Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/CCA13788CE1011EC9D1F9E28C4F9AE02.roa
File: CCA13788CE1011EC9D1F9E28C4F9AE02.roa (raw, json)
Hash identifier: aECI+AIin0Jj6JJHUPhrXWoGIolCjwk0aa+zB916PMQ=
Subject key identifier: 81:F0:1C:CD:41:E8:06:21:98:2B:C8:B7:1F:82:50:F5:9A:FB:DA:90
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 39ED
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/CCA13788CE1011EC9D1F9E28C4F9AE02.roa
Signing time: Sun 08 May 2022 04:20:08 +0000
ROA not before: Sun 08 May 2022 04:20:08 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14829 (0x39ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: May 8 04:20:08 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=627744f8-d3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:b6:1b:75:64:16:b6:75:5e:df:8a:22:f5:
a4:8c:9a:6f:3a:5c:c3:37:56:3a:14:ec:31:16:e7:
e5:ba:0b:e1:5b:d5:3b:35:71:09:12:fb:5a:e6:a2:
9c:a4:f6:78:8e:8b:10:de:70:99:62:ff:8d:d9:45:
db:11:03:ce:b8:02:8b:7f:dc:1b:01:7b:e2:5d:84:
85:14:c1:63:3f:17:9b:26:66:d8:35:22:a9:97:39:
3d:c0:ee:75:ba:7a:5a:d7:09:fd:23:e6:c3:dc:83:
f2:7b:9e:ae:da:30:49:06:7b:27:f6:56:23:5f:d8:
2b:57:1f:7e:87:c4:7b:a6:4d:31:33:ba:98:18:ad:
49:83:4f:74:54:03:22:21:db:4f:76:ff:63:c0:03:
5d:8b:c8:ba:0a:01:d4:37:ef:e6:65:17:8d:f8:29:
c5:09:e3:a9:13:ef:e1:6c:87:e0:0a:cb:17:ac:82:
ee:a1:a3:5b:06:3e:be:45:51:f7:9f:fc:a9:1a:16:
6a:2a:1b:49:62:f8:f4:27:e3:bd:bc:bd:54:7e:30:
9d:84:97:67:4c:23:65:d3:8f:32:18:d7:cb:3f:c0:
20:4e:1a:26:65:de:63:5a:96:f1:08:78:3e:12:6a:
63:28:fd:43:9f:4c:5b:64:88:3a:50:22:23:26:f9:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F0:1C:CD:41:E8:06:21:98:2B:C8:B7:1F:82:50:F5:9A:FB:DA:90
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/CCA13788CE1011EC9D1F9E28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
62:2d:64:1f:86:f5:d5:4d:5b:91:31:78:7d:75:a2:40:9d:94:
73:9a:39:9c:c0:de:5f:ca:be:e4:c9:d5:cd:5d:c9:25:b0:01:
56:fc:5c:60:5f:e5:5d:a6:6d:da:fb:a7:a9:59:c6:b5:4e:ba:
6e:61:ac:34:b3:63:b6:25:6b:31:06:4a:7f:ef:f7:d5:58:2b:
d0:74:90:1f:9a:3e:91:e0:69:21:1b:2a:7e:28:d3:5f:c2:bf:
9b:41:e6:aa:fa:d3:83:dd:f8:46:34:9f:f2:31:99:57:d8:14:
be:de:0c:7e:31:84:a7:a1:d5:6b:36:a8:a3:f9:89:f7:09:8d:
92:8d:c5:12:0a:fb:26:34:b7:46:d6:c6:e9:61:32:ca:bf:d1:
96:77:a5:34:05:68:6f:9d:18:25:be:67:dd:0c:d3:1e:ad:95:
69:08:b4:2c:75:70:25:9b:47:8f:99:c0:ef:14:f7:59:8d:e0:
94:fc:47:b7:c3:b2:9d:48:e1:0d:dd:b1:23:05:37:6f:be:a6:
11:3d:e6:af:ef:6d:61:a0:0c:9a:08:db:dc:12:39:48:2f:b8:
19:1a:8b:1f:69:57:9c:4b:e3:b6:84:b5:f5:eb:9f:e5:67:ff:
c1:77:74:63:43:3d:14:9e:8c:97:db:9f:6c:f1:22:fb:24:96:
13:3b:4b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org