Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/44D9112E5D2411EDA0004C1CC4F9AE02.roa
File: 44D9112E5D2411EDA0004C1CC4F9AE02.roa (raw, json)
Hash identifier: r82o1EsROWV+abZjFXvciniVVYw7N/U7HCaMbDYecuA=
Subject key identifier: 9B:4B:53:E3:FB:1F:28:4D:1D:1D:05:E5:57:3C:23:29:8F:97:39:30
Certificate issuer: /CN=A9199560/serialNumber=27395E42B97D78CE3B2F85946B27E7C688075432
Certificate serial: 0620
Authority key identifier: 27:39:5E:42:B9:7D:78:CE:3B:2F:85:94:6B:27:E7:C6:88:07:54:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzleQrl9eM47L4WUayfnxogHVDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/44D9112E5D2411EDA0004C1CC4F9AE02.roa
Signing time: Tue 31 Oct 2023 23:31:16 +0000
ROA not before: Tue 31 Oct 2023 23:31:16 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 40676
IP address blocks: 103.130.179.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199560/serialNumber=27395E42B97D78CE3B2F85946B27E7C688075432
Validity
Not Before: Oct 31 23:31:16 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65418e44-f00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e2:e3:bb:17:78:57:49:10:ea:23:95:3f:b0:
ca:14:37:bb:1d:9b:1a:8b:3f:a8:55:71:87:91:66:
e1:f3:b4:d1:73:3b:66:99:03:05:e2:cb:74:9d:0a:
fa:f5:0c:92:b0:5f:f8:26:30:4c:19:10:5b:4a:8d:
05:17:77:97:f6:1c:13:06:07:55:1c:00:b1:f8:b0:
bc:db:be:23:82:81:1f:96:cb:4f:53:2c:78:0d:e9:
90:85:7c:a9:fc:13:4e:c4:3e:99:fb:7a:bb:47:4e:
f1:fa:98:ef:86:fc:be:7c:14:bd:99:57:e4:ef:64:
34:28:5d:f0:73:c5:60:61:01:8e:07:ed:7c:4f:ad:
0e:28:7b:3b:b1:c5:e7:d9:02:bb:46:28:cb:fc:7a:
8d:68:24:0c:e9:ac:c7:d8:ca:8b:c8:d1:75:34:4f:
9f:8f:96:93:7b:19:4b:58:49:cb:f7:1e:03:91:82:
9c:cd:7d:15:fe:2a:c4:50:8c:81:e6:8f:20:1f:9a:
ba:6f:25:13:ae:f2:19:59:cb:5f:73:15:c6:89:cc:
00:f8:18:36:70:b5:78:49:60:b5:6a:c1:f3:03:a3:
ad:40:d3:b9:2c:02:7f:45:0a:d9:5f:e2:68:0e:10:
99:3e:ba:07:3a:73:ba:ca:77:c0:ba:a5:24:77:65:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4B:53:E3:FB:1F:28:4D:1D:1D:05:E5:57:3C:23:29:8F:97:39:30
X509v3 Authority Key Identifier:
keyid:27:39:5E:42:B9:7D:78:CE:3B:2F:85:94:6B:27:E7:C6:88:07:54:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzleQrl9eM47L4WUayfnxogHVDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/44D9112E5D2411EDA0004C1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.179.0/24
Signature Algorithm: sha256WithRSAEncryption
57:e5:a8:27:ed:6d:01:17:0e:d9:d4:7d:50:a4:72:64:61:3d:
d2:21:70:57:34:31:92:04:5a:70:f0:62:07:48:bf:12:65:db:
28:6d:3d:c6:47:4d:2b:bd:be:ff:53:84:7a:52:82:8e:ed:a3:
0f:9b:cb:73:58:04:5a:58:96:8f:3b:cc:4c:15:b9:cf:89:d3:
c3:89:18:bb:7c:d8:92:7c:fd:ce:ae:30:16:1d:a5:e2:13:db:
06:7f:3c:ba:98:ab:48:02:91:57:bc:ce:8f:35:67:7e:3e:99:
d9:0a:73:03:71:7c:dd:bd:3a:57:15:ad:e7:00:7d:f5:78:d1:
d2:7e:b0:76:45:3c:2c:07:50:3b:85:bf:80:b1:cc:67:18:0f:
06:0d:d0:74:bf:de:2e:41:f2:dc:bf:9f:a8:61:db:18:26:59:
57:d5:96:d6:ea:66:66:be:9c:6a:14:51:f6:f0:f4:02:e4:d5:
80:c7:b3:83:08:ca:ec:18:1b:d7:26:85:34:e0:0b:91:07:8c:
a7:a1:5b:b1:e8:2b:8e:58:d3:58:d9:0f:3f:ab:ac:56:6a:01:
7f:c2:a0:6b:ea:e2:36:39:1d:6b:32:6e:59:0a:51:4a:f3:06:
bb:6a:83:d9:f4:0f:67:3e:f4:5b:1a:5d:42:d5:0f:41:c7:12:
81:98:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org