Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/FB178DB63DCC11EDA47AB52FC4F9AE02.roa
File: FB178DB63DCC11EDA47AB52FC4F9AE02.roa (raw, json)
Hash identifier: ImLi+ZlYSvenLaEbp7uu7hV+5PUg8CgkchLlI7X+6O0=
Subject key identifier: A8:31:ED:CC:2D:F7:CC:F2:F0:89:13:E1:BC:6E:48:96:A5:E4:41:DE
Certificate issuer: /CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2
Certificate serial: 0A99
Authority key identifier: 08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/FB178DB63DCC11EDA47AB52FC4F9AE02.roa
Signing time: Mon 26 Sep 2022 18:56:51 +0000
ROA not before: Mon 26 Sep 2022 18:56:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58715
IP address blocks: 103.111.12.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2713 (0xa99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2
Validity
Not Before: Sep 26 18:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6331f5f3-14d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:56:d3:5e:92:75:cd:1a:12:f4:e4:0a:12:
2e:02:c3:a0:c8:41:19:ab:19:95:65:a0:5e:08:8f:
8b:e8:62:af:44:c9:52:68:e0:b7:88:f6:94:4b:3f:
d2:ae:98:4c:a6:fc:b5:e0:3a:c3:81:fd:f6:e8:61:
e7:64:02:1b:79:6e:45:38:93:7b:21:86:dc:91:1a:
28:77:c1:41:3b:f3:0a:0b:f2:b8:34:38:33:22:ab:
e1:14:70:e4:11:92:53:19:bf:28:b9:b3:c4:6f:e3:
c2:c8:9f:15:5b:8d:23:3b:46:ee:9a:b5:a6:80:83:
ca:4d:d2:26:fc:3e:12:8c:19:b3:cf:79:b0:12:dd:
3b:b6:ee:c8:54:4c:d7:36:80:53:11:7a:3a:6f:ed:
91:b4:ec:e6:a8:10:ab:0e:22:bf:5e:38:0b:37:d4:
73:86:e4:33:72:36:f5:be:9a:bd:be:51:5e:2c:78:
05:c5:1d:5d:1e:cc:23:a1:44:2f:0d:94:bd:ef:13:
0d:02:75:06:56:b9:c5:d7:59:af:39:a6:f4:f2:5f:
9c:09:9a:9f:e6:7a:1a:69:20:d3:01:79:c2:f1:5c:
3e:8f:d9:65:89:16:0c:f8:ce:b0:51:46:a3:2a:89:
f5:82:ce:2f:aa:ab:6b:a0:cc:51:de:a4:b3:31:b1:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:31:ED:CC:2D:F7:CC:F2:F0:89:13:E1:BC:6E:48:96:A5:E4:41:DE
X509v3 Authority Key Identifier:
keyid:08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/FB178DB63DCC11EDA47AB52FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.12.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:95:c1:a9:f8:43:f0:a9:3e:99:b4:42:aa:22:74:0f:55:8c:
ca:70:30:77:64:a6:dd:18:66:a1:6a:6a:2e:c6:75:fb:8b:fc:
b8:8e:45:11:20:68:e1:d2:23:30:8b:73:49:6e:c3:a0:79:65:
4e:71:3b:4a:de:48:ad:67:e1:28:1f:67:a0:6a:25:b6:2c:63:
98:4a:cd:4d:59:8e:ce:3f:9a:9e:4b:01:24:98:85:4b:b4:e7:
a1:ea:92:50:ad:e7:be:d7:dc:f4:26:83:23:ba:84:21:0e:14:
8b:48:ae:30:99:6e:51:3c:51:ba:f4:21:68:41:81:99:e6:3b:
a1:27:5c:93:bb:d8:9b:9e:2d:8c:b0:47:4f:d2:2b:79:80:59:
83:de:d8:39:e3:9d:4c:5d:1e:75:67:24:2a:9a:5d:a3:f9:b1:
23:8e:0a:41:0d:a1:8f:04:d0:90:8f:da:db:54:80:52:e3:71:
8b:0a:a6:ef:01:b1:87:b4:18:56:52:eb:e4:bf:46:46:c7:5c:
7e:53:5c:16:06:2f:df:2e:f0:84:35:b3:fa:2e:9f:f9:ac:28:
60:4f:6c:30:6b:9e:21:10:9f:1c:da:e0:aa:2c:34:eb:d1:1c:
30:62:a4:36:d6:d3:28:4a:19:cf:d5:c1:40:be:7d:d5:a1:ba:
aa:0e:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org