Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAF058604CE711EC94ECAC79C4F9AE02.roa
File: CAF058604CE711EC94ECAC79C4F9AE02.roa (raw, json)
Hash identifier: uggoSmHRZtb7TkLEakP4FAIlcjIXLga4WNZSnm9yc68=
Subject key identifier: 2B:51:1E:4F:1E:4D:A3:50:1F:23:36:40:1B:2D:2B:FE:74:A0:DE:A0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 41EF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAF058604CE711EC94ECAC79C4F9AE02.roa
Signing time: Wed 24 Nov 2021 05:31:37 +0000
ROA not before: Wed 24 Nov 2021 05:31:37 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 135858
IP address blocks: 103.79.116.0/24 maxlen: 24
103.144.116.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16879 (0x41ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 24 05:31:37 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=619dce39-6a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:cb:71:65:8b:07:79:65:e0:04:ab:5d:d6:
62:99:25:7a:3c:f5:e4:de:0c:9c:d0:88:4d:ac:9c:
39:ef:d4:f2:33:ce:e3:48:05:b1:53:70:a2:c2:ef:
12:1f:f3:af:56:56:a5:4d:1c:5f:cc:41:f1:5b:dc:
fd:0a:fa:b5:c0:93:89:89:1b:57:8d:0f:0e:4f:e6:
da:eb:a7:e2:25:46:d1:df:46:b0:e3:49:92:e7:22:
cd:97:52:89:47:a5:45:71:54:02:f2:bd:d4:e1:21:
89:04:1a:86:96:a4:a2:e7:6b:1a:14:5b:5b:a8:47:
f2:15:dd:a1:8b:05:2c:40:4a:fb:23:52:0b:d4:c6:
16:da:b3:1c:69:3d:91:5e:4a:a2:c3:e9:04:d4:c4:
b1:6a:74:9f:ef:13:a2:6f:2d:63:bf:fe:c8:bc:db:
a5:17:dd:6c:f6:dc:85:5b:a0:5f:68:f7:08:a1:e8:
c0:bf:ee:22:d7:26:63:7c:83:49:16:e6:60:94:81:
97:d5:b4:ea:3e:77:4f:87:ed:4d:dd:56:05:d2:ea:
9b:31:f4:f1:d1:c0:43:c3:1a:31:53:14:59:0e:8d:
fb:53:fa:04:eb:c4:6a:2a:31:59:6f:9a:a9:61:5a:
b0:d7:b1:b9:c9:10:71:e4:6c:51:19:e0:2f:e5:d5:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:51:1E:4F:1E:4D:A3:50:1F:23:36:40:1B:2D:2B:FE:74:A0:DE:A0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAF058604CE711EC94ECAC79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.116.0/24
103.144.116.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7f:24:58:34:29:2e:7a:cf:ee:cc:8b:5b:4e:ba:9b:7f:de:
1b:07:6e:9f:08:b6:0f:74:73:1f:71:2e:8b:5e:25:d5:01:b8:
21:6b:05:07:af:5c:83:7d:1e:48:2e:40:a0:20:4e:35:83:94:
05:64:8a:d9:5b:01:12:38:d2:bd:e2:53:49:09:f3:b0:eb:c7:
2d:fc:58:1f:d2:e9:25:22:b2:8c:3f:34:d2:84:ac:1a:a0:ea:
a2:16:d9:ee:ef:a9:f4:d7:d1:d6:3a:46:0f:95:74:ee:7e:57:
25:85:71:ab:9d:a3:cc:c7:c3:1b:cd:5f:92:3a:c1:f9:0e:38:
51:d9:99:7c:2f:08:71:31:35:8b:3c:12:92:79:93:9c:95:7b:
0a:b3:7a:24:d6:5e:c4:fd:03:03:a6:5f:e0:ad:dc:3b:3b:0c:
a1:d3:65:11:89:af:c6:2b:aa:55:a7:b6:79:3b:a1:1d:92:cb:
09:90:27:0e:54:43:73:4c:df:0b:bf:40:a9:78:89:94:14:d4:
85:2a:66:6e:47:53:f6:79:49:c7:a7:03:55:72:34:5e:e8:05:
7b:e6:bf:d9:75:30:d6:87:23:af:30:dd:b7:da:90:b6:88:34:
f5:59:5a:9f:73:12:d4:ef:83:fe:8e:ee:83:03:40:26:59:c7:
e3:ab:d6:2c
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICQe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjExMTI0MDUzMTM3WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTlkY2UzOS02YTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcbLcWWLB3ll4ASrXdZimSV6PPXk3gyc0IhNrJw579TyM87jSAWxU3Ciwu8S
H/OvVlalTRxfzEHxW9z9Cvq1wJOJiRtXjQ8OT+ba66fiJUbR30aw40mS5yLNl1KJ
R6VFcVQC8r3U4SGJBBqGlqSi52saFFtbqEfyFd2hiwUsQEr7I1IL1MYW2rMcaT2R
Xkqiw+kE1MSxanSf7xOiby1jv/7IvNulF91s9tyFW6BfaPcIoejAv+4i1yZjfINJ
FuZglIGX1bTqPndPh+1N3VYF0uqbMfTx0cBDwxoxUxRZDo37U/oE68RqKjFZb5qp
YVqw17G5yRBx5GxRGeAv5dUgmQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCtRHk8e
TaNQHyM2QBstK/50oN6gMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0FGMDU4NjA0
Q0U3MTFFQzk0RUNBQzc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnT3QDBABnkHQwDQYJKoZIhvcNAQELBQADggEBADV/JFg0
KS56z+7Mi1tOupt/3hsHbp8Itg90cx9xLoteJdUBuCFrBQevXIN9HkguQKAgTjWD
lAVkitlbARI40r3iU0kJ87Drxy38WB/S6SUisow/NNKErBqg6qIW2e7vqfTX0dY6
Rg+VdO5+VyWFcaudo8zHwxvNX5I6wfkOOFHZmXwvCHExNYs8EpJ5k5yVewqzeiTW
XsT9AwOmX+Ct3Ds7DKHTZRGJr8YrqlWntnk7oR2SywmQJw5UQ3NM3wu/QKl4iZQU
1IUqZm5HU/Z5ScenA1VyNF7oBXvmv9l1MNaHI68w3bfakLaINPVZWp9zEtTvg/6O
7oMDQCZZx+Or1iw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org