Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/EA96557A8FC711EC85C9690DC4F9AE02.roa
File: EA96557A8FC711EC85C9690DC4F9AE02.roa (raw, json)
Hash identifier: I9pgP0sKZbWu/XImGcsbeKX1FKvfxtJQUtAjoRjjYAU=
Subject key identifier: 5B:F8:5A:08:DF:0C:2D:C0:05:86:7F:69:9B:37:37:C1:44:3D:66:BE
Certificate issuer: /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Certificate serial: 26A0
Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/EA96557A8FC711EC85C9690DC4F9AE02.roa
Signing time: Tue 01 Mar 2022 16:22:11 +0000
ROA not before: Tue 01 Mar 2022 16:22:11 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 40065
IP address blocks: 43.243.120.0/24 maxlen: 24
43.243.121.0/24 maxlen: 24
43.243.122.0/24 maxlen: 24
43.243.176.0/24 maxlen: 24
43.243.177.0/24 maxlen: 24
43.243.178.0/24 maxlen: 24
43.243.179.0/24 maxlen: 24
103.227.84.0/22 maxlen: 22
183.90.184.0/24 maxlen: 24
183.90.185.0/24 maxlen: 24
183.90.186.0/24 maxlen: 24
183.90.188.0/24 maxlen: 24
183.90.190.0/24 maxlen: 24
183.90.191.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9888 (0x26a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Validity
Not Before: Mar 1 16:22:11 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=621e4832-4b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:65:b7:8d:63:98:21:4f:dd:d9:17:bb:ac:
ac:88:f7:55:dc:93:22:a2:c4:31:85:57:ec:c5:b0:
90:aa:09:92:f8:b2:f7:6a:4a:e5:37:1b:34:0c:ae:
2f:a2:9f:4f:a5:97:31:3e:0c:83:32:f0:0f:8d:b5:
13:7e:c1:02:1f:ce:bb:ee:ed:f1:24:7b:ad:49:6b:
b3:5c:4a:64:62:1d:7a:77:92:40:ad:57:2b:cc:d3:
67:a3:32:2e:06:12:14:ec:e2:bf:25:3c:34:b4:bd:
bc:fe:46:f7:91:74:ee:e1:ac:30:a9:06:85:e0:be:
39:52:db:a3:14:a4:70:a7:52:54:bb:87:3f:2f:f8:
11:e2:03:5b:b5:c8:f1:86:76:30:3d:96:f3:27:4a:
ca:b8:5c:06:0b:6b:b3:00:93:c0:ec:01:b9:01:d3:
da:4b:3a:35:3e:dd:fb:82:50:ff:70:57:a8:ba:13:
fd:65:e9:cb:e4:2f:6e:af:80:42:54:f9:8a:0f:75:
dd:37:61:9b:8b:6e:dc:80:31:b3:09:4e:18:7a:5b:
d7:98:c7:4f:d5:23:9a:0e:d6:e6:6e:47:9d:aa:eb:
4c:fd:98:5b:79:7b:f3:4c:fa:c3:23:01:59:59:b7:
57:ea:ab:bb:13:73:8b:00:de:06:da:8f:f6:8e:9b:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F8:5A:08:DF:0C:2D:C0:05:86:7F:69:9B:37:37:C1:44:3D:66:BE
X509v3 Authority Key Identifier:
keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/EA96557A8FC711EC85C9690DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.120.0-43.243.122.255
43.243.176.0/22
103.227.84.0/22
183.90.184.0-183.90.186.255
183.90.188.0/24
183.90.190.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:f8:22:b3:26:9f:55:ba:ba:ca:17:0b:3d:2f:ca:a2:74:9f:
96:39:c5:a2:c6:6f:88:82:4b:91:79:a0:a9:33:60:3f:ac:2e:
74:f6:36:7a:a8:3d:13:b2:55:ba:44:1d:82:f8:1f:92:ad:25:
be:03:56:b7:97:7d:8d:db:15:76:df:2e:9e:30:0c:ac:dd:5a:
5e:5e:3b:b0:b2:23:b6:9c:cb:e7:35:2f:18:5c:cc:dc:02:fc:
95:d9:34:3e:af:a5:b6:c7:07:46:9e:03:b6:cc:36:55:6a:cd:
9f:10:e2:d0:84:34:28:48:13:4d:98:99:c8:62:d6:54:3e:75:
40:46:89:36:e4:6c:85:e9:47:f0:10:cc:78:bd:eb:f7:10:33:
a1:c4:ff:a9:0f:5e:60:5a:d8:56:7b:1a:69:c7:77:31:83:5b:
17:a7:ee:1d:31:73:2d:14:7d:2d:60:b5:a4:5d:4e:c5:ea:3e:
21:fa:f2:58:06:2b:6a:78:49:ca:ac:0b:7d:71:66:9a:9f:56:
21:b7:e8:d8:fe:d4:3f:61:ba:2c:7f:ce:4c:df:f0:80:b4:68:
61:4d:42:7e:64:3a:86:dd:82:bd:ed:3b:2e:28:1c:e5:d6:1d:
c1:51:8f:f1:93:cd:89:44:1c:35:a5:7e:c8:d9:07:e8:18:e5:
c9:1d:4f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-fra.rpki-client.org