Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/B8B98FA0DC5111EC90C2B55FC4F9AE02.roa
File: B8B98FA0DC5111EC90C2B55FC4F9AE02.roa (raw, json)
Hash identifier: +KkC3NTweWLxXPz+fZTL/zMM1zadZQaeV4QrP61+DB4=
Subject key identifier: D2:D9:32:25:CF:FA:D0:D7:19:CB:E2:82:61:F1:C4:15:87:3B:96:12
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 3ABC
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/B8B98FA0DC5111EC90C2B55FC4F9AE02.roa
Signing time: Thu 26 May 2022 04:40:09 +0000
ROA not before: Thu 26 May 2022 04:40:09 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15036 (0x3abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: May 26 04:40:09 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=628f04a9-f9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:d9:1b:49:c3:4a:5f:79:09:3f:84:57:e2:
ad:58:78:49:2b:04:6d:c5:4b:47:d3:f8:d0:43:85:
28:78:be:1b:30:a1:0d:d8:be:a5:17:1c:ea:fc:34:
53:e6:d2:f6:c5:b3:97:30:ea:78:f4:10:b0:cb:bd:
73:a0:f9:1a:83:88:04:b4:66:b0:20:fa:29:4f:41:
60:d4:76:e5:9a:a5:25:a8:41:3e:ee:a0:b6:cc:2a:
68:03:d9:a9:b8:23:da:8f:38:72:ec:6e:ca:20:f5:
df:b1:a7:70:62:e2:dc:65:bd:5d:5b:b3:f6:95:0b:
34:8f:fe:50:57:95:2d:65:cc:13:00:94:be:6f:4d:
82:0e:a0:61:51:9c:8c:07:2c:23:c2:4e:92:ea:8a:
6a:8b:dc:70:c5:43:9c:41:3e:b6:7d:35:14:4e:4a:
43:81:5b:3c:e6:7f:3b:d9:44:35:33:0b:b3:d1:37:
98:f1:89:e1:8a:a3:0a:9a:14:01:de:1d:07:d4:53:
83:4c:fd:f9:8e:05:e9:92:c7:a6:b8:da:3e:db:c8:
71:89:04:f1:b6:e3:fc:0b:20:10:d6:a5:c5:8d:09:
b1:66:ba:59:88:e0:7c:75:ef:f9:e4:4b:e6:a9:70:
ce:98:5a:46:17:9e:ea:cc:e9:6a:97:8f:bc:d5:2c:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D9:32:25:CF:FA:D0:D7:19:CB:E2:82:61:F1:C4:15:87:3B:96:12
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/B8B98FA0DC5111EC90C2B55FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
c8:b3:b9:5a:d5:f2:45:8f:97:94:0e:38:d8:72:2c:0d:82:e4:
02:24:ee:14:05:28:b6:78:d7:7c:fb:8c:a2:c2:bc:56:42:cd:
84:49:2b:f9:0e:f8:70:83:e5:9a:f1:f2:28:f0:c4:11:35:a9:
b8:5e:8c:f8:9b:e1:fe:d6:65:47:5c:df:a4:74:af:e9:bd:82:
91:2a:01:1b:42:2a:22:7f:5e:4e:0d:d4:cd:f1:1c:4c:dc:e3:
ea:89:86:9a:18:b7:2a:c2:3c:94:bd:03:8e:cc:f6:25:ca:a9:
1c:18:96:5f:ef:6c:ed:b9:76:1b:9f:95:4c:24:62:82:54:47:
9c:b1:5a:c0:96:26:ef:9a:7b:4c:76:cc:c0:25:04:43:8b:c3:
10:09:e4:7e:b1:ac:49:a6:ec:2e:3f:2e:b8:36:f0:d3:a0:d4:
1a:46:ee:3f:1b:2c:df:55:fb:54:70:23:75:a5:47:8e:f6:7e:
f6:50:7e:0d:86:03:47:60:56:df:a3:7b:ad:4c:14:a2:a3:9a:
09:cf:f3:e2:8c:b4:98:f0:2f:bf:75:a4:29:ea:0e:5c:c3:aa:
7e:c7:99:d5:65:d4:3d:ab:c8:bb:e2:d0:a7:bb:c0:2c:a3:da:
f4:77:ab:17:96:a8:e2:f5:25:fb:03:78:70:35:53:8d:20:5b:
be:2f:4a:18
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICOrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC
RkE4OEQwMTUwHhcNMjIwNTI2MDQ0MDA5WhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjhmMDRhOS1mOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0crZG0nDSl95CT+EV+KtWHhJKwRtxUtH0/jQQ4UoeL4bMKEN2L6lFxzq/DRT
5tL2xbOXMOp49BCwy71zoPkag4gEtGawIPopT0Fg1HblmqUlqEE+7qC2zCpoA9mp
uCPajzhy7G7KIPXfsadwYuLcZb1dW7P2lQs0j/5QV5UtZcwTAJS+b02CDqBhUZyM
Bywjwk6S6opqi9xwxUOcQT62fTUUTkpDgVs85n872UQ1Mwuz0TeY8YnhiqMKmhQB
3h0H1FODTP35jgXpksemuNo+28hxiQTxtuP8CyAQ1qXFjQmxZrpZiOB8de/55Evm
qXDOmFpGF57qzOlql4+81SyFBQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNLZMiXP
+tDXGcvigmHxxBWHO5YSMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE
NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTAwMUUvMzVGQTBGNTYxRDc4MTFFMjkzNzcxRkM0MDhCMDJDRDIvQjhCOThGQTBE
QzUxMTFFQzkwQzJCNTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnq9owDwQCAAIwCQMHASABDfdTgDANBgkqhkiG9w0BAQsF
AAOCAQEAyLO5WtXyRY+XlA442HIsDYLkAiTuFAUotnjXfPuMosK8VkLNhEkr+Q74
cIPlmvHyKPDEETWpuF6M+Jvh/tZlR1zfpHSv6b2CkSoBG0IqIn9eTg3UzfEcTNzj
6omGmhi3KsI8lL0Djsz2JcqpHBiWX+9s7bl2G5+VTCRiglRHnLFawJYm75p7THbM
wCUEQ4vDEAnkfrGsSabsLj8uuDbw06DUGkbuPxss31X7VHAjdaVHjvZ+9lB+DYYD
R2BW36N7rUwUoqOaCc/z4oy0mPAvv3WkKeoOXMOqfseZ1WXUPavIu+LQp7vALKPa
9HerF5ao4vUl+wN4cDVTjSBbvi9KGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org