Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/82497BECDF7511EDB7DF6441C4F9AE02.roa
File: 82497BECDF7511EDB7DF6441C4F9AE02.roa (raw, json)
Hash identifier: cfU4W1gZymxE4eDen3UqmMx3srhpw+vPTHvx8qYGM9w=
Subject key identifier: E1:E1:8F:D1:88:D6:7D:97:CE:E8:BF:8C:82:CA:66:09:81:8F:90:5D
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0A40
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/82497BECDF7511EDB7DF6441C4F9AE02.roa
Signing time: Thu 20 Apr 2023 12:18:51 +0000
ROA not before: Thu 20 Apr 2023 12:18:51 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 132165
IP address blocks: 113.203.252.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2624 (0xa40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Apr 20 12:18:51 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64412dab-55d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:07:ea:9f:66:23:44:b3:84:6c:2e:ae:4f:
62:7f:c1:ae:9a:37:85:6e:72:16:fd:89:96:b0:a8:
76:80:1e:e9:80:44:46:fd:6e:a3:73:8f:46:51:be:
22:65:5a:a6:6f:ff:53:63:2c:46:e8:39:7e:d7:90:
b2:1b:05:ba:83:d6:8a:11:c7:c7:90:72:a1:d2:95:
d9:d1:f5:8a:4e:6a:01:b3:9e:a3:99:f4:07:a7:aa:
c8:4b:32:f4:8c:cf:2c:f6:21:ca:20:eb:e5:8e:a0:
34:1e:f4:1a:93:6a:a8:e5:69:89:b2:0f:91:22:98:
1c:a2:c5:7b:b5:aa:3b:26:dc:44:71:eb:5a:ca:50:
79:eb:32:33:c4:9e:65:d0:0b:2e:03:1f:c1:c3:ae:
8f:93:34:ac:9e:a6:da:fd:56:e4:96:e5:f6:aa:77:
3b:24:95:a7:1f:c8:05:b1:77:de:49:ed:ef:ee:59:
87:de:2f:a8:bb:aa:d2:a3:66:12:a2:0b:fb:d6:9f:
19:85:c9:00:a8:31:09:79:77:18:c6:4b:91:f0:58:
8d:71:71:5c:40:dd:5d:e7:64:99:99:a3:3a:51:f0:
5f:26:d0:01:85:ec:83:3a:da:65:33:1f:d0:3e:c4:
51:09:bb:41:e9:6e:7a:fa:e2:70:15:03:4f:11:59:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E1:8F:D1:88:D6:7D:97:CE:E8:BF:8C:82:CA:66:09:81:8F:90:5D
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/82497BECDF7511EDB7DF6441C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.252.0/22
Signature Algorithm: sha256WithRSAEncryption
31:68:80:16:f9:64:b4:3e:df:88:4f:ac:40:c5:62:00:a7:9c:
99:1a:d3:47:ca:72:b3:a7:4a:e1:b7:87:97:77:89:68:a8:2e:
bc:89:f5:94:29:30:06:46:b9:ab:18:f7:ec:52:44:a5:18:ba:
15:ee:6c:1c:95:da:05:16:f4:c3:5d:52:a5:30:ea:d6:2d:0d:
1c:a8:fa:e8:eb:bb:66:87:bd:04:00:2d:39:98:0c:65:01:68:
54:fc:1e:92:ea:c2:a5:23:10:b5:38:a3:dd:9e:2e:fc:39:65:
8a:bd:f4:d1:c9:ac:59:08:ef:92:eb:6d:60:16:3c:f7:ef:2b:
47:62:ce:8d:52:49:9e:e9:21:0c:b9:f1:e1:ba:25:b2:62:93:
96:12:eb:42:58:94:76:c6:93:6d:d2:14:b6:23:27:20:9a:c4:
f7:8a:5e:40:ea:49:7b:b2:95:b4:7d:4a:e7:dd:a5:60:b6:66:
3d:ee:98:5f:b4:7b:fe:ec:5c:5a:4a:51:0f:68:66:3f:b2:8d:
6f:8c:26:ee:46:df:02:ec:27:ab:ed:51:3c:73:28:5a:0b:9d:
60:a4:ed:2d:6b:b8:a4:0d:5b:8b:c3:b3:b3:e3:4b:1a:02:d5:
ad:91:58:2e:60:a1:7a:b0:b8:01:58:9d:5f:7f:33:04:19:d3:
1a:64:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:17:31 2025 by rpki-client