Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/CC3EB91853E611EC949BFB3DC4F9AE02.roa
File: CC3EB91853E611EC949BFB3DC4F9AE02.roa (raw, json)
Hash identifier: ZE99iVffJTFdAsGu2di0mfYqeebgYLZsmB6zEq2pB4M=
Subject key identifier: 64:D7:75:A3:9D:6C:61:4F:70:BE:1E:F8:41:E9:DF:3D:6A:D9:C8:66
Certificate issuer: /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Certificate serial: 25E1
Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/CC3EB91853E611EC949BFB3DC4F9AE02.roa
Signing time: Fri 03 Dec 2021 03:12:08 +0000
ROA not before: Fri 03 Dec 2021 03:12:08 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 40065
IP address blocks: 43.243.120.0/24 maxlen: 24
43.243.121.0/24 maxlen: 24
43.243.122.0/24 maxlen: 24
43.243.176.0/22 maxlen: 22
103.227.84.0/22 maxlen: 22
183.90.184.0/24 maxlen: 24
183.90.185.0/24 maxlen: 24
183.90.186.0/24 maxlen: 24
183.90.188.0/24 maxlen: 24
183.90.190.0/24 maxlen: 24
183.90.191.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9697 (0x25e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Validity
Not Before: Dec 3 03:12:08 2021 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=61a98b07-170c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:68:6c:34:61:22:c2:a6:b5:1f:60:83:fa:
2b:6a:e2:2d:56:41:88:a4:b8:23:08:66:f6:08:15:
59:03:bc:60:3c:52:cc:40:80:df:19:6f:a4:c7:88:
72:45:4b:83:4c:2a:c6:04:a6:05:83:00:9d:63:07:
c7:ed:5b:a6:98:60:c8:44:88:4e:f0:d2:f4:7f:e2:
f4:48:33:bd:9a:21:cd:11:c4:f7:eb:aa:d2:32:15:
35:79:57:4c:21:67:87:e6:68:f8:ae:cf:33:cd:90:
d4:c5:cb:78:46:e2:f9:f0:be:24:96:d3:d5:b2:1f:
7f:2a:23:4d:b3:54:71:5f:1f:eb:d7:71:87:60:ff:
7f:b1:f3:c6:ed:65:a1:0a:97:8d:db:60:49:e5:22:
f2:5f:98:7d:78:b8:d1:c7:87:03:64:44:4f:ab:8e:
27:3e:23:17:b6:70:54:83:fd:15:00:33:21:95:35:
c2:29:08:e2:6b:fa:e2:a0:48:e4:36:82:be:e4:36:
6b:5e:c6:f6:f4:f7:a3:ad:c6:63:e4:1e:eb:11:58:
71:69:69:5e:6e:37:d5:3b:d9:8c:4d:dd:9f:f8:42:
5a:16:d2:a1:00:8b:52:27:53:7d:04:b8:c1:97:56:
5e:e6:83:ca:47:7b:32:9d:09:12:03:35:90:2b:7f:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D7:75:A3:9D:6C:61:4F:70:BE:1E:F8:41:E9:DF:3D:6A:D9:C8:66
X509v3 Authority Key Identifier:
keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/CC3EB91853E611EC949BFB3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.120.0-43.243.122.255
43.243.176.0/22
103.227.84.0/22
183.90.184.0-183.90.186.255
183.90.188.0/24
183.90.190.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:4f:d9:16:f7:55:dd:ed:51:a1:d2:c0:91:64:c0:62:6c:33:
53:56:39:86:5b:70:3f:e9:30:dc:37:8e:8b:64:e6:0e:90:f9:
f1:63:3a:57:a7:09:0d:35:d7:a1:d9:dc:33:78:7b:2f:b0:f8:
d3:8c:c5:0c:ee:53:38:83:87:65:cd:80:67:2d:e9:41:ed:af:
0e:ff:d8:2e:8a:d2:4b:d8:dc:3b:f8:4e:31:65:ca:b9:48:34:
f0:e9:9f:df:fe:5b:cb:7c:f8:24:8b:b2:1f:ca:ae:9d:14:b2:
7b:c7:29:83:b4:e3:32:10:eb:13:79:41:2f:2d:30:ca:2d:53:
61:3f:0b:47:9c:e2:57:ac:e4:0a:94:4d:55:db:29:f3:7c:8f:
76:e9:34:7f:ce:b2:e7:f7:9a:d2:64:00:f1:f0:d9:58:5d:1c:
ef:d0:5f:42:7b:04:fb:38:58:08:d8:82:4f:80:35:26:44:c8:
0d:84:96:20:fe:27:34:4c:6e:c0:55:0b:3d:de:f3:3f:6e:55:
c2:b9:26:c8:32:03:1c:84:bf:a6:3b:d8:95:4b:62:aa:78:ef:
bb:ec:c4:a4:4c:89:94:d4:76:e9:aa:88:be:11:f3:39:28:dd:
34:39:2a:0d:5d:8b:cb:69:71:ff:aa:14:ed:a6:1f:24:9b:68:
bb:82:63:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:26 2024 by rpki-client on console-ams.rpki-client.org