Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD86008487E011EC88C6C935C4F9AE02.roa
File: FD86008487E011EC88C6C935C4F9AE02.roa (raw, json)
Hash identifier: CdrIMBPz/AhyTmfx60gDgCH/Tk7KDOpMfMokuw4SmzE=
Subject key identifier: 30:DF:F2:3C:F1:B2:A6:B4:11:9A:D7:8A:8C:29:E3:78:30:D6:CC:2A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4EB2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD86008487E011EC88C6C935C4F9AE02.roa
Signing time: Mon 16 May 2022 04:02:24 +0000
ROA not before: Mon 16 May 2022 04:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132346
IP address blocks: 103.13.183.0/24 maxlen: 24
103.15.176.0/24 maxlen: 24
103.179.166.0/23 maxlen: 24
103.184.80.0/23 maxlen: 24
103.184.88.0/23 maxlen: 24
103.184.100.0/23 maxlen: 23
103.184.114.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20146 (0x4eb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281ccd0-2549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5f:da:f7:95:e8:14:91:e0:da:eb:92:c5:5a:
b9:78:c6:0c:1d:60:5b:31:20:49:1f:5f:45:99:a0:
9c:3d:f6:ff:66:ef:70:46:af:dc:71:54:25:7b:62:
67:6b:29:00:7b:e5:67:3b:2c:fb:c3:74:39:42:1e:
ff:88:8f:5f:4c:ea:f7:3c:56:33:bb:8f:70:83:1e:
a9:2b:6d:6c:47:76:b5:76:d8:87:ed:74:27:48:54:
e0:83:59:5d:52:b0:18:39:d5:3f:56:7a:a0:d8:99:
b3:0c:df:8c:6f:a4:ab:df:cd:a1:67:28:3a:76:34:
1d:2d:25:d4:5a:d8:04:93:7b:3c:d3:20:0c:5f:ba:
3d:ad:d8:3f:08:e5:5f:fe:2e:22:33:c2:df:04:cf:
3b:90:ba:2f:ee:82:87:2a:9e:18:bb:c8:f7:ee:cf:
d9:2b:16:c0:fb:79:81:3f:45:71:aa:b5:d6:12:6c:
76:e1:4f:e9:43:95:44:bf:ef:f2:c1:58:14:d8:e6:
c1:ee:df:50:b1:27:65:46:eb:e6:0b:50:db:f7:5e:
c5:28:b7:66:32:d5:d1:64:b3:df:ae:ce:81:5c:21:
be:fd:a5:f6:09:9c:3f:70:60:78:3a:40:a7:4a:64:
32:21:06:c5:cd:22:7c:dc:c4:ef:1f:e3:68:9a:d8:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DF:F2:3C:F1:B2:A6:B4:11:9A:D7:8A:8C:29:E3:78:30:D6:CC:2A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD86008487E011EC88C6C935C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.183.0/24
103.15.176.0/24
103.179.166.0/23
103.184.80.0/23
103.184.88.0/23
103.184.100.0/23
103.184.114.0/23
Signature Algorithm: sha256WithRSAEncryption
41:eb:d4:37:9b:14:7d:e3:50:c0:08:6e:1f:0c:3f:3c:df:fa:
1c:ce:ff:f2:fa:cc:ec:a3:0b:bc:b2:15:56:77:14:87:cb:8c:
f7:98:4f:ec:9f:94:0c:73:e5:e4:84:42:0e:02:99:cb:31:31:
f5:64:f4:9e:3a:57:49:f8:a2:7c:33:35:c2:80:c1:01:73:0c:
03:7c:cf:a6:10:e3:cf:fd:34:30:fa:1f:61:c8:93:63:46:00:
41:80:e2:c2:b5:0f:20:cd:25:9b:33:5f:fc:c8:d0:dc:41:a0:
4f:ad:8c:73:a8:ce:1c:a0:59:8e:f9:53:29:72:84:f3:aa:15:
19:83:a6:ac:90:3e:ee:5d:72:e7:f1:a3:8f:36:45:6b:34:1e:
fe:d5:ee:2d:97:e5:6b:5e:85:53:4f:c5:17:ba:1b:fc:d5:ff:
91:80:c6:b0:bb:fa:40:7e:f7:66:5a:3d:51:7c:53:df:0c:7c:
a5:f6:42:c8:0b:e1:9c:76:26:f5:d7:e2:97:54:c9:9d:90:02:
9e:6c:cb:cb:af:26:6a:4e:6c:81:93:64:21:42:9b:d4:ee:ab:
8b:0a:48:2d:12:08:fc:57:9a:27:a5:f8:18:bb:81:74:bc:41:
8c:fc:f1:4e:bf:52:d3:9b:2d:2f:02:b4:1e:86:98:a3:8c:72:
6a:16:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org