Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/5C36919E829F11EC9F68A71DC4F9AE02.roa
File: 5C36919E829F11EC9F68A71DC4F9AE02.roa (raw, json)
Hash identifier: sXkrodHCtSBuVeAWZsB4wmulsjWljRUns/1bi5zsXug=
Subject key identifier: 53:C7:EB:9A:8F:CA:D7:EC:46:B3:95:11:4A:B5:C4:B1:A1:69:4C:E6
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0896
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/5C36919E829F11EC9F68A71DC4F9AE02.roa
Signing time: Thu 15 Sep 2022 10:00:30 +0000
ROA not before: Thu 15 Sep 2022 10:00:30 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 142300
IP address blocks: 223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2198 (0x896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Sep 15 10:00:30 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6322f7bd-b538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c6:e1:75:25:06:d2:d0:75:c3:f7:5a:7c:f7:
6e:e8:ac:6d:c4:89:bc:b6:04:96:75:98:4f:6d:d6:
05:25:95:90:da:da:3b:bd:ea:3f:53:be:c7:f5:f8:
66:f9:bb:68:9d:99:60:04:45:19:44:13:be:1e:58:
01:81:a9:e5:e2:a2:7a:e2:a6:41:40:a5:58:07:34:
1d:8c:13:fe:12:36:5f:4d:e2:56:f6:cf:a3:02:1d:
d8:94:da:7d:42:24:ee:d4:2f:b4:40:54:05:57:cb:
57:41:f1:39:66:8d:21:5b:1c:d6:ba:42:4b:03:fc:
d7:3e:7d:6e:5f:5d:fd:1d:9b:5e:a9:42:22:91:9c:
88:85:30:c2:e1:8e:0a:3c:1d:ff:59:61:8d:86:de:
43:e8:a2:0f:bd:a0:c8:8f:78:b9:18:29:af:e5:27:
af:ab:8b:13:34:8b:57:d9:78:41:fd:c0:d0:3a:9a:
fc:24:3a:64:8b:39:15:06:69:37:6f:d3:6b:96:ad:
07:76:27:6a:32:b2:b3:b6:5e:ab:8e:34:69:cf:12:
a6:7f:2d:84:24:5c:bb:3b:b8:58:6f:ee:14:52:c3:
69:8e:aa:24:c4:58:a6:8c:e9:8e:0d:df:32:35:a0:
c8:4b:9a:28:ab:df:0c:7f:53:3d:93:f0:57:23:fb:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C7:EB:9A:8F:CA:D7:EC:46:B3:95:11:4A:B5:C4:B1:A1:69:4C:E6
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/5C36919E829F11EC9F68A71DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.228.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:b3:96:f0:7b:31:4b:85:80:d5:e6:9e:aa:6e:30:c7:83:18:
d7:b4:67:21:78:92:ba:59:ce:7b:47:33:ed:b3:d1:d8:96:31:
95:41:1d:5e:22:91:b9:02:54:77:a9:06:2e:04:01:a6:7b:5f:
19:d7:d6:f6:3e:ac:f5:59:69:4f:14:ab:80:13:e9:6d:65:85:
91:67:8d:cf:c2:3f:08:6c:eb:db:7f:c9:4b:40:f6:1d:5a:85:
2a:c0:bf:81:5c:5b:16:29:7a:66:22:09:73:e2:01:be:bd:c7:
1f:20:2b:87:8d:77:95:b2:29:57:09:87:22:d1:d7:fa:ef:75:
9e:a3:23:f4:21:4b:d4:66:e3:3a:3c:a1:87:8e:09:d6:36:a8:
d2:d0:70:4a:67:98:db:c4:09:26:5d:28:4e:1d:5e:ba:e4:0f:
ac:1c:e9:44:45:ee:4d:e8:13:73:de:a1:80:dc:de:b1:75:98:
15:9a:a6:14:26:9a:c3:2e:12:6b:c1:b1:92:a0:85:db:0f:82:
a5:df:cf:55:8a:8c:8d:64:2e:a1:20:0a:f5:8d:0a:53:5e:23:
a0:bd:0d:1c:75:b4:78:44:f0:24:39:b2:a2:9e:2c:dd:e1:de:
48:c2:e6:27:5b:d9:e5:4c:41:ea:e6:25:c5:69:28:e3:fd:ad:
04:ce:28:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:26:06 2025 by rpki-client