Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E791F198E60011EB870AC229C4F9AE02.roa
File: E791F198E60011EB870AC229C4F9AE02.roa (raw, json)
Hash identifier: 5Nai19JF97XlLa+kJt8JeNXNcaulGonF7g3XarJ4jvE=
Subject key identifier: 4C:36:66:3A:9F:96:E0:3D:BE:2D:85:42:C8:40:47:07:D5:30:20:5E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4F8B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E791F198E60011EB870AC229C4F9AE02.roa
Signing time: Mon 16 May 2022 04:06:37 +0000
ROA not before: Mon 16 May 2022 04:06:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134018
IP address blocks: 103.54.200.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20363 (0x4f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:06:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281cdcd-3a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:64:24:91:53:18:3b:2d:8f:a4:3d:72:4e:80:
f3:2f:f1:0c:d3:07:c7:4b:a1:2f:08:7c:15:17:19:
9e:51:99:07:b5:ab:93:de:94:b1:04:66:c0:ab:aa:
16:39:37:5f:14:a1:a2:1a:c4:aa:0b:8b:d7:c2:31:
90:1b:e7:e8:35:ac:ee:9d:99:ff:8d:cc:87:ad:2a:
86:c4:7b:07:b5:25:cb:b0:ae:9d:cf:b0:9d:fa:f4:
4b:bb:ca:e1:78:18:49:80:5c:04:e6:be:a9:f8:37:
9a:ef:df:fe:1c:76:55:c9:d5:7f:db:80:1c:77:6e:
26:e1:b6:f9:df:b4:50:83:16:2e:b8:ee:7b:6c:de:
20:21:7f:52:f1:df:c3:0d:4a:a2:e5:7b:62:77:ff:
1e:9f:68:cf:6e:5b:4b:e0:7b:83:e0:1f:9b:67:bf:
25:98:6b:c1:f9:ee:c9:12:6b:16:65:ff:cc:00:31:
24:f7:46:0c:dd:d6:e5:d5:f2:f5:8f:e1:76:47:1f:
05:26:df:b2:3b:87:69:bd:4f:49:ea:fd:01:40:16:
76:b9:f5:c3:c6:a2:a1:9c:37:51:4b:84:c6:9c:bc:
bd:a1:37:b0:de:9f:e5:96:6c:e2:36:7d:ea:3b:bc:
2f:6e:00:7c:50:e6:29:af:68:51:e3:49:ff:9b:c9:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:36:66:3A:9F:96:E0:3D:BE:2D:85:42:C8:40:47:07:D5:30:20:5E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E791F198E60011EB870AC229C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:1a:2d:41:2a:0c:dd:3d:0d:23:74:a3:b4:f2:c5:97:60:52:
25:f4:61:8b:d5:3a:72:fc:fd:f7:c1:98:3f:cb:d5:b3:fd:80:
70:bb:94:06:2d:f9:bf:0f:7a:cc:1d:94:16:21:c2:d1:99:2c:
ef:3e:e8:f8:18:fe:3d:2c:24:1c:1c:9c:c1:be:3d:65:0b:f1:
f8:70:0f:b0:52:c6:fb:e8:bb:b7:12:14:cd:19:51:8a:1d:64:
8f:97:47:24:cc:87:26:71:26:a2:de:3b:81:2d:7e:20:ed:4b:
25:7d:f7:a2:25:ad:f6:c2:14:d1:1f:d6:78:db:78:76:e5:63:
9a:e8:fd:dc:e9:16:c3:60:e0:bd:f7:e2:92:05:0f:22:c2:23:
24:80:53:a9:0b:d9:8a:a1:86:f2:40:c0:7a:00:16:bd:16:17:
2e:21:7c:cf:2b:8e:62:7a:03:67:8d:40:98:ae:f3:7e:a5:5c:
fe:38:74:30:ee:b7:a5:a8:f2:1a:fa:e5:cb:3a:f8:d0:ea:be:
1e:bd:58:1b:78:3e:a7:de:47:c5:9a:2b:fe:2f:b5:4c:f5:9e:
f4:47:83:22:b0:b2:a2:a9:7a:91:4d:a7:88:c1:64:8a:99:03:
ff:03:61:05:ee:e0:4e:2d:ed:02:65:83:50:47:a5:87:99:d6:
95:cd:bc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org