Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/325860A2457F11ED98035F63C4F9AE02.roa
File: 325860A2457F11ED98035F63C4F9AE02.roa (raw, json)
Hash identifier: ZjsoFjeGQT1ogKh2P3fvW5+bBw5a1cp9sIjMuO0lmOA=
Subject key identifier: EA:A0:48:2B:F8:91:DB:32:F9:7A:CA:3E:00:F9:89:8A:D2:FE:F3:0A
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 3C53
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/325860A2457F11ED98035F63C4F9AE02.roa
Signing time: Thu 06 Oct 2022 14:00:13 +0000
ROA not before: Thu 06 Oct 2022 14:00:13 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15443 (0x3c53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Oct 6 14:00:13 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=633edf6c-8884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:b7:e7:a5:6d:74:b6:2a:45:75:95:37:6c:
91:b8:80:68:29:b5:49:7f:6a:e0:f1:52:e8:84:3f:
a4:d4:1d:c6:d2:a3:a0:44:79:4b:cc:e1:33:ec:1f:
1c:d5:a1:1c:f2:11:46:09:7e:57:c6:5f:72:d9:d8:
76:ea:58:09:fe:8e:54:56:96:a9:5b:78:2b:93:6a:
d2:5e:f7:b7:2b:a6:4f:79:4d:29:37:dc:d9:d6:3e:
98:fa:f8:c1:ed:f7:69:09:05:2e:b0:98:33:ee:52:
d3:b3:73:60:a6:97:52:cb:41:fe:eb:2e:b9:89:ef:
ed:1d:df:6a:ee:d0:eb:47:94:25:79:33:6a:34:37:
a7:09:5c:a4:d2:d7:70:08:c0:d2:41:42:b5:ac:ca:
8e:cd:e3:70:16:69:c4:43:4d:9d:dd:e3:77:e2:9d:
92:b4:b7:00:b6:b1:0d:43:d6:f7:89:08:44:c2:eb:
8d:f3:44:6a:ef:57:30:0b:49:f1:fb:10:a5:5a:2e:
c0:48:9b:49:34:44:11:94:dc:44:61:48:39:27:ce:
1b:f7:b4:bf:7e:e5:51:41:a0:15:89:45:d1:0d:69:
81:fa:45:2f:1b:a0:ff:43:c1:8b:30:de:25:9b:83:
58:d6:f6:4a:77:4e:00:a3:d7:18:16:95:67:8d:3c:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:48:2B:F8:91:DB:32:F9:7A:CA:3E:00:F9:89:8A:D2:FE:F3:0A
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/325860A2457F11ED98035F63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/48
Signature Algorithm: sha256WithRSAEncryption
54:86:38:29:f9:43:31:ee:6d:16:d4:55:aa:c2:d9:79:e3:7e:
aa:c9:60:c7:54:6b:24:1e:16:ae:d5:5f:32:41:6c:2b:51:de:
1e:dd:9f:a1:6c:a5:b4:0a:68:98:3e:cf:55:88:45:23:50:ff:
c6:b7:30:2e:43:2d:16:a4:31:20:0b:20:39:90:38:ef:94:af:
23:5e:2a:7f:8d:1f:64:0b:f5:05:ac:3e:68:09:9c:67:dc:e6:
b3:dd:ed:fe:64:9f:6e:16:0b:ae:fd:22:3f:69:d5:8a:cf:10:
dc:92:8c:6b:d6:c7:09:eb:fe:cc:64:d4:c5:00:aa:84:97:3b:
25:5d:de:eb:43:3e:7f:e9:e9:9a:88:cf:ed:c8:bc:00:7f:08:
f0:95:21:95:cd:81:18:cf:78:73:9d:fb:87:e6:4a:97:90:cb:
8e:0b:bb:3c:56:21:eb:ec:75:7b:74:f6:bc:94:85:de:f1:47:
bc:21:39:5b:9b:07:7c:eb:1d:ce:e0:d6:a6:5b:86:55:d1:fc:
53:ca:24:20:e9:f0:a0:e7:1c:46:e9:7e:4b:4f:0b:6b:40:35:
9f:e2:7b:1f:8c:59:27:84:25:2a:a9:16:55:c6:ff:bc:01:b0:
ba:14:a5:87:a6:4e:f2:5c:00:d6:81:06:c1:14:b6:b1:7d:3e:
47:33:fd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org