Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/A7D108BCB12211ECADC6301EC4F9AE02.roa
File: A7D108BCB12211ECADC6301EC4F9AE02.roa (raw, json)
Hash identifier: 1kM9TSCVjUL3NFTaNwfUHmsnab5N3TFwcsSOUvIGAUc=
Subject key identifier: BE:7D:49:E6:C3:9E:B0:71:D5:DE:31:6B:1A:0D:A4:5B:D8:02:BE:7A
Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Certificate serial: 04C0
Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/A7D108BCB12211ECADC6301EC4F9AE02.roa
Signing time: Thu 31 Mar 2022 18:44:55 +0000
ROA not before: Thu 31 Mar 2022 18:44:55 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 137498
IP address blocks: 103.56.4.0/24 maxlen: 24
103.56.5.0/24 maxlen: 24
103.56.6.0/24 maxlen: 24
103.56.7.0/24 maxlen: 24
103.110.216.0/24 maxlen: 24
103.110.217.0/24 maxlen: 24
103.110.218.0/24 maxlen: 24
103.110.219.0/24 maxlen: 24
2402:9040::/32 maxlen: 32
2402:9040::/36 maxlen: 36
2402:9040:1000::/36 maxlen: 36
2402:9040:2000::/36 maxlen: 36
2402:9040:3000::/36 maxlen: 36
2402:9040:4000::/36 maxlen: 36
2402:9040:5000::/36 maxlen: 36
2402:9040:6000::/36 maxlen: 36
2402:9040:7000::/36 maxlen: 36
2402:9040:7000::/48 maxlen: 48
2402:9040:8000::/36 maxlen: 36
2402:9040:8000::/48 maxlen: 48
2402:9040:9000::/36 maxlen: 36
2402:9040:a000::/36 maxlen: 36
2402:9040:b000::/36 maxlen: 36
2402:9040:c000::/36 maxlen: 36
2402:9040:d000::/36 maxlen: 36
2402:9040:e000::/36 maxlen: 36
2402:9040:f000::/36 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216 (0x4c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Validity
Not Before: Mar 31 18:44:55 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6245f6a6-bdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:51:e3:48:48:e6:05:d6:01:e3:dc:a1:de:
4a:24:db:2e:74:22:d6:94:96:3c:08:15:c2:87:d9:
f0:4d:f5:a4:9e:de:58:5d:69:46:27:22:8e:6c:f4:
55:50:c7:ef:60:fb:e1:dd:c7:b3:f3:25:42:f2:4e:
de:d3:ad:ef:5b:21:f4:d7:83:d6:1d:19:2f:81:82:
8e:f7:17:07:85:cc:17:c9:31:ad:97:c8:20:7c:cc:
58:ef:74:56:31:4d:ee:d5:84:b6:61:42:bf:8d:cc:
da:84:da:fd:70:80:d0:a5:5b:c3:0e:8b:fb:ab:22:
77:8f:aa:7e:0e:25:59:76:47:57:2a:e3:e6:5c:9b:
52:b2:5c:3e:58:3f:f0:be:a4:15:1c:26:0a:5b:b9:
27:c3:49:fd:3e:55:84:32:9f:18:8f:94:0e:02:86:
84:02:a5:19:9d:d4:9a:87:cf:32:96:55:a3:50:5a:
a7:88:19:e6:54:e3:e2:ed:67:45:0d:43:15:a8:f2:
2c:99:08:0b:de:2c:b3:a0:c1:55:c0:73:a8:60:90:
71:37:07:47:c0:90:cc:cc:0b:73:0a:8c:7d:59:10:
b6:5c:ac:20:7e:3f:9c:8b:3b:45:a1:ce:fd:a9:ca:
0d:5c:ae:b5:cf:43:f1:6a:ba:53:b8:0d:43:46:76:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7D:49:E6:C3:9E:B0:71:D5:DE:31:6B:1A:0D:A4:5B:D8:02:BE:7A
X509v3 Authority Key Identifier:
keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/A7D108BCB12211ECADC6301EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.56.4.0/22
103.110.216.0/22
IPv6:
2402:9040::/32
Signature Algorithm: sha256WithRSAEncryption
9a:24:75:c1:fc:9d:99:03:bd:89:16:da:19:da:49:c0:41:05:
80:25:05:e2:dd:97:69:1b:de:f2:3a:87:2a:a9:1b:6c:dc:e2:
da:c1:d4:76:04:fc:93:bf:3a:f3:ee:04:71:88:3c:29:2d:b5:
b5:4c:ff:aa:cd:17:4e:71:7f:55:9b:3f:9d:19:49:65:6c:38:
28:15:6a:10:35:75:1e:ad:f5:38:74:8c:3e:90:bd:f5:2b:4a:
bd:14:8a:46:ef:38:70:04:c4:9f:c8:52:2d:67:d4:c7:e0:95:
c3:78:ad:1f:30:c2:8c:41:01:53:c8:f3:57:18:5f:9d:00:56:
7c:fa:dd:45:e8:31:b5:99:6f:80:7c:cc:34:ef:57:e0:ea:74:
9a:80:ea:37:51:24:83:91:14:44:eb:33:dc:7d:90:db:0c:67:
72:2d:36:0c:fd:ce:71:ac:c3:1c:54:73:73:f1:9b:17:f9:f7:
20:e1:4d:48:87:b6:55:d8:21:cd:f1:b6:7e:cf:28:54:5a:ec:
9e:a7:90:29:9f:85:4e:91:95:c2:6c:fd:ab:d0:dd:65:d6:3a:
c4:5f:1c:ff:44:b8:8e:76:63:a4:24:86:ae:e1:fe:c4:56:c2:
af:c0:df:37:d5:e6:b4:0a:af:a2:d5:cc:1a:4b:80:52:86:71:
1b:27:d8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org