Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/10524044B9E011EBAD14BB7DC4F9AE02.roa
File: 10524044B9E011EBAD14BB7DC4F9AE02.roa (raw, json)
Hash identifier: UJKvvwxV5ic3Wxt+KlMOd06vuTuXvglDd9ubG3hZpSA=
Subject key identifier: D8:D0:14:2D:46:04:55:AA:00:54:EE:09:48:B6:8B:84:73:CA:25:0D
Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Certificate serial: 086C
Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/10524044B9E011EBAD14BB7DC4F9AE02.roa
Signing time: Thu 22 Jun 2023 21:52:36 +0000
ROA not before: Thu 22 Jun 2023 21:52:36 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 9381
IP address blocks: 138.19.0.0/16 maxlen: 24
155.137.128.0/17 maxlen: 24
159.117.224.0/19 maxlen: 24
165.84.128.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156 (0x86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C
Validity
Not Before: Jun 22 21:52:36 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6494c2a4-7379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:af:b7:0a:67:43:28:89:c3:4a:2b:38:3f:
14:7c:4f:c2:25:51:ad:58:b5:ea:e0:29:c6:4a:79:
55:4a:d4:29:82:22:57:47:90:6a:a0:27:8b:2a:94:
c2:9e:ba:b0:c5:fe:65:a9:be:5c:3b:36:e4:18:fb:
43:7e:e4:fe:f1:7f:f5:15:9c:8b:05:e6:b5:22:62:
39:fb:82:85:ac:86:40:09:a4:5d:27:4c:0c:d3:ac:
2d:1d:55:e0:59:df:e2:60:fc:59:62:59:53:63:39:
4f:22:16:19:6d:1f:e5:76:51:3f:91:0b:44:85:c8:
87:f9:62:c2:af:62:2c:05:68:ac:74:89:f9:93:4e:
77:ab:11:6b:7c:0c:d1:26:6f:28:b4:ec:e4:87:f3:
de:0a:92:fd:7e:c5:ff:13:ab:f8:3f:73:f1:97:61:
32:2f:45:63:8d:17:da:59:6a:39:3a:c0:bd:76:84:
95:44:f2:a0:d2:17:ae:2d:3f:62:a5:01:b1:38:c5:
37:45:5e:fd:62:40:a7:57:9f:34:1d:e8:e1:3e:b9:
de:8d:de:a1:6e:40:2a:11:13:79:f0:03:0e:25:93:
8e:d3:99:8a:08:11:70:74:bb:7d:f0:b9:09:3e:6d:
e4:6b:6c:d9:fa:be:69:1b:b9:28:f1:d3:fc:e8:db:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D0:14:2D:46:04:55:AA:00:54:EE:09:48:B6:8B:84:73:CA:25:0D
X509v3 Authority Key Identifier:
keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/10524044B9E011EBAD14BB7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.19.0.0/16
155.137.128.0/17
159.117.224.0/19
165.84.128.0/18
Signature Algorithm: sha256WithRSAEncryption
35:83:23:b6:3c:c2:15:84:d5:75:e4:ed:01:96:0d:a8:03:9b:
98:9a:9e:bf:02:14:11:b0:ec:a1:18:98:cc:c7:44:d4:57:d5:
4c:e6:37:4d:b6:2f:5d:48:c9:b3:3b:a5:a6:91:ef:d1:d9:a1:
c0:98:3e:76:b6:cc:4b:ae:6c:ff:1c:0b:3a:21:83:00:1a:a7:
98:8d:1d:f7:fa:d4:05:eb:f7:20:49:1f:3c:c3:93:f8:e2:eb:
5c:fc:0f:df:74:ac:a2:87:23:60:2a:0b:c9:48:b3:27:60:bb:
93:5b:5e:d1:f5:f1:b1:69:c9:29:6b:c7:40:28:de:66:3f:37:
f7:97:f0:8a:72:34:66:69:c4:5f:2e:c3:09:5d:e0:3d:76:fc:
3f:c1:20:6d:54:92:c6:1b:63:f2:17:8a:e0:5a:2b:64:a1:0c:
03:70:bf:8b:ec:27:78:c7:02:7b:67:26:6f:68:fa:b1:7f:52:
7f:e4:4b:d1:2a:60:1e:15:27:73:75:00:29:64:41:ea:aa:10:
6d:74:8f:8d:3f:00:4b:d4:88:00:c9:cf:7d:f3:a8:82:51:3a:
c0:a3:60:40:fd:47:13:a1:2c:aa:e2:89:64:59:47:f9:a1:6d:
01:0a:1b:c4:c7:24:e9:e6:f1:5d:0b:48:e6:4d:47:fd:55:1d:
30:1f:8b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:57:46 2025 by rpki-client