Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/87434DA41D1111EB94731745C4F9AE02.roa
File: 87434DA41D1111EB94731745C4F9AE02.roa (raw, json)
Hash identifier: 3r+Y54T48W6ldYpWo3/T9hD9zhQHT64SJLdiS24brxM=
Subject key identifier: 05:1C:44:90:49:65:00:E0:E9:EB:76:54:2A:84:F1:82:FF:71:05:A0
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 09C7
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/87434DA41D1111EB94731745C4F9AE02.roa
Signing time: Mon 31 Jul 2023 20:37:48 +0000
ROA not before: Mon 31 Jul 2023 20:37:48 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 9237
IP address blocks: 116.66.208.0/20 maxlen: 20
116.66.208.0/24 maxlen: 24
116.66.209.0/24 maxlen: 24
116.66.210.0/24 maxlen: 24
116.66.211.0/24 maxlen: 24
116.66.212.0/24 maxlen: 24
116.66.213.0/24 maxlen: 24
116.66.214.0/24 maxlen: 24
116.66.215.0/24 maxlen: 24
116.66.216.0/24 maxlen: 24
116.66.217.0/24 maxlen: 24
116.66.218.0/24 maxlen: 24
116.66.219.0/24 maxlen: 24
116.66.220.0/24 maxlen: 24
116.66.221.0/24 maxlen: 24
116.66.222.0/24 maxlen: 24
116.66.223.0/24 maxlen: 24
203.91.128.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2503 (0x9c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Jul 31 20:37:48 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64c81b9c-cc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:72:67:87:01:c5:7c:e0:e1:41:40:fa:71:
dc:a7:c2:88:42:16:ba:ca:eb:ea:15:d7:4d:f8:d1:
5e:a4:57:7d:80:7c:ef:2b:7a:63:b5:fc:2d:52:92:
f5:01:13:23:12:d7:10:8f:f9:30:d2:f9:58:95:87:
26:96:fc:76:9d:9f:04:ee:45:56:a8:9e:8b:9f:27:
7a:5b:c7:dd:0f:21:0a:94:01:b0:cc:6e:6f:37:09:
32:4c:27:29:2c:7f:3d:6d:b7:6c:8d:5d:36:13:2d:
b2:a9:63:95:b4:fc:a8:32:99:4e:2a:20:80:ff:87:
d6:a3:3d:9b:fa:ff:b4:c1:5e:12:51:af:67:49:dc:
b5:58:37:2e:f7:4e:a5:1b:56:ce:64:f0:06:0b:2c:
b1:6d:08:a8:21:f1:54:a5:80:51:da:9d:ff:e4:ba:
0b:af:d1:2a:55:74:28:33:67:c9:04:4e:37:49:6a:
b7:6b:9f:d7:ac:f7:81:36:2c:41:73:a8:53:ad:61:
0f:92:62:f7:59:0e:25:47:1e:bb:6e:61:95:af:bb:
46:72:ef:58:17:64:32:71:f5:df:58:b3:1e:b8:86:
0d:43:a8:81:91:d2:e4:2e:a4:79:fb:1a:41:da:1c:
36:c5:ad:a4:fb:b8:8e:39:79:f4:34:9a:c1:a6:f4:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1C:44:90:49:65:00:E0:E9:EB:76:54:2A:84:F1:82:FF:71:05:A0
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/87434DA41D1111EB94731745C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.66.208.0/20
203.91.128.0/19
Signature Algorithm: sha256WithRSAEncryption
98:16:9b:05:f2:40:0d:9a:48:41:20:20:4e:7c:3e:3e:9f:ee:
df:61:4d:9a:bd:ee:e4:d6:8e:8c:b1:a5:a7:e2:53:ba:3a:ad:
19:a5:d1:cd:e2:a8:d1:fe:2d:e1:a0:7e:e4:24:79:a5:14:f7:
61:77:c8:49:61:24:08:08:cf:d9:6c:31:38:a4:d5:c4:d4:fb:
aa:00:38:94:6e:b9:a9:64:9d:97:82:b9:0b:2f:d9:3e:a5:a9:
7b:f6:87:f9:eb:f0:7e:9a:87:f5:41:4b:b1:9e:c4:61:c6:b4:
04:9c:70:ec:97:c5:3f:03:a4:bf:90:66:57:ed:bc:34:72:e0:
a0:97:82:19:78:7f:1f:24:2a:4f:f6:dd:f8:0c:f2:8a:8c:cb:
55:22:29:49:83:2a:61:c1:43:77:31:81:7a:3c:d7:76:1c:75:
ba:17:4d:8e:34:e1:30:49:d2:3f:62:25:27:34:c2:41:aa:2c:
9e:c0:36:25:1f:c1:6e:b0:7b:26:85:82:51:39:91:84:5d:4e:
9b:75:f1:59:31:3d:86:dc:32:15:b6:fb:67:26:ed:21:ea:91:
07:11:63:4d:38:53:11:e7:03:34:12:0b:fa:11:41:c6:e7:30:
ac:5e:d7:5e:03:a4:41:e0:4a:f9:69:4c:d0:5d:dd:0d:17:a4:
10:ce:f7:c0
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB
OTNDMjYzQUEwHhcNMjMwNzMxMjAzNzQ4WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGM4MWI5Yy1jYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1htyZ4cBxXzg4UFA+nHcp8KIQha6yuvqFddN+NFepFd9gHzvK3pjtfwtUpL1
ARMjEtcQj/kw0vlYlYcmlvx2nZ8E7kVWqJ6Lnyd6W8fdDyEKlAGwzG5vNwkyTCcp
LH89bbdsjV02Ey2yqWOVtPyoMplOKiCA/4fWoz2b+v+0wV4SUa9nSdy1WDcu906l
G1bOZPAGCyyxbQioIfFUpYBR2p3/5LoLr9EqVXQoM2fJBE43SWq3a5/XrPeBNixB
c6hTrWEPkmL3WQ4lRx67bmGVr7tGcu9YF2QycfXfWLMeuIYNQ6iBkdLkLqR5+xpB
2hw2xa2k+7iOOXn0NJrBpvTovQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAUcRJBJ
ZQDg6et2VCqE8YL/cQWgMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2
NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvODc0MzREQTQx
RDExMTFFQjk0NzMxNzQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAR0QtADBAXLW4AwDQYJKoZIhvcNAQELBQADggEBAJgWmwXy
QA2aSEEgIE58Pj6f7t9hTZq97uTWjoyxpafiU7o6rRml0c3iqNH+LeGgfuQkeaUU
92F3yElhJAgIz9lsMTik1cTU+6oAOJRuualknZeCuQsv2T6lqXv2h/nr8H6ah/VB
S7GexGHGtASccOyXxT8DpL+QZlftvDRy4KCXghl4fx8kKk/23fgM8oqMy1UiKUmD
KmHBQ3cxgXo813YcdboXTY404TBJ0j9iJSc0wkGqLJ7ANiUfwW6weyaFglE5kYRd
Tpt18VkxPYbcMhW2+2cm7SHqkQcRY004UxHnAzQSC/oRQcbnMKxe114DpEHgSvlp
TNBd3Q0XpBDO98A=
-----END CERTIFICATE-----
Generated at Wed Sep 6 15:23:35 2023 by rpki-client on console-fra.rpki-client.org