Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/84FA08824FC111ED92DB6B77C4F9AE02.roa
File: 84FA08824FC111ED92DB6B77C4F9AE02.roa (raw, json)
Hash identifier: Vn5jjLmsmIH45vVHEQzaBrQyaZUyKYDiH1C8DbWYPPA=
Subject key identifier: E0:B3:C4:9D:02:B9:FA:A8:E7:3E:8D:93:01:BE:C3:2C:83:FF:A1:A1
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 3CDB
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/84FA08824FC111ED92DB6B77C4F9AE02.roa
Signing time: Thu 20 Oct 2022 02:40:09 +0000
ROA not before: Thu 20 Oct 2022 02:40:09 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15579 (0x3cdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Oct 20 02:40:09 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=6350b508-bea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:8b:77:30:ae:27:8b:c5:72:b9:f7:d2:49:
fd:8c:23:51:6a:39:9a:22:b6:35:90:fc:c6:64:8f:
95:86:0e:c1:09:73:21:28:7b:54:08:9e:a5:be:3d:
21:10:4d:ee:5c:ed:ad:01:b2:0e:cb:b4:73:30:a1:
c3:2c:8b:a0:bd:80:dc:0f:a0:8a:09:cd:d2:77:fc:
90:71:7e:d5:13:a3:75:f6:2c:7d:4a:ef:90:7e:e1:
e2:c7:51:e4:14:35:e9:e7:f9:a2:e0:ee:64:ed:5a:
0e:3a:c6:68:63:13:6e:a7:e5:d1:53:c1:61:a6:f4:
de:76:18:93:38:f3:be:99:99:87:1c:e6:52:70:25:
20:7f:f3:96:91:ee:ca:de:d8:47:c5:16:9c:10:d2:
1f:2f:5d:9b:f1:0c:53:ed:1c:df:d0:0a:8e:31:3a:
ef:dd:b9:6c:14:81:06:e3:01:7b:86:57:e8:8b:2e:
da:6d:23:5d:be:08:49:ec:e9:85:fc:8b:d0:f4:d0:
03:e3:e2:46:91:f0:60:6a:af:14:15:9c:49:f3:fb:
4b:ac:19:f2:8d:e3:8c:19:48:42:09:75:52:b1:d3:
56:0e:93:fe:d0:80:60:2f:72:78:98:15:ff:34:64:
b6:d9:52:c0:c8:81:ae:2a:07:7d:15:09:ba:65:66:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B3:C4:9D:02:B9:FA:A8:E7:3E:8D:93:01:BE:C3:2C:83:FF:A1:A1
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/84FA08824FC111ED92DB6B77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
45:57:42:b4:fe:55:e9:25:a2:21:b8:45:64:a3:d5:60:d4:be:
78:70:35:84:28:d0:d2:c5:3a:98:d2:4f:69:43:c9:71:f2:6f:
7e:15:45:d5:de:5b:20:63:38:92:da:87:a7:21:70:f7:bf:ca:
80:80:1b:e3:7c:70:5e:5d:16:b9:49:ba:38:53:d0:e7:c8:7f:
6a:bf:0c:a0:92:a9:44:a8:79:40:93:ea:84:ca:4e:77:ca:0f:
05:ca:40:89:8d:8b:95:22:16:75:4e:98:0d:af:9e:a2:32:35:
f1:8b:c0:73:59:85:a5:5e:29:06:80:7d:7a:8c:25:0d:4d:d5:
a2:a6:1f:8f:d6:a6:7b:5c:34:e9:e2:72:85:6f:b7:68:2b:16:
63:bb:72:8f:4b:4f:74:16:64:a6:4e:52:7e:b1:91:1b:6d:58:
de:0a:b2:4e:ac:05:ed:56:87:0d:1e:ed:05:09:f7:cd:f5:16:
0d:6c:8a:eb:5a:37:f8:97:97:f9:7d:a2:95:bc:75:6e:37:a9:
e0:53:82:85:fc:19:26:d2:32:ff:3f:6d:35:37:dd:68:32:89:
69:9c:dc:22:a7:49:81:bb:08:3f:67:57:aa:27:9a:94:3f:01:
a5:5a:fd:31:b2:44:47:63:29:cd:e8:b2:8e:a7:b3:8d:3e:47:
10:4c:6d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org