Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB8717DC87E311EC95236C3FC4F9AE02.roa
File: CB8717DC87E311EC95236C3FC4F9AE02.roa (raw, json)
Hash identifier: 3Wvwa2f0QxkeT6decMGKVHDKCN7ukNn1spbGR59mH38=
Subject key identifier: 80:32:EA:40:A9:0B:50:C4:03:89:CA:1E:F6:BF:79:CE:AC:CE:95:74
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 541A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB8717DC87E311EC95236C3FC4F9AE02.roa
Signing time: Mon 16 May 2022 04:28:26 +0000
ROA not before: Mon 16 May 2022 04:28:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147194
IP address blocks: 103.177.114.0/23 maxlen: 23
103.180.4.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21530 (0x541a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:28:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d2ea-2554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:ed:8c:d0:36:e7:f8:13:99:29:1f:8b:03:
97:c0:52:8d:b9:a4:e0:cb:0e:d0:7c:e8:af:1f:db:
c2:af:6f:8b:c0:de:38:44:cd:65:7e:4c:ae:e4:6d:
69:bc:19:c9:ec:14:44:03:ac:a1:60:02:2e:76:e6:
2f:d0:c5:00:16:bb:f7:9c:87:6c:af:67:cb:c7:07:
93:39:b3:fe:5e:90:84:eb:40:d4:25:5e:d8:31:49:
ae:56:a5:08:d6:32:e6:c3:c7:f8:4b:ad:45:b6:d1:
7b:2b:68:20:7f:b8:6c:92:ea:90:d4:e0:2d:6e:24:
94:aa:1f:7d:42:7b:6b:7b:8b:54:b1:ea:34:05:2b:
3b:2a:30:40:4c:0c:e0:80:bb:5e:52:eb:a0:25:3e:
72:5b:25:98:af:7a:32:11:f2:bb:73:9b:c5:2c:20:
26:a9:83:ad:4c:d9:4a:14:19:95:b7:d1:e0:b8:fa:
97:6d:9d:a7:a7:81:73:5a:20:68:41:79:4a:60:e8:
08:19:bf:d4:31:48:9f:c4:aa:9e:c2:d5:4d:5e:56:
09:b8:ad:82:f5:c6:ac:d5:9a:95:dc:08:77:e3:e8:
86:a2:42:b6:bc:05:0b:72:c4:04:2b:9a:80:5d:d1:
94:ad:1e:fc:62:1d:58:c4:75:f7:6c:ce:c3:66:43:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:32:EA:40:A9:0B:50:C4:03:89:CA:1E:F6:BF:79:CE:AC:CE:95:74
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB8717DC87E311EC95236C3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.114.0/23
103.180.4.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:ff:e1:53:e7:c9:0b:12:a7:7d:9b:5d:9e:a8:bf:11:64:f8:
34:ba:48:f6:7f:9e:d5:8b:96:a2:56:e1:d8:f4:46:03:9c:e2:
d1:46:de:b3:a3:01:38:c1:c5:6c:1f:c2:38:42:0f:be:b4:b6:
4d:9c:01:7f:4e:5d:55:b2:a7:41:02:58:26:4e:d9:d1:f0:07:
6f:5b:5d:bd:79:c0:51:0f:db:61:7d:e8:59:3d:2e:ea:6b:b9:
c8:66:63:d7:9c:08:4a:2c:d1:45:6c:0a:8f:d5:e1:f1:77:7f:
e7:3b:33:d2:02:e0:5d:99:c4:c2:a4:45:62:a7:e7:27:c2:12:
94:d2:c0:c5:76:2a:ed:23:f1:b5:2c:99:74:03:03:3a:dc:f7:
e5:cd:cf:06:47:36:97:b4:42:fd:0b:c4:4d:c4:82:e6:3e:fa:
fd:84:58:85:ce:d8:49:45:8c:8f:f0:3d:df:25:e2:2f:d7:3f:
f4:5f:9b:57:e4:34:d3:a3:a4:54:bb:07:cf:95:65:72:c1:24:
4e:c5:74:c1:04:4c:0e:fb:eb:01:5f:ad:20:00:a8:2c:16:9c:
85:c7:b6:56:88:70:f4:18:79:c0:a6:5d:bc:1e:db:4f:ae:23:
af:9b:a9:af:d9:16:26:c4:e6:9f:ed:48:35:b9:a9:6d:72:6f:
aa:56:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org