Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/85BE9ABC228611EC90E53C58C4F9AE02.roa
File: 85BE9ABC228611EC90E53C58C4F9AE02.roa (raw, json)
Hash identifier: fuf12YB1ppoKj7Y+4bBTqhjqumrv9Onafmr/FMUM7hk=
Subject key identifier: BE:48:53:E2:35:1C:C0:4B:DC:28:6B:C6:CB:1A:FB:79:9D:64:86:5C
Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial: 05AF
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/85BE9ABC228611EC90E53C58C4F9AE02.roa
Signing time: Mon 28 Mar 2022 10:48:29 +0000
ROA not before: Mon 28 Mar 2022 10:48:29 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 38818
IP address blocks: 49.0.128.0/19 maxlen: 19
49.0.160.0/21 maxlen: 21
49.0.168.0/21 maxlen: 21
49.0.176.0/22 maxlen: 22
49.0.184.0/21 maxlen: 21
203.34.37.0/24 maxlen: 24
203.174.26.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1455 (0x5af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Validity
Not Before: Mar 28 10:48:29 2022 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=6241927c-961d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:3b:70:65:61:87:b7:4f:23:f4:48:84:b1:
52:f5:2f:1c:7f:11:73:d6:63:c2:99:55:ab:80:dd:
4e:e8:e5:00:d1:53:84:53:9b:77:0e:91:13:1b:56:
8d:59:ab:aa:98:c3:35:7f:57:a9:eb:ff:98:6c:5c:
47:2b:5e:b4:28:4c:d3:82:b8:86:78:71:c2:19:8b:
07:2b:fc:39:d8:43:2a:4c:91:b5:5d:39:42:1e:b6:
d7:91:c0:dd:b5:74:87:d5:7d:1e:08:ea:ac:90:f3:
16:31:af:e6:18:17:cb:4f:b2:df:1b:07:96:ef:d8:
23:da:e5:85:f1:0d:29:8b:5f:fe:b3:34:cc:05:86:
4c:84:f7:06:e7:de:cd:b2:9b:e5:e8:b2:58:75:04:
aa:f0:80:3e:bf:5a:64:02:9d:92:7c:60:2a:ea:e3:
3e:f2:2d:dc:79:af:3d:89:74:18:8c:fe:d4:0e:dc:
84:e5:1a:07:10:fe:93:18:34:9e:9c:0d:35:3f:2c:
72:10:af:3d:1c:78:55:33:b7:30:55:f3:5a:e0:49:
20:b4:2b:ae:93:14:ac:7e:28:02:b7:47:7d:23:ce:
8e:86:29:ab:1b:de:b4:f5:a0:a9:83:17:96:a0:7b:
79:e1:4b:d2:c1:80:81:4a:84:db:32:0d:ab:ab:88:
c3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:48:53:E2:35:1C:C0:4B:DC:28:6B:C6:CB:1A:FB:79:9D:64:86:5C
X509v3 Authority Key Identifier:
keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/85BE9ABC228611EC90E53C58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.0.128.0-49.0.179.255
49.0.184.0/21
203.34.37.0/24
203.174.26.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:01:0e:4e:56:36:16:22:20:dc:43:22:28:f6:d3:de:ea:be:
23:26:17:d9:10:5f:45:a3:40:49:da:60:45:19:0c:1b:89:41:
49:56:8b:84:e5:39:65:0f:b6:ae:5f:7b:b4:84:fe:13:f9:3d:
b1:76:6e:4a:95:b4:73:6e:8e:91:85:24:15:62:39:53:80:44:
94:63:a6:71:e2:11:c5:a2:49:6c:a8:6b:b6:64:90:91:7e:c6:
ca:71:f0:76:14:45:70:e0:84:4b:06:c2:6d:86:a6:f0:eb:ad:
7d:f3:b1:b7:12:b5:39:c4:10:fe:a8:33:f4:be:29:e9:8d:59:
1c:46:00:b2:f8:4e:11:8c:6e:35:a6:35:9c:19:05:71:d6:84:
57:e9:89:0a:32:8e:e5:16:33:8e:cf:ba:26:d6:11:e7:a9:d0:
d1:d7:95:69:da:ca:b5:d9:0b:bf:16:9b:8a:37:47:8a:21:fc:
97:09:ff:01:e8:b4:6a:a9:40:6f:2c:37:26:9c:11:4f:de:f0:
bb:7b:fe:b4:f5:bd:9c:b7:66:1f:b9:4a:40:a6:ee:9f:49:e6:
ef:fb:26:b2:c9:3f:bc:17:d1:37:b1:e5:29:25:52:cb:3a:02:
22:0b:70:a5:0b:32:af:8e:55:79:4c:b4:d3:d0:81:5a:5e:be:
0a:5a:15:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-ams.rpki-client.org