Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D538D92E675211ED8BC7BB36C4F9AE02.roa
File: D538D92E675211ED8BC7BB36C4F9AE02.roa (raw, json)
Hash identifier: VSQ+/qoiPzaWFyIwlczfUCYFqir2zlPuAkvBpv8srXA=
Subject key identifier: EB:26:A9:03:F1:9F:BD:AA:1B:7F:C1:63:98:60:E8:2C:E1:46:1E:19
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0913
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D538D92E675211ED8BC7BB36C4F9AE02.roa
Signing time: Fri 18 Nov 2022 15:08:18 +0000
ROA not before: Fri 18 Nov 2022 15:08:18 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 149009
IP address blocks: 180.178.150.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323 (0x913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Nov 18 15:08:18 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63779fe2-8e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:00:cb:89:4d:39:aa:18:da:9a:17:ea:64:
16:a5:19:9f:2d:b5:a1:54:f7:f2:20:b8:83:ca:a7:
64:4a:7b:11:3a:f2:7e:63:ab:2c:1d:42:fe:2e:90:
f6:86:f6:d0:a9:0f:44:12:62:b5:c1:59:ab:7b:5a:
c5:88:c7:6d:5d:43:e0:69:81:3e:eb:37:74:5c:d0:
4a:8b:b3:c0:96:30:f2:87:95:6a:cd:01:87:d6:0f:
fd:74:c8:87:54:3e:f2:4d:f9:88:07:87:5b:b0:4d:
67:79:96:52:11:39:ff:32:93:56:79:c3:82:a5:9d:
6c:7f:5c:61:b9:24:9b:fd:cb:f0:aa:96:dd:56:f8:
84:c5:a0:59:e2:70:4b:81:d2:81:c5:d1:00:61:46:
2b:f4:f8:3f:f4:af:ba:86:17:13:b5:6d:44:32:50:
1b:94:96:fa:0d:84:5a:f3:9e:3e:46:d6:f1:dc:3e:
54:f3:b6:f3:e2:cf:73:63:44:b0:e3:ae:6b:c5:be:
7e:5c:29:7f:f0:40:47:c4:04:2d:2d:bb:43:cb:e3:
39:70:83:ef:aa:23:72:1b:0a:ab:50:30:83:e9:55:
ad:e2:b6:ec:80:14:37:b4:92:d0:9e:d4:d8:a2:56:
61:a7:5a:f6:2f:ee:af:9f:d3:bc:72:35:75:a5:5c:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:26:A9:03:F1:9F:BD:AA:1B:7F:C1:63:98:60:E8:2C:E1:46:1E:19
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D538D92E675211ED8BC7BB36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.150.0/24
Signature Algorithm: sha256WithRSAEncryption
95:83:a6:70:b6:43:c1:36:79:82:b3:cf:a1:69:00:1b:52:7c:
2c:6d:a0:47:fe:4a:ab:d2:52:63:03:9b:1f:46:e9:0d:6f:fb:
42:71:33:be:73:19:00:10:b9:d0:d0:86:72:b7:9c:29:be:dd:
7b:98:d8:b7:c0:79:9d:35:68:9c:13:48:eb:bf:5f:0b:cd:6a:
7f:72:a3:c8:a3:fa:e9:62:f4:5e:36:59:d3:fb:24:00:21:08:
da:c6:7a:5f:fa:c4:1a:e1:f0:33:0e:9b:b0:82:b6:3e:8b:91:
6c:f2:f2:61:9c:78:0b:55:c7:74:16:a5:58:91:b3:a0:81:0c:
45:d4:1b:81:70:07:dd:54:b7:06:53:0f:86:84:5f:42:04:bf:
68:ed:fa:5a:55:02:d3:cd:09:10:99:46:6a:f4:19:91:84:54:
26:00:ad:24:e5:9c:54:bf:ed:bf:cd:d1:7b:88:8c:e0:b4:d1:
3a:00:3f:ac:43:8d:ae:22:29:ff:b5:70:65:96:89:54:91:49:
c8:23:b3:26:26:ac:61:ef:d5:4d:2b:c2:a6:92:1b:cc:b6:f5:
40:eb:43:b3:e1:35:23:a4:bd:90:2b:51:db:ca:dc:99:19:11:
18:06:16:f8:76:9b:24:62:7a:0f:1c:a5:71:11:bf:78:b9:86:
00:7d:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:08:57 2025 by rpki-client