Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/8463178A2B1D11EB84E4F31AC4F9AE02.roa
File: 8463178A2B1D11EB84E4F31AC4F9AE02.roa (raw, json)
Hash identifier: l0mbZWEqJqGRquhG5qlWDj90UNihMBCm5LqcIl2fhF4=
Subject key identifier: DD:6E:CD:98:2A:E4:1F:9C:E7:1B:55:ED:B3:76:95:47:40:9B:53:AD
Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial: 04BB
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/8463178A2B1D11EB84E4F31AC4F9AE02.roa
Signing time: Fri 25 Mar 2022 11:29:47 +0000
ROA not before: Fri 25 Mar 2022 11:29:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17813
IP address blocks: 149.234.186.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1211 (0x4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Validity
Not Before: Mar 25 11:29:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=623da7ab-eaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:ef:49:71:83:7f:76:39:8d:0b:69:bb:0d:
99:8d:95:c2:a5:7e:90:cc:93:fa:6b:6c:15:d1:04:
8c:de:ee:bd:7e:2d:a0:8f:c5:55:ba:d8:28:67:af:
36:a3:a2:74:ba:f8:2f:2e:01:49:50:86:f3:5a:ca:
62:09:29:e7:cb:d5:cc:40:7a:ec:bb:b6:ce:b9:45:
44:6e:41:53:c9:a5:76:fc:cb:6b:6c:86:31:2c:14:
a2:64:83:83:36:55:bc:a0:1b:e2:d4:7a:05:86:7d:
14:7b:84:35:bc:3a:70:29:77:2e:b7:5e:b5:f5:84:
3b:ee:7b:c1:ee:bf:03:24:0b:79:5f:90:16:20:0b:
2a:1c:d4:b9:0a:46:a5:1d:10:b1:8f:b2:78:07:93:
b1:be:63:8d:8a:e3:71:60:3a:10:0f:d9:a8:33:1a:
c8:17:2f:d7:a7:d2:6f:07:fe:c9:ac:76:9e:30:39:
ef:e8:99:3b:cb:10:b9:46:5d:3a:c5:a3:da:43:7b:
8c:bc:5a:80:8c:05:23:3a:9c:f9:69:fd:ec:c5:02:
60:bf:55:73:83:0a:93:c2:78:28:00:a6:c0:3b:a2:
ef:03:d7:df:87:54:53:dc:24:94:e4:5e:d6:a9:ae:
b9:52:7c:3b:e0:5c:01:66:f9:d5:5c:f7:50:c2:a7:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6E:CD:98:2A:E4:1F:9C:E7:1B:55:ED:B3:76:95:47:40:9B:53:AD
X509v3 Authority Key Identifier:
keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/8463178A2B1D11EB84E4F31AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
149.234.186.0/24
Signature Algorithm: sha256WithRSAEncryption
63:30:24:bd:fb:c4:6b:05:83:22:e7:e6:ae:97:36:de:0b:96:
7a:91:e2:44:ac:55:2b:93:bc:a8:80:54:23:e6:da:73:6c:d1:
0c:6f:1f:d9:ad:87:03:91:fc:93:8f:99:c1:8f:63:53:cd:d2:
f9:08:93:b8:65:81:2a:a0:5c:41:b9:39:6e:3c:ec:0e:af:ef:
58:d6:17:b0:e8:e3:cb:d0:3b:e2:c8:9d:07:77:25:f3:1d:c8:
5e:68:ad:b8:2f:86:13:38:d7:74:b7:ca:a0:74:4e:1c:99:66:
5d:51:0a:d2:63:7d:99:42:e6:a1:6b:c4:b5:e0:a3:04:03:a8:
7a:79:bc:80:f3:33:d0:42:01:06:b8:ea:2b:1c:ff:93:62:1e:
95:c3:62:e4:e6:89:ff:f1:5b:91:33:15:9d:f7:26:94:91:4b:
fa:96:13:15:ae:3b:d0:56:2b:fe:49:f4:54:f5:29:2e:f1:a9:
82:56:9a:dc:da:89:df:2b:e1:39:e8:be:a5:a8:54:24:b1:c2:
e1:bc:d5:97:b0:11:00:ed:7c:6f:88:d6:35:a6:49:e5:50:e2:
6e:25:d8:2f:03:c9:3f:b0:87:d8:d9:78:d1:8b:09:23:24:8b:
de:a3:dc:9d:35:50:46:73:66:14:e9:b3:62:ec:68:14:45:c1:
44:43:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-fra.rpki-client.org