Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/989282A0074D11ED99CF6642C4F9AE02.roa
File: 989282A0074D11ED99CF6642C4F9AE02.roa (raw, json)
Hash identifier: 4TcbVPDgTGjrQlpEgm6vuSgeUQK+Ic4GiFWFNjCUPkM=
Subject key identifier: FF:87:D2:AA:79:BE:C5:BE:85:46:4D:A2:76:03:35:52:A0:A4:7D:93
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0899
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/989282A0074D11ED99CF6642C4F9AE02.roa
Signing time: Thu 15 Sep 2022 10:00:34 +0000
ROA not before: Thu 15 Sep 2022 10:00:34 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 209854
IP address blocks: 113.203.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2201 (0x899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Sep 15 10:00:34 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6322f7c2-f1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:78:0d:94:4f:9e:93:7e:bf:a6:89:be:d8:
fc:29:e0:9f:de:50:16:28:54:08:34:4c:3d:d0:8d:
65:1e:2b:64:a4:b9:e1:71:a7:92:00:7c:3d:85:6a:
79:64:75:11:b8:94:0b:4e:35:b1:fc:c5:73:72:7f:
9e:a9:6c:1b:14:73:cb:b6:71:7b:6f:6d:5a:bd:52:
7c:f6:b7:8b:9c:a4:1c:de:ce:87:4e:36:fd:68:9d:
eb:25:00:72:a4:28:15:ed:0e:e6:5f:34:77:d5:3d:
e2:ef:5e:9f:80:5f:12:c9:60:91:da:8e:42:d2:5a:
f3:09:2b:1a:78:0d:46:3a:00:41:e5:0f:28:84:39:
60:08:02:ac:1e:57:0c:f4:ff:1a:c6:e8:b1:ec:6c:
83:3f:ed:b6:57:08:1b:5b:14:41:63:51:d9:d1:93:
03:ae:91:17:52:34:08:c7:e6:4f:57:72:1e:08:92:
5e:47:1d:5b:36:fa:ef:4d:ed:ae:95:18:5c:04:1b:
9c:63:64:60:53:96:1e:25:6c:f9:a4:7d:e1:f4:5d:
5d:37:f7:6a:e8:49:26:d1:2a:92:4e:60:15:49:96:
34:8d:fc:2a:50:c9:91:38:85:98:52:2c:e5:a2:df:
d7:e8:1d:37:cb:6f:8b:4f:70:df:ee:3e:92:97:1e:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:D2:AA:79:BE:C5:BE:85:46:4D:A2:76:03:35:52:A0:A4:7D:93
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/989282A0074D11ED99CF6642C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.221.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c3:13:1d:ef:36:2a:a9:5b:8a:b1:e1:55:25:f7:63:c2:eb:
86:b5:6c:a1:68:e1:66:63:5b:f5:26:a8:3e:a0:08:95:06:2b:
a8:36:ae:0c:fd:44:2f:4e:2a:52:f1:e1:60:3a:1b:8c:fe:b8:
c1:81:5b:3c:10:da:fa:51:ec:33:f0:c3:4a:f4:28:f1:7b:d9:
a1:bd:74:e8:85:d1:97:29:82:77:48:45:28:46:0e:3e:2d:eb:
79:3b:f1:76:a3:17:d8:d2:3f:37:6a:af:dd:bd:ff:11:b9:12:
84:6d:4a:92:ec:ff:bc:aa:d8:ec:ac:3f:69:8b:3d:7f:47:a2:
44:e5:1c:53:e0:11:e2:f2:c9:3e:3c:98:4c:e4:ab:9d:2f:5e:
0b:cd:8e:09:c1:50:40:af:de:21:06:06:77:5d:b4:a5:46:16:
5f:6e:4e:d8:62:c1:99:96:17:4c:33:c4:34:59:ac:a2:a1:04:
95:1d:58:0f:4c:59:d5:56:58:83:cb:7d:fa:1c:91:0e:c1:44:
49:b6:cd:46:c3:72:ca:07:55:e5:f9:ef:fa:2d:84:13:a5:95:
de:43:6a:92:a1:8c:9b:b0:7b:32:aa:de:e4:93:1d:16:5e:a3:
b4:db:c2:5a:bc:d7:50:70:4b:79:de:98:43:b0:6a:eb:4c:7f:
cd:c3:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:56:44 2025 by rpki-client