Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/3CCC4FC4C60611ECA38AF363C4F9AE02.roa
File: 3CCC4FC4C60611ECA38AF363C4F9AE02.roa (raw, json)
Hash identifier: 6MR7dkACk2JifcNoDmd35ciclMWlizbh1o5n8hl6pqw=
Subject key identifier: 32:7E:1B:10:AE:82:71:08:B8:C6:C0:03:7E:0C:BF:6C:87:A7:4B:C1
Certificate issuer: /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Certificate serial: 271C
Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/3CCC4FC4C60611ECA38AF363C4F9AE02.roa
Signing time: Wed 27 Apr 2022 08:44:24 +0000
ROA not before: Wed 27 Apr 2022 08:44:24 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 133115
IP address blocks: 43.243.123.0/24 maxlen: 24
183.90.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10012 (0x271c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Validity
Not Before: Apr 27 08:44:24 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62690267-bf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4c:38:d4:54:d2:82:9f:ae:e0:12:58:99:1c:
86:1c:b5:96:65:80:52:1c:5d:65:50:fe:88:1a:11:
e2:87:d0:b1:9b:6b:47:ac:a4:c8:97:89:e1:3a:78:
95:ef:45:d4:d1:6d:72:27:bd:f6:c3:ff:e6:01:2b:
ba:58:33:cb:db:7d:ce:36:a3:be:e6:40:dc:fa:4f:
da:75:76:3e:f5:75:12:43:8b:66:f6:3c:b6:28:e6:
51:4d:6b:6b:a5:2c:ee:aa:05:ff:98:08:53:ba:ba:
15:8d:be:2f:61:ee:8c:ef:3d:6b:a1:fe:37:31:c3:
c7:65:ad:6c:12:bf:81:c6:ca:b4:9c:1b:9b:a3:c9:
ae:fb:ca:6c:35:ae:15:88:44:51:f1:c9:40:c3:3e:
c0:d6:43:51:a5:e5:2b:12:7b:da:cb:e0:0d:f7:f4:
0b:bf:55:d5:a0:63:80:32:3b:de:cc:d5:c3:ce:fd:
90:2c:c7:b9:40:b3:03:dc:eb:6b:a0:fb:c9:89:42:
a4:cc:1a:71:ff:1c:fc:ee:c3:90:5c:15:12:93:a6:
21:18:52:05:d8:09:b4:fd:45:fd:0d:5a:be:ae:3c:
9c:e5:42:63:db:65:a3:33:37:1a:d1:0a:4b:78:91:
72:21:f2:de:95:ca:81:c1:b5:fa:00:70:da:63:83:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:1B:10:AE:82:71:08:B8:C6:C0:03:7E:0C:BF:6C:87:A7:4B:C1
X509v3 Authority Key Identifier:
keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/3CCC4FC4C60611ECA38AF363C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.123.0/24
183.90.187.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:81:65:0a:f8:a8:ea:0c:0c:0e:75:56:b8:c3:d6:2a:a4:61:
ba:36:67:2a:ef:69:b7:2a:11:63:51:7b:4a:f7:07:e9:d4:77:
f0:57:8d:13:10:16:39:eb:c0:c5:4b:46:9f:ac:94:6d:40:3e:
64:65:6a:c8:00:7b:ae:ff:4f:cc:3d:04:c7:45:8a:c5:05:e7:
f9:e2:8a:26:b9:60:85:92:a9:77:7f:d1:01:2b:f7:ef:99:ea:
21:24:50:72:0d:38:e6:3b:c5:84:a6:76:01:0f:63:e3:39:41:
23:43:5f:32:da:20:0a:10:30:8a:f5:1f:17:e8:7f:4d:f7:f1:
c3:f0:8e:8a:b3:cd:6f:35:9d:b2:24:9a:e2:b8:c3:56:30:22:
68:56:65:ea:e7:78:24:b7:0e:1a:6a:ee:37:ef:f1:7d:74:5b:
c6:a5:b3:d4:81:0c:9e:bc:b8:75:31:a5:2f:33:2e:83:59:17:
ca:97:5c:50:2a:3f:b6:b4:83:55:0a:99:c8:1a:b6:d4:21:59:
1e:4d:56:70:46:ef:b4:0e:bf:27:96:fc:12:55:1d:b3:d4:8e:
9b:ca:15:03:51:6b:20:03:fa:cb:1f:1f:9b:9e:a9:73:33:7c:
3f:66:97:ab:ce:69:c7:7e:e5:9a:09:d1:17:f2:e9:62:2a:15:
5c:e1:23:fa
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICJxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0E0OTYxMTAvBgNVBAUTKEEwMzk2OUJBRkZENjdBQUI3NUQ0OTM4MzdGQTFDN0M2
OUZGQjI3MTcwHhcNMjIwNDI3MDg0NDI0WhcNMjMwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjY5MDI2Ny1iZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4kw41FTSgp+u4BJYmRyGHLWWZYBSHF1lUP6IGhHih9Cxm2tHrKTIl4nhOniV
70XU0W1yJ732w//mASu6WDPL233ONqO+5kDc+k/adXY+9XUSQ4tm9jy2KOZRTWtr
pSzuqgX/mAhTuroVjb4vYe6M7z1rof43McPHZa1sEr+Bxsq0nBubo8mu+8psNa4V
iERR8clAwz7A1kNRpeUrEnvay+AN9/QLv1XVoGOAMjvezNXDzv2QLMe5QLMD3Otr
oPvJiUKkzBpx/xz87sOQXBUSk6YhGFIF2Am0/UX9DVq+rjyc5UJj22WjMzca0QpL
eJFyIfLelcqBwbX6AHDaY4PQNQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDJ+GxCu
gnEIuMbAA34Mv2yHp0vBMB8GA1UdIwQYMBaAFKA5abr/1nqrddSTg3+hx8af+ycX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTQ5Ni9GQjEyQTI3ODND
MEYxMUU0Qjc4OEZGNEFDNEY5QUUwMi9vRGxwdXZfV2VxdDExSk9EZjZISHhwXzdK
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29EbHB1dl9XZXF0MTFKT0RmNkhIeHBfN0p4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0E0OTYvRkIxMkEyNzgzQzBGMTFFNEI3ODhGRjRBQzRGOUFFMDIvM0NDQzRGQzRD
NjA2MTFFQ0EzOEFGMzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAr83sDBAC3WrswDQYJKoZIhvcNAQELBQADggEBAK2BZQr4
qOoMDA51VrjD1iqkYbo2ZyrvabcqEWNRe0r3B+nUd/BXjRMQFjnrwMVLRp+slG1A
PmRlasgAe67/T8w9BMdFisUF5/niiia5YIWSqXd/0QEr9++Z6iEkUHINOOY7xYSm
dgEPY+M5QSNDXzLaIAoQMIr1Hxfof0338cPwjoqzzW81nbIkmuK4w1YwImhWZern
eCS3Dhpq7jfv8X10W8als9SBDJ68uHUxpS8zLoNZF8qXXFAqP7a0g1UKmcgattQh
WR5NVnBG77QOvyeW/BJVHbPUjpvKFQNRayAD+ssfH5ueqXMzfD9ml6vOacd+5ZoJ
0Rfy6WIqFVzhI/o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-fra.rpki-client.org