Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/B5DCAC4C2AC411EDA91BCB76C4F9AE02.roa
File: B5DCAC4C2AC411EDA91BCB76C4F9AE02.roa (raw, json)
Hash identifier: b8ynXxc1nuUmroJehEp396EH/0eQuc6qYP46rksld/M=
Subject key identifier: 53:41:B5:A0:BA:76:5E:D6:B3:DE:79:1B:0F:A4:83:48:64:C0:4E:6C
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0897
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/B5DCAC4C2AC411EDA91BCB76C4F9AE02.roa
Signing time: Thu 15 Sep 2022 10:00:32 +0000
ROA not before: Thu 15 Sep 2022 10:00:32 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 17539
IP address blocks: 113.203.232.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Sep 15 10:00:32 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6322f7c0-fc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:7a:c5:46:df:a3:26:26:61:60:c1:47:d5:
8c:13:74:7d:82:78:b8:96:31:b7:80:a7:eb:e3:8b:
68:4c:fc:69:8d:b5:60:e9:1e:74:78:4b:ad:6a:fc:
68:3d:82:ff:24:92:63:1f:33:00:5f:37:25:2d:44:
97:9c:a8:7d:6f:a8:8f:96:13:aa:80:8b:99:c7:af:
9c:eb:ed:95:ac:2a:03:a2:fd:e8:2b:87:fb:bd:f3:
c7:eb:fa:a5:2c:ab:cb:b6:a2:06:97:07:74:db:89:
fd:fb:a7:ea:76:6a:dc:df:ec:b4:f7:b5:3d:d9:06:
73:7e:1a:8a:ea:cc:12:ca:eb:e6:67:c9:3d:e1:74:
9b:6c:97:13:90:d2:d2:c8:a8:eb:7c:b2:db:be:2f:
f5:a3:ca:24:4a:ae:bf:f1:73:b6:4c:fc:91:a2:9b:
17:d9:27:a9:07:d4:f3:9d:e7:1d:54:38:76:7c:54:
0d:4a:c3:31:d9:d7:cc:85:00:d6:b8:c0:35:d0:98:
12:9a:8f:98:30:2e:e8:36:9c:cb:1b:c1:06:0c:61:
51:de:d1:bb:70:92:87:c4:1f:f3:ef:77:3e:57:d7:
ca:19:47:e3:3d:42:7d:9c:fd:9c:36:f7:c6:03:29:
2c:df:18:51:83:2a:f1:bb:2b:5c:29:fe:ff:cd:7e:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:41:B5:A0:BA:76:5E:D6:B3:DE:79:1B:0F:A4:83:48:64:C0:4E:6C
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/B5DCAC4C2AC411EDA91BCB76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.232.0/24
223.29.227.0/24
Signature Algorithm: sha256WithRSAEncryption
39:00:38:09:78:4f:46:b7:bc:0c:b2:4e:7e:96:04:e5:17:59:
78:04:a2:58:bf:25:fe:aa:f2:94:a2:3e:52:ad:30:ab:09:28:
7f:0d:d9:9f:cb:62:27:7b:47:8f:df:7e:80:86:8c:e7:57:70:
0a:fa:99:9b:f9:15:d4:a3:ba:f1:c6:0b:a4:86:55:e4:27:0c:
dd:5d:90:ff:1f:72:2b:9b:fd:b3:49:72:6e:5b:a6:64:7d:0e:
43:52:8b:5e:0f:0c:bc:38:d7:5c:70:a7:f0:a0:f6:30:de:c7:
cb:01:ed:eb:d0:db:8e:df:43:22:da:d9:39:ca:af:9c:d1:ea:
bc:b3:8c:ed:0a:12:5d:b8:b4:6e:a1:3c:61:c2:ae:c6:e6:47:
c0:d4:3b:03:95:82:9f:27:4a:07:16:dd:8e:7b:b6:7f:67:b3:
30:62:cd:07:28:da:b9:7c:4b:c3:db:09:b4:ed:d0:16:fe:ca:
6f:c8:ae:54:f0:da:8b:a9:c5:55:5c:d8:60:39:ac:1d:65:b3:
86:97:e4:b5:dc:95:59:d5:c8:4d:82:4c:62:05:4c:37:b2:f0:
ef:92:a5:b7:5f:5d:f2:95:b3:93:56:eb:9d:6d:fe:8c:e1:0b:
4a:cb:d0:60:f6:ca:7c:2b:e6:1b:40:f1:21:02:29:d1:3f:f0:
20:a5:b2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:46:23 2025 by rpki-client