Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7B34101847DD11ED9B7F5171C4F9AE02.roa
File: 7B34101847DD11ED9B7F5171C4F9AE02.roa (raw, json)
Hash identifier: 2BttekMptTxInlmRU4XGCMpjg3UZ52Ox0u+N9a5dyPM=
Subject key identifier: AE:3B:BA:CA:C6:51:16:1B:AC:DD:49:84:DC:8A:4C:06:9D:E0:4C:AC
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 3C73
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7B34101847DD11ED9B7F5171C4F9AE02.roa
Signing time: Mon 10 Oct 2022 04:00:10 +0000
ROA not before: Mon 10 Oct 2022 04:00:10 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15475 (0x3c73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Oct 10 04:00:10 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=634398ca-5602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:30:bc:79:ed:fe:4e:37:06:2d:01:6f:6d:
49:be:08:69:40:21:e0:74:a1:03:d6:03:5e:df:e8:
cd:8c:ef:22:b2:81:48:33:91:c6:2b:bc:b6:2d:50:
b7:89:8d:df:d6:d6:ff:2a:9f:54:fe:8c:1d:fc:fa:
ab:c5:df:85:9a:d9:18:45:8c:c3:e2:fd:02:55:cc:
9c:ad:de:23:60:ad:5f:2c:f8:b2:5f:0d:81:f1:c5:
b3:d0:18:f7:56:28:75:be:e2:75:7f:30:8a:d0:a6:
af:9e:52:94:65:fd:da:ca:d7:f1:cb:a9:27:51:e7:
24:66:94:94:10:df:03:b0:6d:38:9a:c7:43:b9:bf:
b2:dd:fb:8b:f6:e7:76:f4:1a:63:2d:29:4e:b9:8c:
8d:61:c3:f5:72:c8:9f:11:d4:fe:12:8c:24:a1:a4:
06:e4:9c:3a:7d:72:dc:67:86:a7:a6:ce:53:0e:0a:
d5:ea:90:13:79:b3:ee:32:48:3e:a1:6d:e7:27:4f:
0e:a3:9e:f0:33:fd:86:45:7a:c5:72:56:d6:a3:4e:
99:21:c8:77:7e:d1:49:c6:7d:4b:86:53:e9:18:f1:
12:a5:36:9b:1c:9c:0b:04:bd:16:01:af:c0:03:48:
ec:8c:ce:0c:94:04:b5:b8:35:ee:97:d6:e2:18:91:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3B:BA:CA:C6:51:16:1B:AC:DD:49:84:DC:8A:4C:06:9D:E0:4C:AC
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7B34101847DD11ED9B7F5171C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
5e:d8:d1:cd:20:0d:67:40:b8:18:1d:a5:b8:75:15:2a:35:d5:
99:74:a6:52:b1:21:dd:b5:72:0a:22:8c:8e:1f:33:d7:c4:d9:
c9:0d:8a:b1:c8:5f:50:05:13:4c:9b:83:c6:4c:34:63:c0:67:
2f:b3:dc:86:f3:dc:49:21:0e:5f:7d:5e:e8:c8:dc:80:ea:db:
47:27:ba:16:a2:26:8a:8c:76:06:f7:92:61:bc:e9:62:20:bc:
05:3c:37:ba:f2:ea:81:fe:26:90:86:b4:2f:7d:27:3e:d0:43:
f6:98:6c:c1:65:02:c3:26:d0:2c:87:20:26:0b:6d:fe:fb:18:
2c:e9:84:38:ab:ff:7b:9f:ca:7c:87:33:5b:a3:98:6f:91:16:
54:a4:19:0e:65:ac:5e:ab:91:2c:ee:86:0f:6f:d4:ef:f0:3f:
9d:f1:2e:5c:f1:20:c8:3b:df:15:d7:05:0b:10:79:35:e5:fb:
72:b9:bc:ec:29:7f:15:9f:36:4f:ea:8f:19:77:29:0b:c8:18:
77:f6:76:0d:b4:48:88:74:b4:e1:c4:14:d5:02:fd:f6:1c:a7:
cd:3f:98:95:df:de:29:c1:3e:7c:73:9a:a9:e6:75:a6:da:4a:
5b:01:3f:59:25:77:f4:0e:84:b4:61:50:e1:72:6b:dc:b5:50:
42:83:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org