Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0DD5B9E4E8C011EC97215937C4F9AE02.roa
File: 0DD5B9E4E8C011EC97215937C4F9AE02.roa (raw, json)
Hash identifier: l+XWlh+syg47B0ny6YtfNUN1Ds20OaIq9bvYKzYTx9M=
Subject key identifier: 01:BD:25:5A:3D:2C:73:23:F8:0A:8F:19:9B:F9:91:54:6A:A5:66:2D
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 3B2A
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0DD5B9E4E8C011EC97215937C4F9AE02.roa
Signing time: Sat 11 Jun 2022 02:50:10 +0000
ROA not before: Sat 11 Jun 2022 02:50:10 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15146 (0x3b2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Jun 11 02:50:10 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=62a402e1-9ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:26:b1:b6:02:4a:70:81:e0:c0:44:8b:1f:
15:e0:f3:df:89:cf:9a:9f:e4:f7:be:75:21:84:97:
29:e8:87:63:4b:14:eb:1a:24:07:d7:76:e4:64:89:
18:a2:66:ee:14:22:47:36:73:43:da:fc:7b:91:41:
bf:fd:52:a7:49:22:1d:e0:af:05:67:87:5d:8f:85:
2f:e7:b9:de:d2:9a:44:a8:58:ad:37:d7:50:98:4b:
9a:23:15:aa:70:97:e9:c2:b4:55:94:a1:15:db:e8:
81:2a:0a:21:be:9e:cc:37:5d:ef:f7:ad:4d:9d:13:
ed:e7:ff:bd:55:4e:ee:26:3e:09:05:07:c0:da:01:
25:d3:bd:cf:98:2e:1c:d8:74:fe:eb:ee:07:d3:7d:
a5:83:a2:61:8c:20:8f:2d:58:17:86:20:80:62:6f:
ae:69:df:76:fa:93:01:e1:2b:49:e3:04:aa:b5:f7:
c6:2e:8d:8d:3d:21:8c:0b:22:10:1f:13:fa:69:14:
ba:dd:d0:44:3c:4c:59:b8:7f:90:64:ed:2c:6b:21:
bb:32:3e:3d:3f:eb:32:38:35:b0:ba:5b:de:44:a4:
43:83:06:6b:f1:3c:56:07:7b:f9:cf:b3:d5:2d:a1:
eb:94:82:85:94:78:ca:7b:1e:bb:12:b6:98:00:63:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BD:25:5A:3D:2C:73:23:F8:0A:8F:19:9B:F9:91:54:6A:A5:66:2D
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0DD5B9E4E8C011EC97215937C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
c7:a2:1d:de:57:7f:0e:50:b6:d2:ae:cc:67:1b:26:a2:bb:02:
b4:6a:1a:33:d1:b4:ea:ec:fc:26:e4:a3:e4:2d:de:12:f7:e8:
0d:52:44:36:b2:ba:21:9d:fc:99:6e:cb:01:34:9f:52:3d:87:
99:2e:f5:3f:a4:83:5e:05:7f:de:bd:c4:18:bd:f2:3c:22:77:
91:36:19:7d:3e:91:ce:c9:19:00:53:99:42:fe:d1:68:6c:a6:
58:49:c1:7e:0b:d6:84:ee:23:ab:f8:6f:92:5e:7b:74:65:bb:
d1:38:8c:7a:ca:b2:f8:d9:44:8c:92:ef:7c:c1:50:1e:bd:50:
c0:7b:3e:7c:9f:17:c7:32:8e:ad:59:5e:3d:89:7e:1c:2a:bd:
93:f7:2a:fe:1e:9e:5f:31:fa:b1:9f:55:fd:34:52:4f:ca:5f:
bd:5d:c7:85:2d:ef:f6:a5:0e:ec:e2:e9:96:f1:86:ee:54:64:
01:7d:78:ea:ef:a1:66:d4:65:82:47:6a:bc:7c:10:87:98:2b:
7e:38:29:d4:ba:39:9e:f8:f2:d4:05:f2:de:2e:4f:c3:e6:56:
74:95:b6:d9:a7:3e:89:7f:13:ce:52:f7:0b:79:69:3a:b6:8f:
17:e7:2a:08:a6:d0:e1:23:6c:2e:64:9a:a3:c3:23:28:28:c4:
23:9e:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org