Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BBD1CBAAE04611EC8B00CD1BC4F9AE02.roa
File: BBD1CBAAE04611EC8B00CD1BC4F9AE02.roa (raw, json)
Hash identifier: Wry9CVOLyfyFNKF3y73lFM1K6BBOqppWDjdUylOD8Bk=
Subject key identifier: 65:11:25:52:9E:9F:5D:AF:BA:3F:7B:AF:17:61:1A:AC:38:00:4C:12
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0507
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BBD1CBAAE04611EC8B00CD1BC4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:33:34 +0000
ROA not before: Wed 31 Jul 2024 02:33:34 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 23873
IP address blocks: 203.146.182.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287 (0x507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA
Validity
Not Before: Jul 31 02:33:34 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a9a27e-0eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:d9:fd:a1:fb:84:4f:e5:3a:f3:e8:dc:84:
12:41:47:7d:ae:56:05:e1:54:cd:ad:4d:64:b1:dc:
52:76:5e:11:14:15:33:07:9c:f7:05:22:33:41:24:
1d:4f:2b:a0:61:20:c0:f3:1f:1c:12:b3:4b:8a:79:
16:9b:bf:c8:2e:12:c2:37:c6:a3:d3:ab:5c:3d:73:
38:80:2b:8e:e0:0e:99:5f:da:de:61:3c:11:f4:7b:
fe:76:07:bb:e0:38:ea:aa:07:1b:aa:f3:0b:ee:fe:
46:30:ee:a3:40:51:cc:2d:37:a9:da:dc:7f:3e:6a:
e6:fc:68:ba:1e:b9:e2:a3:93:80:b9:7b:d2:bc:c6:
ba:c0:a8:04:d7:3a:cf:b2:d7:08:12:d1:3b:ae:a6:
88:dd:a3:1b:12:fd:39:ba:e3:3f:ac:56:42:ab:49:
13:6e:b4:c5:18:67:b1:05:d3:4e:4f:f5:06:13:5f:
a0:65:0e:d6:61:c4:b4:b5:1f:8c:58:fa:a8:14:d2:
3c:ee:d6:b6:93:26:d7:7b:42:b9:58:b4:32:36:78:
08:68:a2:33:55:c9:d5:ed:36:15:84:1c:17:67:98:
40:ac:ce:de:23:29:93:e0:d5:07:ce:b8:6a:24:dc:
17:43:03:bb:d8:44:64:ad:10:ef:21:a1:59:ac:23:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:11:25:52:9E:9F:5D:AF:BA:3F:7B:AF:17:61:1A:AC:38:00:4C:12
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BBD1CBAAE04611EC8B00CD1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.146.182.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b1:58:70:ba:98:d5:ab:29:06:ea:3b:6b:ec:54:77:96:7e:
ea:93:81:87:7b:83:13:94:df:54:05:e8:b9:0a:14:4e:06:c5:
b7:b4:63:5f:32:9a:82:37:d8:85:14:4a:30:70:7e:ce:37:98:
d2:32:1b:c2:1b:d2:ae:85:af:32:bf:c6:b5:89:95:1a:f0:4b:
75:a4:61:da:e4:cb:52:26:eb:e1:df:99:94:16:4e:9f:1a:2e:
5b:76:e4:1f:d6:1e:e8:09:34:45:52:b5:d9:3e:a2:fe:20:d8:
71:02:27:ca:a8:40:31:7e:6f:8e:8c:04:7c:91:5c:07:28:b3:
17:79:92:8e:90:23:99:6c:67:a1:b0:69:df:f2:c9:8e:55:f2:
52:dd:df:66:ba:ae:1a:fd:7b:72:15:4f:d4:d1:eb:31:31:81:
9a:8f:d0:ef:1b:b0:de:d9:a9:e2:f9:f5:57:53:a7:43:54:71:
5a:77:0b:f7:2b:a0:f0:d4:0d:61:23:60:d3:4f:5b:48:a8:1d:
92:98:a6:dc:cb:08:ef:a7:07:93:82:17:32:a8:bd:59:ac:92:
a0:e5:06:12:16:11:6a:10:fa:04:9c:4a:44:e4:14:82:0c:cd:
98:cb:60:ef:e4:a2:14:13:cd:e8:9b:b0:18:fa:2f:4f:9f:eb:
20:20:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:49 2025 by rpki-client