Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/7D71B190CCE611EC896F0580C4F9AE02.roa
File: 7D71B190CCE611EC896F0580C4F9AE02.roa (raw, json)
Hash identifier: TPqr7dyU3OrKdx9cXgNsFku9cbXf2+qDiiAIEUfXMNQ=
Subject key identifier: 4A:7C:36:FC:5E:A3:98:24:21:4A:2B:18:D5:65:C0:F9:D1:82:3E:D4
Certificate issuer: /CN=A912A517/serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807
Certificate serial: 0EBC
Authority key identifier: 10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/7D71B190CCE611EC896F0580C4F9AE02.roa
Signing time: Fri 06 May 2022 02:44:47 +0000
ROA not before: Fri 06 May 2022 02:44:47 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 55850
IP address blocks: 101.53.192.0/19 maxlen: 19
150.107.172.0/22 maxlen: 22
202.74.33.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3772 (0xebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A517/serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807
Validity
Not Before: May 6 02:44:47 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62748b9e-8d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:1b:f5:c8:9e:84:51:08:4f:26:41:48:1c:
4e:f3:ae:9f:cb:4e:b6:65:eb:b8:94:fd:28:b4:bb:
05:7a:16:04:49:11:49:b9:86:9f:46:ab:65:38:61:
9f:9f:6e:f2:70:f7:5a:a1:c8:ec:82:af:ff:fb:3a:
87:ea:83:b7:4e:51:18:1b:1b:4a:c8:9d:25:8f:58:
5a:c9:3f:77:62:f8:a4:c4:9e:05:9e:21:96:37:50:
a2:98:a2:d5:fb:51:23:82:91:62:a1:15:e1:cf:ce:
ff:e5:36:1e:08:8c:04:7f:8d:fc:ae:fe:74:25:44:
7d:e9:bc:ba:f4:f1:45:97:8d:cf:d4:b1:0d:37:e3:
21:6b:52:e8:c3:7e:f3:e6:16:0a:3e:4d:88:34:51:
45:68:11:2c:cc:1a:9a:11:79:2d:41:01:dc:fc:7a:
d5:85:79:b9:c2:68:e4:db:1f:61:79:6a:68:8a:47:
da:26:94:84:2f:0a:66:75:2b:3e:14:96:df:63:e0:
5b:1a:c9:ef:64:2f:0b:ed:b7:31:fb:9a:e3:f7:c8:
85:6c:9b:a4:0e:85:ec:b6:0d:97:c4:e1:94:3c:63:
a1:02:68:5d:9b:61:d8:8a:0d:20:e8:b1:f6:de:9d:
18:e6:c6:c7:3c:a8:8d:11:28:7a:f4:f6:31:af:b1:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7C:36:FC:5E:A3:98:24:21:4A:2B:18:D5:65:C0:F9:D1:82:3E:D4
X509v3 Authority Key Identifier:
keyid:10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/7D71B190CCE611EC896F0580C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.53.192.0/19
150.107.172.0/22
202.74.33.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ca:29:0d:86:0a:ae:44:fb:48:03:56:c9:9a:a4:9d:c2:a0:
ea:d8:75:64:7f:b1:d9:31:4d:ee:f0:de:05:2c:84:fd:50:bb:
8e:a2:cd:13:4b:52:77:f6:cb:7a:6a:f7:c9:46:fd:87:97:ef:
a2:a6:5a:c6:18:59:4a:e8:f9:18:54:22:68:76:18:61:1d:d9:
3f:d7:e6:63:92:4c:d7:8a:04:fe:d3:4d:58:4b:ef:7b:a4:74:
cf:5e:48:95:9a:35:f7:6d:70:b4:80:94:31:67:66:34:43:74:
d4:ef:7d:d7:8b:09:33:4e:9c:4f:aa:3a:5e:b1:ee:cb:02:4d:
9a:be:82:13:09:9d:64:61:bb:b0:c8:f4:b3:50:33:cf:0f:2c:
07:20:f7:93:06:f6:67:cc:bb:2d:d1:d6:bb:51:bc:c9:10:38:
e8:fd:04:81:e1:77:c0:64:b8:11:2f:aa:cc:c6:cb:3e:ad:9c:
ae:d1:6d:06:fd:7e:e3:8e:77:30:28:6e:17:c3:8c:02:74:9c:
b9:25:3d:bc:09:a1:ca:bb:00:9f:5f:49:94:cd:11:cd:32:7e:
2c:82:5a:77:44:85:38:db:c9:f8:d4:65:40:dd:04:0e:59:b9:
7e:5d:e9:54:c2:18:eb:d2:9d:31:fe:30:1f:27:67:45:00:74:
01:8a:d8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org