Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/61C23888DDEE11EDA378B93AC4F9AE02.roa
File: 61C23888DDEE11EDA378B93AC4F9AE02.roa (raw, json)
Hash identifier: s6VljEow87fjFMoewWt8NI2UkdEM1EuuA01OW8GsxV0=
Subject key identifier: 3E:18:C2:25:F0:52:9E:86:EA:2C:20:B0:51:6F:C2:D4:E1:70:71:07
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0A24
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/61C23888DDEE11EDA378B93AC4F9AE02.roa
Signing time: Tue 18 Apr 2023 13:39:03 +0000
ROA not before: Tue 18 Apr 2023 13:39:03 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 136030
IP address blocks: 113.203.241.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2596 (0xa24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Apr 18 13:39:03 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=643e9d77-8920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:5c:f7:1e:f9:4e:1c:fd:67:bf:29:81:7f:
65:65:c6:a5:2b:cd:33:9a:ca:e7:ca:2b:da:cf:06:
3f:59:df:08:6f:ab:54:74:59:c7:9f:fc:d1:5f:b6:
69:08:4b:d8:71:9d:17:24:d6:ec:81:5c:d4:be:fa:
21:16:3f:c3:4f:13:e7:74:d2:9a:e6:1e:2a:68:72:
43:83:3f:84:cb:01:d6:5d:27:90:94:79:6c:a9:87:
7a:d0:8a:f7:80:f3:49:fa:bd:8e:06:82:88:04:08:
67:66:23:25:59:b8:bc:25:ae:ba:9e:64:51:02:cd:
3d:27:9a:87:30:eb:4a:c3:e4:37:d1:96:86:31:b6:
1c:aa:ec:50:79:53:75:24:e3:de:d4:95:56:8c:ae:
1a:4e:31:98:6e:ff:9a:a9:bf:ec:5c:5b:89:dd:d5:
27:58:88:e7:62:ed:10:36:c7:09:eb:f5:a9:dd:3a:
9e:e6:54:89:62:28:f7:bb:74:c8:60:69:3b:ea:e6:
a4:50:a0:27:4e:93:7d:d4:59:b4:a1:16:b9:3a:f8:
40:56:e6:5b:db:9f:3c:ea:1c:d3:6b:bb:4e:c4:08:
0f:d3:b6:e9:0d:f1:1d:99:97:2f:c0:44:3e:af:75:
c5:6b:3e:45:82:03:73:44:5b:5e:43:98:56:cb:7f:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:18:C2:25:F0:52:9E:86:EA:2C:20:B0:51:6F:C2:D4:E1:70:71:07
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/61C23888DDEE11EDA378B93AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.241.0/24
180.178.169.0/24
223.29.225.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8b:3b:ba:49:0c:e2:7e:ae:02:fb:11:09:01:4a:a9:f9:83:
d3:e6:b1:c3:0e:71:81:a9:38:1a:ef:5f:03:61:6c:1d:02:e7:
9b:f3:2b:ab:f4:73:e5:f0:85:ae:a1:e2:67:90:57:8c:d4:55:
6a:ac:c2:f5:fa:91:15:d2:4a:cd:17:46:31:83:ca:53:df:09:
b0:2b:5f:b7:8a:06:92:27:97:89:f9:21:e1:90:dc:2d:af:18:
dc:64:bb:28:f9:21:a7:8f:69:92:04:d7:3e:ac:2e:ba:be:30:
f1:e3:65:bf:25:e7:b7:bb:f5:5f:da:02:7f:a5:56:3d:70:af:
8e:b8:79:b7:5c:26:6d:e8:70:63:7c:79:3b:25:44:3e:c5:03:
0d:f4:8e:eb:db:da:9e:c3:3c:b7:dc:27:a8:b0:f6:99:f8:d1:
09:8e:7c:22:1b:6f:da:ea:fc:ca:63:ab:cb:36:47:bd:f5:76:
ca:7e:1e:44:25:de:32:c7:56:42:2b:85:95:da:56:7a:63:99:
ed:e8:9b:33:a9:1c:3d:d7:2b:38:4a:0f:a6:c3:b2:4b:24:be:
db:5c:d4:9d:85:dd:f7:9a:6e:bb:3d:4e:d7:40:d4:20:83:91:
2f:a2:48:18:f7:c2:b8:7e:f2:85:32:1b:d5:c5:f5:a9:18:bb:
81:97:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:05:11 2025 by rpki-client