Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/882E3A46995F11EC8EE3AD7EC4F9AE02.roa
File: 882E3A46995F11EC8EE3AD7EC4F9AE02.roa (raw, json)
Hash identifier: Kpj8M7gccjsQiyLDgtJdkBslK4SL3L/5nIctYs3kSzI=
Subject key identifier: 45:48:7C:F3:23:6C:E5:52:FA:48:59:AB:65:85:99:D4:B3:00:41:E0
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 377E
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/882E3A46995F11EC8EE3AD7EC4F9AE02.roa
Signing time: Wed 02 Mar 2022 04:40:09 +0000
ROA not before: Wed 02 Mar 2022 04:40:09 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14206 (0x377e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Mar 2 04:40:09 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=621ef529-81e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:e3:fc:bc:03:de:b3:58:85:fe:23:55:76:
80:0f:73:7d:93:f4:4f:b3:0e:d3:fa:86:e8:e5:4a:
a1:91:8c:6f:d4:78:f7:9c:a4:36:90:27:f4:8e:1a:
d2:5b:e3:3d:0f:b8:93:a3:ca:30:5c:49:6d:94:92:
24:4f:ee:87:7f:da:ba:6a:f4:94:6f:84:43:f1:21:
90:16:13:da:23:1a:24:63:fc:0f:38:8b:52:9a:9d:
f2:bf:b2:71:2f:8c:3b:b0:b9:2b:e4:af:93:8c:32:
2c:56:d8:77:8d:16:66:2e:ab:2c:11:72:79:92:bc:
31:c8:42:fe:42:eb:12:a5:f3:29:a9:39:7a:1a:e3:
f3:bf:f7:d2:65:92:12:de:6a:85:a0:2b:80:8a:c6:
b9:a9:7b:07:f2:2b:54:b6:39:0b:17:2c:b8:66:3f:
a0:dc:e6:c5:5b:df:58:09:4f:82:00:ec:08:af:6c:
c9:04:76:57:85:3a:c7:c5:ba:ac:54:6c:82:fa:41:
e0:73:8e:e2:42:fc:9e:b2:c9:33:7a:a5:cd:91:29:
5c:51:f3:a2:20:a4:f8:b5:2e:a7:31:da:03:b3:1e:
cd:c1:da:f8:2c:00:7f:4f:5e:86:8f:ec:fb:a9:0f:
8a:d6:7e:0e:9e:79:a9:10:07:7f:fd:34:a7:81:bb:
87:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:48:7C:F3:23:6C:E5:52:FA:48:59:AB:65:85:99:D4:B3:00:41:E0
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/882E3A46995F11EC8EE3AD7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
a6:81:11:cd:86:82:85:fa:e2:4a:9f:1e:2b:40:cf:e1:c2:cc:
55:5f:8b:bd:2c:3b:a5:f6:b9:4b:52:0c:23:95:fb:93:25:6b:
03:a1:dc:6b:48:75:39:fa:dc:fd:a8:c4:6b:be:60:2d:3c:01:
44:79:4e:17:42:58:68:4c:8d:e6:8d:08:b8:d9:0f:e8:bb:56:
bb:55:11:f6:3e:32:48:90:b9:26:c6:10:6b:d0:d0:6e:25:1f:
58:99:7c:a7:d8:07:95:bf:85:4c:64:52:4a:ff:16:29:1b:e8:
9d:b5:79:eb:82:8c:39:02:37:11:9c:4f:cb:50:9a:d3:7d:1e:
89:f4:ae:3c:3c:19:66:4f:ac:c2:1e:64:32:99:05:17:a7:c9:
df:d7:aa:2f:e7:7f:f6:f1:65:b7:28:17:7c:3a:1f:25:74:45:
8f:ea:13:d8:62:18:33:92:02:38:3a:18:02:37:9e:66:db:fd:
ec:1e:b8:92:f6:fe:d5:cf:13:9a:ff:de:a9:0d:1f:22:62:f5:
46:27:78:99:60:d9:47:1e:45:f0:15:b2:f5:a0:81:d4:e9:e9:
4c:9a:01:0e:2d:21:ab:c8:a8:f0:63:b5:32:44:60:9f:f1:27:
41:cd:2a:b4:fe:16:3b:af:7b:28:ca:c0:2f:6c:73:f4:c3:46:
26:3a:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org