Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/13BF42F833E911ECB9A1D670C4F9AE02.roa
File: 13BF42F833E911ECB9A1D670C4F9AE02.roa (raw, json)
Hash identifier: ttxlgsIcWFa/u0NSh2P9hf5PoWqmyU9BbX7fQMisr/A=
Subject key identifier: 8C:6A:B4:EE:5A:70:8B:85:67:9C:51:EA:65:A5:15:ED:B9:2D:DA:8C
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 054C
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/13BF42F833E911ECB9A1D670C4F9AE02.roa
Signing time: Sat 23 Oct 2021 10:07:49 +0000
ROA not before: Sat 23 Oct 2021 10:07:49 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 140045
IP address blocks: 223.29.226.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356 (0x54c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Oct 23 10:07:49 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6173def5-6c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:82:c2:34:51:2e:4f:6e:45:5c:07:e5:b5:
85:de:ec:9d:e3:bb:7c:e4:be:42:92:5e:5e:fa:a0:
41:0c:53:62:6c:a0:62:eb:16:f4:9f:bf:13:6c:be:
b9:bf:82:11:d4:e2:59:6f:bb:5d:b5:07:a2:05:32:
96:a9:8a:71:a9:8a:92:3d:2b:50:14:20:f5:2c:cb:
35:b7:d2:17:57:64:8d:ac:49:9d:37:53:68:95:8c:
eb:a2:c5:2e:43:eb:ac:a3:c6:4a:58:62:fb:fe:11:
9b:e9:91:29:93:9c:d0:11:94:38:78:ba:63:10:48:
48:3a:c5:1e:01:74:eb:6a:02:77:29:05:68:da:65:
f6:6c:37:fb:6c:90:2d:48:fd:42:76:55:33:c5:29:
b3:c9:c4:0a:56:fd:b8:81:07:0e:32:fd:d5:f7:b7:
85:e8:2f:33:80:aa:99:67:c1:83:1c:9e:cf:31:f2:
7b:c4:44:e5:ce:80:76:ff:15:54:80:6a:b9:fe:2d:
84:2f:2c:2c:30:a5:0b:19:fd:09:5f:7a:1d:47:84:
bd:c8:c3:10:e8:80:15:90:92:1d:f9:76:86:69:8f:
04:45:bd:8c:07:23:8d:0f:42:6f:fa:24:0f:e1:e2:
df:44:3e:09:50:a8:c8:9b:81:c5:4f:6f:f5:10:15:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:B4:EE:5A:70:8B:85:67:9C:51:EA:65:A5:15:ED:B9:2D:DA:8C
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/13BF42F833E911ECB9A1D670C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.226.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:de:de:4d:f0:55:6d:cf:a9:7a:a4:0b:48:b4:e3:fc:89:de:
5d:62:a6:2d:5a:b8:fc:c2:45:95:2c:38:dd:0c:83:79:58:8c:
bc:95:ab:2c:55:b8:75:e1:f8:3f:36:70:2e:26:96:a9:1b:57:
45:c7:c1:5c:c7:19:ec:6e:72:f7:38:75:5a:80:cc:49:a8:08:
7a:d3:37:d4:e4:51:aa:68:29:22:fa:01:c0:35:38:33:5b:f7:
b1:79:91:8d:cd:dc:39:f5:3e:44:a3:3b:41:48:e8:52:dc:48:
9a:79:41:d5:64:1a:f0:12:a8:26:ec:e4:13:cd:26:ef:0f:29:
6b:14:97:11:b8:48:19:6e:35:a5:bd:84:a1:b4:07:83:05:4b:
bc:ee:d9:cb:9c:00:c0:ed:d5:cc:16:89:15:7c:4b:e7:0b:56:
7e:9b:bc:05:be:69:6b:81:49:39:57:dc:3c:30:ee:6c:4f:58:
c5:87:14:57:12:17:13:56:79:63:30:3d:96:f7:11:bc:98:17:
cb:b9:9b:7f:ec:c3:6a:01:f2:50:c7:f7:18:b5:b0:a5:17:1e:
b2:32:9f:68:0e:07:0a:88:f6:85:bb:d7:e8:2c:18:e9:7e:24:
d2:31:c5:a9:33:e2:c7:8c:a9:1e:cd:68:13:be:1e:b2:ad:a6:
cd:72:01:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:04:32 2025 by rpki-client