Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/C781654A215211ECA878C776C4F9AE02.roa
File: C781654A215211ECA878C776C4F9AE02.roa (raw, json)
Hash identifier: 9o4fDsqy4gslxpEYYqcvBWWlP/ISizLG5HfIuWJF0Bk=
Subject key identifier: 6F:AF:51:83:83:E5:1C:89:D3:56:CB:4D:CE:6D:ED:F6:60:D2:1E:82
Certificate issuer: /CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2
Certificate serial: 0857
Authority key identifier: 08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/C781654A215211ECA878C776C4F9AE02.roa
Signing time: Sun 26 Dec 2021 17:55:39 +0000
ROA not before: Sun 26 Dec 2021 17:55:39 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 135438
IP address blocks: 103.111.12.0/24 maxlen: 24
103.111.13.0/24 maxlen: 24
103.111.14.0/24 maxlen: 24
103.111.15.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2
Validity
Not Before: Dec 26 17:55:39 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61c8ac9b-32c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:00:fd:d8:74:5a:be:56:03:db:cc:cf:af:
26:5c:e1:3f:e9:12:3b:a3:80:01:47:4f:a6:b6:9d:
6d:d9:45:f9:41:90:b5:ed:d5:90:e4:30:a5:3b:4e:
f2:82:ac:ed:2b:2f:0d:8d:2a:a2:36:b1:57:57:24:
4b:d8:68:fc:03:b2:5e:55:1a:c3:a6:9b:27:7f:85:
3b:e3:92:b3:1a:bd:f9:30:1e:33:c9:af:6f:81:f4:
59:c7:1e:91:3d:fb:35:90:3d:9b:a6:61:5e:5c:f2:
ad:b7:b0:60:38:2f:24:4f:ae:0f:c6:4f:e9:ce:c8:
5c:aa:71:8a:a3:05:cd:cb:5f:b0:09:2a:21:c6:a8:
b2:3e:60:12:41:0e:66:12:d9:63:ee:42:89:b7:2d:
c6:07:37:fc:8a:a6:98:31:d3:ef:e8:ba:9b:39:e5:
a2:c0:5a:b7:78:b4:74:d1:64:4c:fa:1a:45:f1:24:
62:e8:79:be:88:da:7a:82:13:1c:6b:ba:1a:0d:f8:
27:23:d4:14:0a:70:ee:d7:c8:0b:7e:02:7c:85:c7:
49:ad:5d:79:72:5c:e2:1f:97:80:c7:c4:2e:49:11:
e5:45:b6:7a:00:af:58:a0:ac:9d:9b:d6:16:37:76:
92:3e:ba:02:7e:0a:64:3b:75:d1:63:1e:38:3c:51:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:51:83:83:E5:1C:89:D3:56:CB:4D:CE:6D:ED:F6:60:D2:1E:82
X509v3 Authority Key Identifier:
keyid:08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/C781654A215211ECA878C776C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.12.0/22
Signature Algorithm: sha256WithRSAEncryption
14:7a:ec:62:53:7c:4c:5c:3c:88:bc:97:a7:98:98:d8:f4:ac:
9a:9a:d5:40:66:60:02:d4:ac:25:bc:55:3a:50:b7:07:1e:89:
56:6d:ac:90:0e:bd:7b:bd:89:c5:e7:c8:70:84:8a:c7:d0:65:
01:6a:8e:da:19:97:eb:d1:95:7d:1e:41:53:37:fe:08:90:ea:
e6:3f:46:06:7b:5d:8d:97:0c:07:b9:d3:4c:2d:02:6c:07:17:
68:be:cc:54:28:92:0f:00:5c:56:74:26:f8:cf:61:ac:23:16:
14:51:42:b2:79:7e:cf:ab:6c:5a:6c:d8:cf:9f:4f:1a:e1:cb:
c4:fe:24:54:8a:69:14:54:e3:df:d5:2c:90:42:f5:15:bd:dd:
4f:e6:e0:4e:2e:20:04:61:9a:60:28:7e:35:5a:89:75:fb:ed:
27:26:d3:34:f0:96:c3:e1:84:b9:13:b7:cb:8e:82:51:64:64:
3d:66:d4:de:1c:9b:41:aa:87:94:77:8d:5a:87:90:b0:f2:41:
59:09:4b:d7:c6:bf:69:1a:07:81:12:0f:e5:fe:6f:67:72:53:
68:8e:ca:fe:3d:00:b3:e0:8e:2d:0c:e3:fc:83:c0:de:5f:8d:
2e:a4:ca:7b:1f:7b:7e:ae:bb:f6:42:0e:d3:f8:87:65:32:8f:
d6:2c:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org