Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/5D4B1EB6458A11EDA4A20925C4F9AE02.roa
File: 5D4B1EB6458A11EDA4A20925C4F9AE02.roa (raw, json)
Hash identifier: siDCU5kLP4vanAiYPRJXiHoF6Xp7LvQSPRtlpqZqhuI=
Subject key identifier: 89:BD:D1:84:98:16:56:C9:3F:6E:3E:85:E8:27:F6:C6:49:2D:4B:A0
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 3C5B
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/5D4B1EB6458A11EDA4A20925C4F9AE02.roa
Signing time: Fri 07 Oct 2022 03:40:09 +0000
ROA not before: Fri 07 Oct 2022 03:40:09 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15451 (0x3c5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Oct 7 03:40:09 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=633f9f99-f33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:95:e5:9b:d5:f7:0c:c5:89:b7:dd:85:a1:
a4:d3:f0:26:3e:d4:c5:5b:2e:d3:f3:12:53:f7:4c:
05:a4:90:0b:d7:24:27:dc:54:7b:2b:81:bb:f9:bb:
39:5d:14:ba:f6:6b:6f:58:1b:23:08:26:d4:15:13:
31:71:a0:dc:de:e9:56:04:90:72:cf:11:2a:a6:d9:
19:42:3e:8b:5b:3b:2d:1b:ba:80:cd:f3:d1:95:c2:
ee:11:3d:7a:10:28:2e:9b:b5:90:aa:1d:01:42:35:
da:c1:15:32:36:9e:9a:56:52:f7:00:e3:dc:ce:2d:
a2:70:f8:58:8f:45:67:f4:ad:3a:1f:95:bd:f9:c7:
3d:1b:a7:42:91:dc:73:19:ce:b7:52:07:6e:98:7f:
1b:48:d7:da:30:86:f6:1c:10:84:35:d5:b4:3e:ba:
71:e2:2e:d8:5c:96:cb:29:8f:7c:e3:e4:7a:40:bd:
df:15:3a:f2:62:ff:67:4d:33:ee:10:9a:b4:60:77:
cb:65:2e:67:01:5c:09:58:68:1e:1d:ba:04:3d:93:
3a:00:7c:1b:e7:65:48:f4:6e:23:01:fe:f9:a8:0d:
4a:24:78:36:7a:26:5c:a9:2a:d3:8b:af:c2:25:87:
15:a1:bf:81:c2:8c:42:58:c6:77:69:37:9b:a7:0c:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BD:D1:84:98:16:56:C9:3F:6E:3E:85:E8:27:F6:C6:49:2D:4B:A0
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/5D4B1EB6458A11EDA4A20925C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
53:fc:f2:d7:cf:dc:55:04:aa:89:a5:91:7d:1d:91:ff:20:26:
1c:85:f7:8c:40:7e:ee:01:45:95:31:48:c2:8c:23:e0:8f:30:
b1:db:a8:b9:3c:36:86:ea:ae:4a:2a:4d:be:6b:e7:00:a3:25:
63:31:86:d0:b1:da:ef:91:13:c0:16:ba:cd:1f:f4:3d:26:21:
35:dc:11:64:c3:f9:27:ec:ce:64:31:0b:63:ac:d0:e2:9c:01:
39:74:8c:6d:25:4f:be:a1:4d:a6:77:db:2d:4d:f6:27:5e:63:
af:ac:06:db:ea:37:7b:c7:d1:60:fb:92:11:7a:f5:e0:68:27:
c6:4f:d9:63:09:fe:73:56:66:cb:4e:39:22:bb:9f:6a:31:c7:
85:64:66:52:f7:89:0a:37:00:40:5a:6f:f6:39:71:5e:84:ad:
e0:b7:bb:dd:02:a4:2f:7f:27:e9:d2:b9:b4:20:ea:b7:33:3a:
d4:8e:7c:58:ee:c7:74:77:b0:5f:f4:21:36:ce:14:ef:c0:8f:
b6:84:0e:8f:9d:e2:95:76:96:a8:90:f9:99:ca:05:8f:e3:28:
3c:a1:0a:16:d1:0a:5d:c8:c7:dd:0b:59:1c:83:8e:eb:ef:31:
25:3d:e4:76:b2:30:2d:cb:f4:82:23:f5:83:32:27:5f:1b:6d:
a1:9b:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org