Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0E1212F0D13B11EC993B0E27C4F9AE02.roa
File: 0E1212F0D13B11EC993B0E27C4F9AE02.roa (raw, json)
Hash identifier: Q7AJuwe+HCC/9AMzR6hAqKLzsDKQGriKsYRc47zXpZE=
Subject key identifier: BB:46:02:57:87:E5:8E:94:00:FC:D8:67:69:3F:B3:3C:9B:89:1B:4D
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 3A19
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0E1212F0D13B11EC993B0E27C4F9AE02.roa
Signing time: Thu 12 May 2022 05:40:10 +0000
ROA not before: Thu 12 May 2022 05:40:10 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14873 (0x3a19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: May 12 05:40:10 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=627c9dba-61a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:cc:52:e5:35:28:38:61:ab:8e:cd:d5:bb:
26:cc:d4:7f:ae:2b:a2:45:d1:0a:ed:a9:f1:fc:9b:
59:7a:d0:07:3c:0c:d2:a2:7e:26:2c:60:7b:7f:09:
85:56:55:56:ee:67:50:2c:0b:f2:8e:1d:5c:e3:f7:
fb:3e:2c:ea:7b:fd:78:87:1c:a7:96:71:76:e4:8f:
d6:54:8b:26:0f:8e:04:25:35:29:c7:83:df:1b:02:
d1:4f:e0:8e:61:8b:a2:1d:09:0b:13:68:2e:cb:0a:
ad:82:16:96:52:df:47:81:ef:a2:79:9e:b3:b0:f4:
08:ec:8f:72:ef:65:9e:36:34:c4:4a:d9:53:27:34:
51:c4:e1:1f:a6:77:c0:8c:7b:fa:1a:b8:7e:ee:71:
75:6e:c2:aa:eb:72:07:14:f8:cb:47:9f:17:7f:24:
48:ff:8c:c5:02:e2:84:dd:0d:dc:3e:08:8b:eb:04:
76:d5:e3:e8:d0:6f:d6:e3:bc:82:e4:9b:ba:fa:64:
67:5b:f8:dc:55:1e:c3:c9:cf:fe:87:bb:a0:02:37:
7d:e9:27:f4:33:62:5b:f4:05:ac:b6:f3:96:1f:47:
9a:ae:7e:7e:9d:2d:9a:06:fa:86:1d:7a:c5:08:60:
c3:e5:b8:6e:e0:45:33:87:86:35:04:7b:c0:60:20:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:46:02:57:87:E5:8E:94:00:FC:D8:67:69:3F:B3:3C:9B:89:1B:4D
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0E1212F0D13B11EC993B0E27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
03:ad:e5:b2:25:78:9e:a1:d4:48:2d:c1:3c:96:4d:ad:8d:1f:
3e:7e:5f:ae:c8:08:e2:69:f6:c9:5a:51:c3:c1:04:68:8e:8e:
96:15:78:6a:69:fa:e0:7f:be:98:2b:bd:0f:01:7c:71:1a:d7:
b4:cd:50:2c:69:aa:30:82:02:d1:4e:4a:cc:5d:95:e3:d7:29:
1b:01:cf:e3:08:e2:fe:62:48:05:ff:ad:58:3b:6d:45:ab:f4:
02:c4:73:a7:30:79:9a:97:e4:93:73:e2:60:80:36:ad:1c:6d:
31:9d:a5:71:8c:02:cb:aa:38:30:05:b9:9a:a1:23:bd:bc:80:
a5:1e:08:3f:7f:17:d8:0f:c6:b2:3d:1b:5e:0d:42:4d:da:23:
98:1c:20:91:1e:42:d1:f7:47:cc:30:15:23:d8:70:a9:d3:af:
80:b4:ac:6c:0e:1d:ad:7e:11:3a:99:45:04:51:dc:72:a3:19:
ac:65:c7:df:26:9d:04:83:c8:e4:42:76:0a:79:97:5c:ad:2a:
0c:1b:e4:da:a1:27:94:f6:32:18:f5:ad:b5:8e:24:b0:49:a1:
14:b4:de:f8:a1:0e:1f:ea:fb:ab:1f:46:cf:ca:e2:f5:09:57:
f4:cf:fe:7a:04:d5:e9:74:48:20:e2:7b:c4:76:fa:bf:4b:e2:
85:84:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org