Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/4F1A912A929A11ED80DFBC7FC4F9AE02.roa
File: 4F1A912A929A11ED80DFBC7FC4F9AE02.roa (raw, json)
Hash identifier: Wmclm85MCTsZM9CapYSifzXD0dxITh7lEIlBrC9sE+Y=
Subject key identifier: 8F:91:39:EE:E0:1C:E7:2F:22:3A:F1:83:36:8D:2D:5C:31:CE:F9:DF
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0944
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/4F1A912A929A11ED80DFBC7FC4F9AE02.roa
Signing time: Thu 12 Jan 2023 16:58:17 +0000
ROA not before: Thu 12 Jan 2023 16:58:17 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 140594
IP address blocks: 113.203.242.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2372 (0x944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Jan 12 16:58:17 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63c03c29-c007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:83:d8:dd:96:3f:6c:0d:47:12:b6:5c:25:
06:7f:a9:1d:74:86:f1:02:96:cf:6e:24:b5:67:75:
16:57:d7:e7:0d:67:ab:e3:e8:2d:9c:f7:95:67:88:
f1:6d:ba:e5:53:bc:38:57:9e:79:eb:dc:33:27:ee:
9e:5e:b0:de:c8:42:ed:48:67:2b:56:bd:4b:5e:ae:
0f:4b:f4:13:b3:78:f2:62:9a:56:36:bb:4d:d4:d6:
07:07:30:03:0c:85:f8:75:6a:74:7c:df:6e:ee:5a:
7b:86:3f:ef:62:24:59:9b:26:ff:16:99:bf:e0:c1:
3c:fc:19:d1:bb:77:5e:b5:0f:1f:15:22:a9:5c:92:
46:62:3d:0a:63:f1:7c:7b:53:8c:7c:cb:a1:61:11:
98:b7:5a:b7:d7:35:43:a7:95:1a:d2:58:12:66:42:
86:aa:c8:96:8c:fa:d7:a4:f6:2d:6c:ae:89:ab:fa:
e6:28:ce:c8:46:1f:44:3c:4f:45:53:5f:80:b4:8d:
42:ab:e3:44:aa:f3:1b:fe:5a:06:09:b2:3b:a8:42:
e9:49:9e:16:b5:a2:c5:78:d6:6d:6b:0b:4d:bd:de:
b5:a1:36:e9:1b:18:c9:16:ec:3a:79:32:ff:1b:bb:
f4:0b:78:75:12:27:f9:25:e7:77:aa:1f:7b:0b:ac:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:91:39:EE:E0:1C:E7:2F:22:3A:F1:83:36:8D:2D:5C:31:CE:F9:DF
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/4F1A912A929A11ED80DFBC7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.242.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b8:b9:07:19:28:26:9d:4b:ca:c8:9a:47:fd:e2:8c:3b:c8:
2c:d8:df:55:80:55:a8:dc:4d:c8:af:47:da:bd:3c:4f:69:84:
7d:46:4f:e8:cd:05:0e:1e:d8:a7:ef:65:8f:33:9e:82:3f:37:
66:0c:68:8b:3c:44:ff:8c:f0:09:05:81:09:f8:29:89:1e:9c:
1c:07:0f:f0:b3:81:0b:ca:66:9a:f3:7d:65:e2:27:c5:d0:99:
77:30:d9:85:20:93:1a:a8:35:8a:66:e3:d6:9c:15:e5:d9:bd:
01:72:9d:d0:82:10:93:20:00:40:18:39:ed:94:3c:da:90:8d:
f5:86:aa:3c:da:6e:4f:c3:08:31:1d:21:67:dd:98:27:6a:ea:
d3:de:09:7a:6e:63:b7:d8:b7:de:c2:56:13:f4:f9:30:63:c3:
55:5e:c9:d4:80:9c:b4:ae:bc:99:67:7b:01:83:c8:c8:44:a6:
2c:00:95:f0:aa:0b:a0:09:42:b2:e9:63:4f:a5:1e:aa:36:8b:
4e:f9:96:45:6c:f7:7d:7b:5c:9e:3f:bc:59:c0:e9:c7:56:99:
43:a0:4c:79:fd:a9:1c:0e:26:e7:f0:4b:74:ab:42:a6:79:17:
d2:cb:fc:e0:e2:7e:d1:6a:e5:0c:59:51:67:1c:fa:3c:1f:83:
d9:bc:92:1d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB
MURFRjcxOTAwHhcNMjMwMTEyMTY1ODE3WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2MwM2MyOS1jMDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArvaD2N2WP2wNRxK2XCUGf6kddIbxApbPbiS1Z3UWV9fnDWer4+gtnPeVZ4jx
bbrlU7w4V55569wzJ+6eXrDeyELtSGcrVr1LXq4PS/QTs3jyYppWNrtN1NYHBzAD
DIX4dWp0fN9u7lp7hj/vYiRZmyb/Fpm/4ME8/BnRu3detQ8fFSKpXJJGYj0KY/F8
e1OMfMuhYRGYt1q31zVDp5Ua0lgSZkKGqsiWjPrXpPYtbK6Jq/rmKM7IRh9EPE9F
U1+AtI1Cq+NEqvMb/loGCbI7qELpSZ4WtaLFeNZtawtNvd61oTbpGxjJFuw6eTL/
G7v0C3h1Eif5Jed3qh97C6wfswIDAQABo4IClTCCApEwHQYDVR0OBBYEFI+ROe7g
HOcvIjrxgzaNLVwxzvnfMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw
NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjY5RTcvNDZBQUQ2QjI5MDQwMTFFQUE2ODhCRTQ1QzRGOUFFMDIvNEYxQTkxMkE5
MjlBMTFFRDgwREZCQzdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABxy/IwDQYJKoZIhvcNAQELBQADggEBAAm4uQcZKCadS8rI
mkf94ow7yCzY31WAVajcTcivR9q9PE9phH1GT+jNBQ4e2KfvZY8znoI/N2YMaIs8
RP+M8AkFgQn4KYkenBwHD/CzgQvKZprzfWXiJ8XQmXcw2YUgkxqoNYpm49acFeXZ
vQFyndCCEJMgAEAYOe2UPNqQjfWGqjzabk/DCDEdIWfdmCdq6tPeCXpuY7fYt97C
VhP0+TBjw1VeydSAnLSuvJlnewGDyMhEpiwAlfCqC6AJQrLpY0+lHqo2i075lkVs
9317XJ4/vFnA6cdWmUOgTHn9qRwOJufwS3SrQqZ5F9LL/ODiftFq5QxZUWcc+jwf
g9m8kh0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 06:08:45 2025 by rpki-client