Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC1A512A992511EBA2596F21C4F9AE02.roa
File: DC1A512A992511EBA2596F21C4F9AE02.roa (raw, json)
Hash identifier: D026I8XjhSsjqrb0pW7qVpxWnGA4TOoS68KVoBlE5D4=
Subject key identifier: 2A:AF:6B:E6:E4:90:27:C7:43:88:CF:41:99:23:A8:AC:F0:18:26:2F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4F75
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC1A512A992511EBA2596F21C4F9AE02.roa
Signing time: Mon 16 May 2022 04:06:13 +0000
ROA not before: Mon 16 May 2022 04:06:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133972
IP address blocks: 103.51.32.0/22 maxlen: 24
192.140.228.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20341 (0x4f75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:06:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281cdb5-3750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:a7:da:fd:33:57:5e:55:30:80:1c:f0:bb:
8c:a6:ca:82:f2:db:da:c7:d2:2a:1e:86:72:d9:ce:
5c:1c:63:50:d0:36:e6:31:0e:ca:70:5c:79:73:ef:
bd:4e:64:c6:59:34:e4:1f:1d:1c:98:38:90:ac:52:
fd:f1:74:01:5c:9a:6e:43:05:89:f7:64:82:42:74:
e6:a2:4a:f4:91:b1:0b:70:e8:5f:6a:8a:9e:74:25:
ea:8e:a6:b7:73:92:55:44:96:a1:a1:36:9e:d0:f6:
4e:81:cb:15:13:8b:88:f9:d4:da:40:4f:31:65:5e:
71:79:8a:5e:a6:be:25:94:0e:68:b7:26:fc:3d:70:
b2:44:c3:cd:ee:d9:01:68:01:1b:7b:98:73:79:59:
f0:19:a7:84:1e:49:10:16:1f:35:d8:16:2f:b2:e7:
aa:11:66:3c:82:bb:2c:9d:ce:33:be:02:a2:6d:08:
01:16:a1:35:39:53:ce:30:6d:c1:ea:fd:a9:f5:ca:
31:5e:d4:00:e7:ee:cd:7d:e2:34:e8:19:b8:7f:82:
72:b9:db:10:05:a2:f2:6b:26:4a:ef:8d:e1:7d:2c:
5c:63:df:00:9c:3f:f8:bb:7e:b4:f7:44:29:4c:d1:
75:bd:c8:15:93:d4:32:a3:49:6c:79:29:a6:50:a6:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AF:6B:E6:E4:90:27:C7:43:88:CF:41:99:23:A8:AC:F0:18:26:2F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC1A512A992511EBA2596F21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.32.0/22
192.140.228.0/22
Signature Algorithm: sha256WithRSAEncryption
59:78:29:dd:86:37:d2:64:b0:54:83:37:c9:ff:85:8c:2a:94:
66:53:d6:f1:97:57:69:d7:1a:0e:ab:01:7e:ae:c5:98:17:a0:
2f:4a:79:0d:3a:4e:29:d8:35:fc:a8:ac:06:81:4d:43:ad:d1:
ff:1a:e2:30:ff:ca:96:be:b5:cd:28:7d:c4:33:5a:75:53:62:
2a:cd:3b:cd:a7:09:20:c0:7e:99:38:f9:36:ff:f4:9b:2e:97:
d8:7e:0d:c4:c8:89:47:dc:d0:8b:35:8f:00:3e:1b:b1:65:60:
0c:f8:20:21:7a:bd:dd:39:ac:e2:7e:b2:6f:73:91:b5:55:bb:
0c:da:2d:d9:a4:04:9c:a8:e2:74:f1:a2:bb:70:4a:c8:04:2e:
85:bc:54:b1:11:5c:7f:35:c0:11:df:c9:e4:68:a0:62:15:05:
49:89:80:60:46:c6:07:e4:21:0b:8f:f1:59:8b:52:e4:de:23:
80:e2:cb:67:55:a3:63:20:1b:ed:16:8d:07:0f:4f:dc:e9:56:
cd:22:93:d9:bb:91:48:6b:7d:f4:e6:e9:e5:9e:7e:8a:5f:cc:
3a:8e:09:ac:76:f5:aa:f3:ac:cb:cc:b7:d4:9e:bc:c4:03:b4:
d1:86:b7:41:49:e8:00:06:17:3a:8e:c4:37:a4:9e:6e:a6:52:
61:e0:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org