Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC9C69A086E811EBA0B4EA4EC4F9AE02.roa
File: FC9C69A086E811EBA0B4EA4EC4F9AE02.roa (raw, json)
Hash identifier: 3m0N3S68h0hpDmx656cIAxVZbQ8d8fZZA+1IzhAULKI=
Subject key identifier: 1B:9D:D6:1D:70:08:65:AC:D3:7E:9B:C5:0B:43:53:0D:6A:44:D1:24
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 54E2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC9C69A086E811EBA0B4EA4EC4F9AE02.roa
Signing time: Mon 16 May 2022 04:32:04 +0000
ROA not before: Mon 16 May 2022 04:32:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38207
IP address blocks: 103.80.160.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21730 (0x54e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:32:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d3c4-6baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:c5:94:ac:6b:77:63:f2:a0:0f:04:ab:f7:
3d:c7:ef:91:56:50:56:51:29:64:5d:10:2b:0a:63:
47:95:c1:ef:63:30:bd:45:6a:56:80:23:4a:4d:5a:
aa:26:58:23:6a:87:f9:4a:13:ce:da:06:54:d9:90:
41:b7:c8:c9:e8:23:e2:9d:b1:38:75:7f:6c:04:c2:
00:10:66:89:b8:a6:37:be:5c:ad:09:e7:0d:87:b9:
67:70:5f:0d:bb:fd:d7:57:5a:87:c4:37:59:82:a9:
66:d5:01:57:23:ce:38:de:49:0d:79:c8:8b:ce:42:
6a:6b:a0:b0:bd:06:aa:d5:c1:f3:d1:f9:22:bf:da:
76:38:72:d5:4b:6f:b5:02:ca:de:ac:f2:1d:c0:40:
d3:85:f6:46:1a:95:5d:61:44:ca:2c:b6:97:ae:eb:
bf:d0:61:71:c5:a9:f7:ed:a1:d2:cb:cc:62:89:81:
56:04:6d:56:b4:dc:1d:88:16:3d:86:9b:05:ff:25:
74:12:77:74:b7:d1:fe:f2:65:9e:6c:e2:75:19:35:
94:4a:47:cf:4b:1b:d0:bc:9c:2b:16:2e:6f:90:41:
1d:b7:f2:0b:f8:d6:09:53:24:74:0d:de:ac:a7:db:
1d:25:00:e3:78:9e:a8:5e:2b:2f:3f:04:8b:4e:d0:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9D:D6:1D:70:08:65:AC:D3:7E:9B:C5:0B:43:53:0D:6A:44:D1:24
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC9C69A086E811EBA0B4EA4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:33:ce:51:6a:92:b5:00:9e:f4:92:14:65:6f:b5:44:6e:4f:
04:2b:83:98:c6:08:77:66:3f:39:03:06:88:62:16:84:f9:33:
7e:5c:61:86:c2:95:f9:0d:7c:b0:77:b3:50:6c:85:dd:37:ba:
7a:ab:30:fe:98:3d:50:34:73:e9:2f:3e:ab:5c:64:96:e3:e6:
f9:dc:61:72:b9:17:de:09:76:3e:1e:93:e6:1f:7d:ea:be:a7:
bd:7a:8a:db:21:d3:d2:24:ae:ca:50:ef:f5:a5:d0:49:8c:51:
dc:81:7e:54:e7:bb:c3:48:4d:3a:9b:e3:b3:be:dc:d3:d0:13:
0e:5f:07:89:83:a1:d0:32:de:50:bf:3c:fd:b7:68:ad:7a:e5:
6a:e9:2e:4f:23:11:4a:a4:96:22:92:75:88:95:c6:44:b1:66:
df:48:c1:c5:0a:2a:32:e4:27:79:99:48:cd:41:ac:58:39:3b:
c7:bd:50:32:3f:01:5b:fa:ba:60:b3:2e:eb:86:1a:eb:d6:5e:
57:ad:9a:3e:b1:72:03:8d:43:36:df:19:f6:fa:5e:db:03:01:
aa:5e:68:b0:8c:9a:2c:e6:a6:e8:cf:68:49:b3:dd:18:27:23:
3b:dc:30:38:e6:8c:bc:df:ad:7d:9c:e3:8d:c6:18:57:8f:5c:
d8:1c:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org