Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/AC64021E99F611ECA0663D19C4F9AE02.roa
File: AC64021E99F611ECA0663D19C4F9AE02.roa (raw, json)
Hash identifier: Gzizh0vv9I90H5zqpNZig85nHQtiUywY7uhNaCPbYGI=
Subject key identifier: A2:9C:EE:60:27:16:4E:9A:37:B2:BB:12:B0:6C:EC:A7:31:A6:B8:48
Certificate issuer: /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Certificate serial: 26A4
Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/AC64021E99F611ECA0663D19C4F9AE02.roa
Signing time: Wed 02 Mar 2022 07:02:08 +0000
ROA not before: Wed 02 Mar 2022 07:02:08 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 133115
IP address blocks: 43.243.123.0/24 maxlen: 24
103.245.211.0/24 maxlen: 24
183.90.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9892 (0x26a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Validity
Not Before: Mar 2 07:02:08 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=621f166f-ca1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:a9:3d:be:59:4e:f7:a7:87:c4:68:35:84:
10:6c:42:eb:c7:43:16:ee:ef:4c:96:ca:e9:28:b0:
7e:96:b4:e2:bd:2a:e9:35:59:24:ae:d9:b9:c4:d1:
54:9e:a4:14:30:c3:dd:d1:82:99:d4:4c:82:d0:e7:
34:0b:de:33:8c:c0:6c:cf:eb:8c:26:9d:0e:33:f3:
40:38:1b:36:28:e2:4c:7e:59:33:96:20:0a:f8:6f:
12:e5:98:74:b2:45:d4:0a:b9:02:95:6f:52:0e:2b:
18:bd:eb:85:5f:d4:74:d1:66:ae:14:b9:33:b0:1d:
3c:27:88:ae:cf:74:b9:01:7d:ce:c7:b3:b5:3e:67:
0f:57:51:13:62:05:4b:70:fb:fd:eb:b7:12:76:32:
68:91:81:6b:1a:ff:eb:c9:69:45:19:a5:38:a9:54:
03:2e:5c:5f:47:6a:75:4c:67:95:76:ac:fc:dc:5a:
b9:1f:a9:02:7d:f6:9a:82:49:09:90:57:8b:7b:fe:
b2:d3:52:42:ca:26:4a:3b:6d:d8:06:b2:8e:49:ea:
ef:b0:07:20:a0:0e:c2:d8:52:60:3f:d3:64:fe:78:
7d:e8:bf:1c:b9:51:b5:2c:70:ec:49:8a:39:44:30:
02:cb:ee:61:f0:14:fe:92:f3:69:85:3c:ca:47:6b:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9C:EE:60:27:16:4E:9A:37:B2:BB:12:B0:6C:EC:A7:31:A6:B8:48
X509v3 Authority Key Identifier:
keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/AC64021E99F611ECA0663D19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.123.0/24
103.245.211.0/24
183.90.187.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:56:7c:4b:0c:71:18:7a:c0:6a:87:a6:05:67:14:35:07:d8:
1b:39:9d:69:bb:95:85:82:29:ef:e2:f5:25:12:17:64:ee:81:
af:83:b4:84:54:e3:86:c1:48:a6:57:21:59:4f:3e:a8:ce:ff:
bf:77:3b:75:f7:45:93:e8:b9:db:dc:4a:87:5b:76:17:a6:d8:
60:bf:7d:06:ee:18:54:a0:a8:e8:fb:4e:a4:27:dd:b9:3e:43:
4f:d1:db:e9:f3:07:e5:15:83:97:30:ee:11:b8:08:6f:fe:db:
ed:0b:fb:4a:5c:2f:bb:2a:e2:5c:6d:ed:bb:04:58:60:56:03:
bb:db:5d:85:05:2f:c1:d0:2d:4f:1d:ad:6d:6b:03:b9:e8:80:
16:1c:ad:bb:bf:b5:8e:cf:98:17:3e:9d:b9:db:0e:7e:1b:56:
15:14:5b:52:e5:cc:a0:0d:d1:b8:e5:d7:60:9f:44:c1:b1:81:
4e:7d:11:2d:64:bf:d4:2f:b7:33:1a:b0:59:2a:21:dc:30:7d:
2f:ed:bb:f9:7f:ac:5e:20:02:92:23:ac:ea:35:00:fb:ca:59:
bf:95:eb:64:70:67:02:e5:c3:f4:fa:c8:32:79:99:85:68:4f:
d4:87:75:f4:8d:17:9b:51:c9:bc:4c:78:a7:9e:91:9a:16:44:
6c:ed:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org