Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/DC78BCF0D5ED11EC88508878C4F9AE02.roa
File: DC78BCF0D5ED11EC88508878C4F9AE02.roa (raw, json)
Hash identifier: 8jhGc1XRVHfszQc31+wNwdRfZNRebkLWwsuKCCENa0c=
Subject key identifier: 6D:5D:FA:D0:28:AF:ED:5B:A8:53:C6:68:6C:76:8C:5B:23:47:9D:78
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 3A61
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/DC78BCF0D5ED11EC88508878C4F9AE02.roa
Signing time: Wed 18 May 2022 03:30:10 +0000
ROA not before: Wed 18 May 2022 03:30:10 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 3970
IP address blocks: 103.171.218.0/24 maxlen: 24
103.171.219.0/24 maxlen: 24
2001:df7:5380::/48 maxlen: 48
2001:df7:5381::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14945 (0x3a61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: May 18 03:30:10 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=62846841-a671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:71:19:4f:d4:ef:4b:d7:2e:71:df:49:db:
c1:f7:7f:af:98:a6:9b:02:66:e8:e7:1b:d7:af:06:
1b:10:2f:e8:05:b3:66:fd:7c:8f:14:e6:60:14:87:
98:f7:59:f0:ec:e6:c9:59:9e:3b:30:6d:10:1e:0a:
af:c4:b5:45:eb:86:0a:46:4a:59:03:a4:ec:f4:02:
27:5f:68:1a:8f:36:4a:65:5e:47:cf:8b:86:1e:9b:
59:a1:41:3b:75:24:47:0d:88:bd:25:b6:66:bc:8e:
4d:9a:5f:ba:ef:a8:e9:41:3d:16:e5:f4:63:78:61:
d2:27:08:99:7b:bb:2d:95:88:70:78:79:ca:7d:87:
2a:2e:fc:29:44:59:1a:6d:3e:bf:c7:5d:4b:d0:43:
9f:a5:29:51:21:65:be:9f:c9:70:19:e0:2a:08:bb:
9e:1c:30:1e:2e:32:e4:c6:bb:0e:0a:22:21:25:38:
04:1a:63:28:94:88:b3:93:26:49:a2:8b:18:77:1b:
f7:6a:1b:2d:29:1f:85:d7:61:be:0b:56:68:55:35:
4c:1b:c8:e3:f4:1a:80:de:b1:9d:1d:9b:5c:de:44:
7d:93:74:05:4c:57:11:0a:aa:fd:0c:1d:b4:07:cb:
e6:ba:b6:10:d9:a1:61:ae:71:ed:42:4f:51:52:65:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5D:FA:D0:28:AF:ED:5B:A8:53:C6:68:6C:76:8C:5B:23:47:9D:78
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/DC78BCF0D5ED11EC88508878C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.218.0/23
IPv6:
2001:df7:5380::/47
Signature Algorithm: sha256WithRSAEncryption
12:f1:fc:a9:db:78:86:fc:8c:b8:d1:b6:5f:6f:1e:f3:91:b5:
a9:11:16:c2:05:38:b9:35:38:44:85:84:ae:cf:2c:53:d1:55:
f6:f7:7d:2a:1d:e0:fc:f6:bc:7e:6d:c1:66:96:3c:38:58:22:
8c:74:b2:de:18:12:5b:ba:aa:75:8d:36:1b:33:c7:b6:ff:75:
fd:25:43:ea:f2:6c:0f:83:a4:2e:39:ad:e4:49:9a:1a:a2:a1:
b7:45:b8:9f:02:52:48:af:a3:e5:d0:81:d9:31:2f:36:14:1a:
a0:5d:00:1e:16:25:96:16:98:32:97:07:b2:9a:5e:44:28:ef:
9f:81:fc:d9:1c:80:04:7e:de:e8:33:11:14:48:87:6b:46:eb:
6c:27:1e:15:05:1d:08:90:2c:2e:4b:99:0f:fd:af:22:a4:ab:
43:1e:03:b0:5f:68:bb:44:fa:f5:7f:f3:e6:25:8d:4a:51:03:
75:79:7b:d0:ef:61:0a:6f:47:1a:55:e2:15:6e:80:2e:68:b2:
b1:7a:08:c8:9f:ac:da:6c:ce:8c:5f:78:b2:65:87:33:c3:b6:
6e:30:0a:ff:af:3d:71:c0:3d:f6:3e:5e:9e:cf:a2:c8:de:77:
bd:46:1a:7f:65:ae:b7:96:d2:07:7e:97:c8:14:a5:08:a7:b1:
71:e7:f8:a4
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICOmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC
RkE4OEQwMTUwHhcNMjIwNTE4MDMzMDEwWhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjg0Njg0MS1hNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyo1xGU/U70vXLnHfSdvB93+vmKabAmbo5xvXrwYbEC/oBbNm/XyPFOZgFIeY
91nw7ObJWZ47MG0QHgqvxLVF64YKRkpZA6Ts9AInX2gajzZKZV5Hz4uGHptZoUE7
dSRHDYi9JbZmvI5Nml+676jpQT0W5fRjeGHSJwiZe7stlYhweHnKfYcqLvwpRFka
bT6/x11L0EOfpSlRIWW+n8lwGeAqCLueHDAeLjLkxrsOCiIhJTgEGmMolIizkyZJ
oosYdxv3ahstKR+F12G+C1ZoVTVMG8jj9BqA3rGdHZtc3kR9k3QFTFcRCqr9DB20
B8vmurYQ2aFhrnHtQk9RUmWQ0wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG1d+tAo
r+1bqFPGaGx2jFsjR514MB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE
NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTAwMUUvMzVGQTBGNTYxRDc4MTFFMjkzNzcxRkM0MDhCMDJDRDIvREM3OEJDRjBE
NUVEMTFFQzg4NTA4ODc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnq9owDwQCAAIwCQMHASABDfdTgDANBgkqhkiG9w0BAQsF
AAOCAQEAEvH8qdt4hvyMuNG2X28e85G1qREWwgU4uTU4RIWErs8sU9FV9vd9Kh3g
/Pa8fm3BZpY8OFgijHSy3hgSW7qqdY02GzPHtv91/SVD6vJsD4OkLjmt5EmaGqKh
t0W4nwJSSK+j5dCB2TEvNhQaoF0AHhYllhaYMpcHsppeRCjvn4H82RyABH7e6DMR
FEiHa0brbCceFQUdCJAsLkuZD/2vIqSrQx4DsF9ou0T69X/z5iWNSlEDdXl70O9h
Cm9HGlXiFW6ALmiysXoIyJ+s2mzOjF94smWHM8O2bjAK/689ccA99j5ens+iyN53
vUYaf2Wut5bSB36XyBSlCKexcef4pA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org