Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/00EB6742D77C11ECAE427C60C4F9AE02.roa
File: 00EB6742D77C11ECAE427C60C4F9AE02.roa (raw, json)
Hash identifier: H3cn1AhsBvqz9aSVs2vDbarQa6OcTLSUVDWnYycEPuU=
Subject key identifier: 09:81:5A:4F:04:75:69:95:AC:DD:2F:D7:9B:4C:C3:51:39:68:65:7D
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 3A77
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/00EB6742D77C11ECAE427C60C4F9AE02.roa
Signing time: Fri 20 May 2022 05:30:10 +0000
ROA not before: Fri 20 May 2022 05:30:10 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14967 (0x3a77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: May 20 05:30:10 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=62872762-db91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:84:09:e9:b2:56:1b:f7:9f:46:9f:bc:53:
f6:48:2b:09:32:bd:be:db:35:85:23:e6:bc:4f:d5:
82:b4:76:ca:6a:78:de:f5:fd:28:40:d1:fc:53:6c:
cc:eb:72:47:aa:0e:8b:b5:de:5f:c5:d7:fd:22:e6:
01:c4:ad:47:8b:42:6e:6b:ad:9b:03:78:e2:44:93:
fb:88:f1:60:13:6e:dc:8f:2f:ec:8e:c8:f4:8f:f7:
22:26:50:b0:69:cd:15:15:0b:4e:7e:46:07:d4:bb:
3a:63:71:f8:2c:eb:14:e4:65:eb:4b:c8:98:46:28:
3d:77:3f:ba:f9:2c:d1:db:cb:b2:bb:d3:37:c6:df:
14:d4:8f:dd:c8:50:37:0a:c9:49:fa:44:50:a4:f4:
81:ef:bd:3c:6e:8a:a4:49:69:2e:ab:31:92:a3:58:
2d:95:04:08:9c:1d:03:2e:0b:a3:e8:de:47:16:81:
b6:7e:11:26:c1:d6:fd:15:34:16:e5:50:94:df:fe:
df:71:ca:5b:5d:ea:73:4d:32:cd:0c:f1:d8:fb:46:
d0:48:29:2f:e3:81:f9:36:05:5d:4f:b0:7e:44:e4:
00:3a:0e:d2:7c:97:11:e4:a8:b5:6a:2a:f8:3c:65:
8a:f1:09:9f:0c:2d:4a:a7:bf:8d:7c:45:4c:6c:ae:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:81:5A:4F:04:75:69:95:AC:DD:2F:D7:9B:4C:C3:51:39:68:65:7D
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/00EB6742D77C11ECAE427C60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
c1:e8:b1:3f:e8:dd:19:79:b0:07:db:e8:d5:6e:d4:55:71:ef:
b3:3b:2a:d8:07:18:5c:fc:45:53:e4:62:a2:0b:ee:4e:f5:3c:
f7:38:13:ff:21:75:c3:82:25:2a:fd:8c:be:cb:22:bd:14:7b:
62:99:84:54:99:05:23:26:48:c2:5b:c7:61:7d:bc:b5:6a:9f:
0d:55:7c:6c:d1:52:3b:e7:c8:e0:77:77:01:63:2e:94:cd:69:
25:8f:31:0c:6b:ff:54:6b:d4:4a:cc:93:66:ce:51:0a:8b:56:
cf:45:82:11:e6:ee:5c:ea:9b:86:b6:5f:81:82:cf:a0:d3:cb:
69:9d:8a:7e:e9:56:99:45:fa:a4:12:4c:5c:cc:a4:93:d9:13:
f0:5a:bf:dd:b5:1b:33:c1:f6:c7:32:77:8f:56:64:45:e5:70:
74:6a:4d:b7:5a:3e:a6:82:dc:30:64:8c:36:a4:32:a1:20:6e:
86:81:1c:74:9d:8b:29:e5:51:de:da:27:62:a7:be:bf:c2:0d:
0e:6c:f6:ed:9c:c2:0e:b6:9d:8e:04:8f:6a:9c:ee:43:da:a4:
b0:df:8f:6c:98:89:cd:23:de:26:15:fb:27:48:1e:92:59:8d:
42:88:35:cd:f7:23:30:71:66:4e:42:75:48:2b:ed:dd:db:d0:
0d:71:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org