Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/87434DA41D1111EB94731745C4F9AE02.roa
File: 87434DA41D1111EB94731745C4F9AE02.roa (raw, json)
Hash identifier: w3RMZb+SSAvmbthGVc3WjYwWsq3PPt4Ne5CtZ7t52FY=
Subject key identifier: F7:C3:54:4A:94:3A:4E:97:CD:D6:56:C3:3A:46:5F:31:9B:D8:13:E1
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 09CF
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/87434DA41D1111EB94731745C4F9AE02.roa
Signing time: Wed 02 Aug 2023 20:18:01 +0000
ROA not before: Wed 02 Aug 2023 20:18:01 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 9237
IP address blocks: 116.66.208.0/20 maxlen: 20
116.66.208.0/24 maxlen: 24
116.66.209.0/24 maxlen: 24
116.66.210.0/24 maxlen: 24
116.66.211.0/24 maxlen: 24
116.66.212.0/24 maxlen: 24
116.66.213.0/24 maxlen: 24
116.66.214.0/24 maxlen: 24
116.66.215.0/24 maxlen: 24
116.66.216.0/24 maxlen: 24
116.66.217.0/24 maxlen: 24
116.66.218.0/24 maxlen: 24
116.66.219.0/24 maxlen: 24
116.66.220.0/24 maxlen: 24
116.66.221.0/24 maxlen: 24
116.66.222.0/24 maxlen: 24
116.66.223.0/24 maxlen: 24
203.91.128.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2511 (0x9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Aug 2 20:18:01 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64cab9f9-a040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:92:75:1b:ff:a4:11:28:6e:b4:6a:14:09:
3a:fc:21:14:6a:a1:50:92:f5:ae:57:56:8e:42:ab:
0b:f0:55:ec:ba:5d:64:4a:7d:94:85:ab:0c:d0:00:
51:c9:9a:03:a5:77:f3:7a:da:14:cb:22:bd:4a:62:
15:20:04:5a:5d:42:92:13:9a:79:ca:c9:51:5c:61:
40:1a:da:59:49:20:31:df:0e:27:3f:75:9e:33:de:
9a:17:b3:92:08:2c:98:d1:5b:36:5f:0a:96:82:10:
15:02:4b:e4:01:16:c7:2b:5e:d7:0e:71:54:82:72:
ad:00:d8:27:17:ec:46:31:5d:47:b9:72:56:59:80:
b4:49:b1:78:d2:d3:65:d6:6c:1e:dc:d8:58:c1:ad:
5e:4a:43:2a:3d:35:8c:8e:2a:37:38:06:2f:5d:8a:
24:7d:cb:bf:b3:a5:b6:42:e2:dc:69:17:24:04:3e:
dc:f2:e1:16:f9:f8:89:17:3b:86:c0:84:31:42:f3:
c0:da:7e:3b:6a:83:c8:03:d4:75:30:4b:72:aa:03:
67:c4:59:f8:1a:11:80:19:b2:91:91:cc:58:09:f8:
26:83:af:66:c3:36:1c:81:3b:a2:56:7a:ae:45:47:
88:c5:24:8e:b1:3f:d0:75:25:de:19:87:e8:94:11:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C3:54:4A:94:3A:4E:97:CD:D6:56:C3:3A:46:5F:31:9B:D8:13:E1
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/87434DA41D1111EB94731745C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.66.208.0/20
203.91.128.0/19
Signature Algorithm: sha256WithRSAEncryption
85:c7:ea:6a:df:70:46:69:3d:aa:3b:37:20:1b:5b:3e:40:e0:
01:a4:fe:16:49:ca:a6:d8:c3:b2:31:d6:36:b6:72:67:69:d7:
45:25:63:e8:ad:d5:26:bc:f8:68:92:53:2e:86:67:3f:7f:ad:
35:92:0a:f3:da:85:83:58:1f:c1:0f:da:a0:46:be:ad:04:72:
8c:12:e4:81:25:3d:35:8a:a8:51:25:bf:e9:38:48:99:08:0c:
17:77:a8:2d:12:e1:25:44:25:a8:9b:27:85:c7:9d:ae:23:90:
ab:f4:c9:41:4f:e6:2f:9f:a2:66:12:13:a8:02:33:7d:10:1d:
b5:2f:fd:ea:42:f5:73:65:e8:77:1a:5f:9a:b2:b4:f6:8f:9e:
1b:0b:10:3e:dc:83:d2:87:dd:8e:ee:b5:c7:73:43:32:51:44:
f6:90:d2:90:67:18:25:4c:82:74:8b:63:70:66:01:40:6f:01:
de:0e:c6:1f:37:e3:e1:5a:09:a4:21:fd:59:ea:4e:d9:b6:12:
28:37:89:a1:e2:eb:51:30:4c:8b:9b:5e:00:97:b9:81:d0:7a:
6e:c7:b3:8e:80:fa:3f:a4:c5:35:a8:e6:b6:4f:83:a3:f7:91:
d8:11:b6:df:9c:4b:ae:87:63:36:1f:68:ad:ef:3b:d6:f1:d6:
73:68:27:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-ams.rpki-client.org