Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7E2667BC471F11EDA07D0121C4F9AE02.roa
File: 7E2667BC471F11EDA07D0121C4F9AE02.roa (raw, json)
Hash identifier: J8IOoYkJxuAVdsZkLLxGBsJGGP/TLfnMAArORvoypbY=
Subject key identifier: 5A:92:AD:15:03:58:88:80:B2:C4:81:FA:16:5B:B6:C1:8A:FA:6C:5B
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 3C6E
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7E2667BC471F11EDA07D0121C4F9AE02.roa
Signing time: Sun 09 Oct 2022 01:00:10 +0000
ROA not before: Sun 09 Oct 2022 01:00:10 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15470 (0x3c6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Oct 9 01:00:10 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=63421d19-10d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:cb:5b:a5:58:d8:77:6f:c4:a7:c5:9b:84:
2f:9e:07:64:a8:fd:1a:18:32:aa:61:78:5c:b7:2a:
61:60:95:d5:4b:52:49:29:c9:87:62:df:24:59:23:
da:09:c1:00:27:d2:1c:8c:53:fb:16:58:7d:fc:8c:
08:7f:74:6b:7e:87:dd:12:0b:2c:ea:7d:c1:41:df:
7a:8a:ff:da:14:41:ca:01:d1:39:78:7e:74:03:57:
1b:cc:ff:70:d0:ea:1b:33:00:28:3a:fc:74:bd:53:
c2:55:ee:b5:2e:12:6a:e6:00:71:80:11:94:f7:27:
17:fd:9e:fd:19:98:84:e6:84:c7:c3:e1:60:e2:a9:
a5:e5:7a:ba:f4:6d:74:9a:24:56:00:f5:d3:82:4e:
31:20:83:a0:d3:c5:36:be:e8:e4:56:87:58:b2:d2:
79:dd:0f:ff:43:e8:c1:9d:bf:a4:9c:ff:22:06:ce:
3a:17:a8:0d:1c:c2:d6:b9:09:7d:36:d1:e1:0b:48:
11:c2:d0:e7:f9:ca:f0:d8:bd:c8:3a:2e:9c:7e:e7:
3c:a8:00:45:cc:d8:e4:31:fb:84:c8:34:7d:a9:ca:
56:b1:5a:be:d9:32:5a:37:8b:b7:5e:de:73:90:37:
80:ed:ba:ad:8e:a9:f5:80:23:b0:27:02:4f:33:64:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:AD:15:03:58:88:80:B2:C4:81:FA:16:5B:B6:C1:8A:FA:6C:5B
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7E2667BC471F11EDA07D0121C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
c3:10:3b:3c:96:4f:11:3b:de:75:6c:3d:f4:f3:8a:6e:8a:30:
b6:99:e3:e0:5a:f6:50:be:55:6d:51:90:58:a2:fc:d5:ea:8c:
c3:eb:75:d2:05:85:e7:de:e9:56:07:43:e6:23:aa:fb:5f:5e:
10:e3:4e:12:9a:4d:f6:08:d6:69:da:c0:b1:63:41:55:f5:76:
9d:3c:51:39:67:5b:e4:a0:88:00:12:c2:29:08:a2:94:9c:c3:
8e:68:33:b7:5b:0c:a9:0b:1c:3c:d9:bc:9e:6d:75:2d:fc:93:
d6:20:29:76:cb:15:97:0f:fa:87:83:a6:1e:c8:02:4a:07:4a:
02:1e:37:48:a4:af:b7:ab:38:db:0f:df:72:3e:11:ff:6c:41:
a2:87:d7:9f:56:09:29:e6:ff:7e:57:48:76:e4:26:c3:10:46:
f3:32:f0:84:1f:65:29:ae:4e:cd:b1:93:17:98:ee:f7:22:33:
b1:d2:b2:f3:60:21:8a:ff:dd:2e:34:dd:45:44:cd:44:fe:0a:
d8:4f:a9:45:a7:dc:a8:e6:f0:7a:de:7a:26:ba:9b:87:f9:e6:
7b:00:68:b6:9b:9a:f1:93:51:12:2a:a4:7f:38:33:d4:10:e6:
79:4d:70:02:5c:3d:83:b3:9b:d1:69:68:53:b8:31:6c:73:2f:
47:db:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org