Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/A06E3EE482E911EC83CFCB2BC4F9AE02.roa
File: A06E3EE482E911EC83CFCB2BC4F9AE02.roa (raw, json)
Hash identifier: wIKKUrev/g83CvGd2sKt6Ms6TydhNLcE3cfjg60M1Ps=
Subject key identifier: 59:CB:6E:3A:FB:58:DD:29:B2:92:F5:37:AD:5D:68:A0:3A:DE:4B:EB
Certificate issuer: /CN=A918A311/serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A
Certificate serial: 3332
Authority key identifier: 5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/A06E3EE482E911EC83CFCB2BC4F9AE02.roa
Signing time: Thu 20 Jul 2023 15:10:44 +0000
ROA not before: Thu 20 Jul 2023 15:10:44 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 23992
IP address blocks: 27.121.104.0/24 maxlen: 24
202.90.34.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13106 (0x3332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A311/serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A
Validity
Not Before: Jul 20 15:10:44 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64b94e74-e4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:f8:a6:c5:ae:08:e7:0f:8c:7f:cd:50:e4:
fa:68:59:b5:ad:83:ba:9d:bf:c9:fc:c3:83:23:f4:
a5:52:ec:d7:b9:cc:96:93:14:fd:57:1a:a4:0c:81:
76:30:24:1c:83:8e:22:4d:8b:ff:03:11:91:b7:10:
2b:ee:6c:92:2b:49:33:2a:47:94:8f:7f:db:95:02:
30:f5:9d:7e:af:d5:2a:27:00:fe:5c:cd:23:a5:e1:
a5:e4:11:d3:91:90:20:ee:77:ba:91:68:07:8f:d1:
42:d4:9c:9c:b8:c3:26:da:cd:03:43:c5:f8:c4:92:
09:6f:14:34:9d:4d:3c:07:1b:75:71:dd:eb:05:35:
e7:fc:02:47:db:a8:bf:ee:65:9a:ed:9a:d2:ec:61:
bd:a3:1d:f1:df:26:91:46:95:a6:c7:3f:b6:47:c6:
33:02:4d:08:47:a5:c9:f7:bc:d3:01:29:e6:8f:67:
78:00:43:3e:2b:1b:ab:21:ca:cc:21:fc:de:d6:59:
df:dc:25:28:96:85:40:f4:e8:61:a1:7d:1f:82:f9:
d8:ae:bb:51:33:57:18:e2:bb:23:a9:ea:2c:04:05:
7b:dc:93:49:df:d4:3d:d6:3f:f2:93:2c:8d:d8:43:
e5:7b:35:26:84:5b:46:11:3c:51:e2:99:c2:2a:e0:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:6E:3A:FB:58:DD:29:B2:92:F5:37:AD:5D:68:A0:3A:DE:4B:EB
X509v3 Authority Key Identifier:
keyid:5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/A06E3EE482E911EC83CFCB2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.121.104.0/24
202.90.34.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8b:70:7a:e1:db:51:af:2c:dc:94:ee:c7:8a:6f:67:7c:9a:
f4:a4:49:a8:9c:b7:26:14:b8:e3:8e:e5:9a:ea:cb:e4:f8:c1:
72:98:be:ec:18:66:f7:65:df:ec:1f:d5:04:d0:fd:89:64:3d:
38:62:9a:8a:e6:d0:2b:23:40:86:67:ce:42:65:88:da:c8:7f:
f6:1a:eb:f6:88:6a:8b:c5:92:e3:6a:6c:46:ce:2c:47:28:db:
43:c3:e6:94:1b:96:24:3e:41:71:a7:77:0e:28:d1:96:9a:83:
f5:09:e0:e4:65:ad:e9:9f:47:77:43:3e:ca:33:dc:fb:a0:22:
13:3f:8b:d0:0c:72:e2:21:e6:29:67:19:a8:8c:8a:90:fc:65:
aa:92:e7:8f:9d:53:df:48:a9:05:a7:2d:77:05:ad:b0:ea:cc:
d0:de:f5:52:75:fa:42:c0:fc:87:3b:0b:d1:36:33:05:a2:53:
fc:76:c2:44:51:24:6d:de:7e:0b:2b:76:51:23:b6:5f:59:28:
79:77:77:b0:86:36:8a:dd:dd:a2:b9:48:6a:d3:78:1e:e3:b8:
76:0c:ea:a8:ec:38:9d:d7:00:dd:9d:09:3e:9e:5e:d3:19:01:
b0:d8:fd:94:44:fc:9d:f2:f3:21:c5:88:3a:89:c5:2a:39:e1:
3c:c6:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org