Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/27D9B282248211EA9551262AC4F9AE02.roa
File: 27D9B282248211EA9551262AC4F9AE02.roa (raw, json)
Hash identifier: AaGWLS7oCH86can1GnnCvjfBc3K8W0mcDPpJSjwRJs4=
Subject key identifier: BF:66:9B:53:2A:33:E4:7A:40:50:2D:23:22:4C:0A:6E:E6:29:8C:9D
Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
Certificate serial: 0A2E
Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/27D9B282248211EA9551262AC4F9AE02.roa
Signing time: Tue 30 May 2023 21:02:10 +0000
ROA not before: Tue 30 May 2023 21:02:10 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138533
IP address blocks: 157.119.59.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2606 (0xa2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
Validity
Not Before: May 30 21:02:10 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64766452-9b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:54:8b:4e:96:ad:e5:8a:d9:35:80:8b:97:
a6:66:38:59:54:90:65:b4:cc:42:b6:0a:a4:b5:d5:
71:91:58:71:92:e2:99:87:4b:72:46:ec:04:86:55:
dc:d0:bd:a8:b7:b3:04:74:5a:6a:ce:26:95:71:52:
39:35:7d:f9:8f:43:00:02:0c:c9:be:e0:08:9b:f2:
60:84:0f:73:26:5e:80:f5:d4:c7:1a:f9:8b:47:84:
81:e2:c9:e8:7e:22:d3:f1:78:26:71:80:a7:d7:15:
6e:d8:f1:60:35:5e:3f:99:48:54:25:c3:1c:c4:32:
28:99:39:25:70:5c:4a:60:5e:24:07:7a:84:8f:af:
86:6c:53:35:30:4c:b9:b3:b6:87:de:2a:e4:d5:4b:
65:5f:25:1b:40:cb:6e:5a:49:a0:61:b9:ff:c0:7e:
65:f5:12:18:d1:35:74:72:9b:4e:67:28:54:c9:1d:
59:60:6e:52:44:c3:e6:d3:79:02:65:73:ba:f1:90:
68:26:b6:94:57:69:d7:9d:4a:b4:78:3d:ed:04:b6:
e2:b7:6c:ce:f0:22:29:a0:3f:33:a9:b8:7b:6f:98:
e5:3b:73:6e:af:8e:f8:c7:04:85:87:22:61:e5:2a:
20:da:df:fe:29:d1:e3:4f:1d:f0:54:24:d4:c3:a2:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:66:9B:53:2A:33:E4:7A:40:50:2D:23:22:4C:0A:6E:E6:29:8C:9D
X509v3 Authority Key Identifier:
keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/27D9B282248211EA9551262AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.119.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5f:35:17:c5:ce:3e:46:1d:dc:de:75:33:b6:57:81:60:2c:
fe:8e:12:0c:42:53:0c:a2:86:a7:de:24:96:61:8f:3d:8c:71:
7c:7d:78:92:3a:40:92:7d:ac:f3:b1:e8:f7:a1:c8:d5:01:82:
52:87:7c:dc:84:85:d3:75:dc:51:8b:75:f9:b6:7e:3e:8e:33:
d4:4d:1a:97:93:a5:15:e5:de:7c:77:66:23:65:66:31:af:61:
00:3d:68:e6:29:49:0d:0d:9f:d9:c8:a4:a7:a7:09:d6:1e:d3:
8f:86:6a:36:c4:2b:be:80:3b:62:74:20:0c:30:f5:ac:5c:0b:
38:cc:37:f2:e7:cb:ad:42:4c:1c:0b:c3:8e:45:49:b8:49:e1:
54:c7:ab:21:f1:25:51:32:cc:11:c7:74:87:32:fb:67:22:33:
c5:20:ea:49:26:90:b2:07:bd:92:c4:e3:df:76:f4:d1:b6:31:
5f:2a:8e:a6:ca:2e:af:5e:e6:4a:f5:5e:f0:fc:d2:a2:af:8a:
cd:41:bb:c2:9c:d8:49:a6:0f:91:50:e5:28:5a:34:18:4e:f9:
d8:2f:30:63:5e:b8:ad:06:b2:a1:7a:4b:e9:79:e0:7c:5e:03:
76:90:48:48:ce:2c:13:35:b5:cb:13:a7:1a:0a:a1:e8:96:4b:
bb:2a:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org