4:f4:76:
d0:9c:47:4f:23:99:be:97:0f:42:bb:39:7d:e8:33:73:67:25:
a4:52:61:0a:1e:ca:98:95:06:37:67:aa:bb:7c:1b:4d:00:56:
ba:43:9c:cf:a5:46:03:8a:21:86:05:0c:da:b8:f2:d5:fd:c4:
7a:ab:2c:3e:c4:51:25:b5:08:81:62:21:38:b2:d1:7d:70:67:
cb:06:76:e1:2b:4f:91:21:56:81:a0:f2:9d:21:55:45:48:a2:
a8:7f:16:df:c8:db:71:f7:4f:af:e5:e6:03:20:32:e9:b0:d0:
d6:e7:d8:ec:3e:cc:87:e4:57:0f:63:bc:7c:65:c4:57:4e:74:
29:2a:bc:b0:cc:4f:6d:47:a5:bb:c0:79:c8:32:ce:fc:8e:79:
fe:2c:c8:80:31:2a:75:2e:af:c3:8c:56:3a:0d:9c:68:52:22:
61:1a:8b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org