Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/0696000EB67911ECB02F1D5FC4F9AE02.roa
File: 0696000EB67911ECB02F1D5FC4F9AE02.roa (raw, json)
Hash identifier: gI1l321723nqD1Q/CePl+HRGyynVEnK6TZ1Fze/ewKE=
Subject key identifier: B1:87:4B:E6:64:0C:EF:E9:51:4E:60:C0:C4:1B:14:03:B2:B5:BF:8F
Certificate issuer: /CN=A9130626/serialNumber=54CD681089E7F49552BAEC56A076B1ECF25EFE06
Certificate serial: 0604
Authority key identifier: 54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/0696000EB67911ECB02F1D5FC4F9AE02.roa
Signing time: Thu 07 Apr 2022 13:45:46 +0000
ROA not before: Thu 07 Apr 2022 13:45:46 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 18022
IP address blocks: 160.202.128.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1540 (0x604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130626/serialNumber=54CD681089E7F49552BAEC56A076B1ECF25EFE06
Validity
Not Before: Apr 7 13:45:46 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=624eeb0a-853f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:73:92:ea:f0:2f:dc:fb:2f:69:f9:86:ae:
bd:52:d4:37:89:c9:dd:56:cf:ab:73:43:f5:df:77:
f1:79:70:7d:ec:3b:17:2c:2c:89:8c:30:27:99:ef:
1d:bf:14:fb:86:64:39:c0:33:9a:21:18:24:d2:9d:
8e:92:39:08:fa:70:c8:01:8b:a3:ae:df:53:55:67:
56:c3:e5:82:da:9d:c2:a5:5b:bf:60:cd:45:52:ff:
fe:29:7d:cf:4a:ff:07:b1:61:f7:bf:ff:77:95:3e:
12:35:58:a6:21:38:0c:53:88:66:f3:ed:e3:c2:c9:
77:df:5f:19:d1:5f:e5:1a:eb:28:f3:0f:f0:e0:9d:
a8:f8:3e:39:50:46:77:28:26:07:c9:98:ea:13:e1:
07:fe:e8:f1:42:57:ba:cb:50:1d:f9:e8:37:94:28:
49:28:00:75:f7:66:9c:c8:51:ac:9d:b8:d6:11:01:
21:b3:a4:11:05:28:1e:c1:99:d5:58:02:c6:96:19:
3c:b6:ab:24:03:a0:82:26:02:ed:17:75:f3:8c:dd:
04:8c:19:73:6e:6e:32:59:ad:c1:9f:b9:d3:df:7a:
7d:31:20:91:c5:cc:e1:e1:25:92:7d:1d:93:0d:be:
6f:3e:8e:aa:dd:58:18:d7:ee:6e:a4:fe:95:d5:cf:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:87:4B:E6:64:0C:EF:E9:51:4E:60:C0:C4:1B:14:03:B2:B5:BF:8F
X509v3 Authority Key Identifier:
keyid:54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/0696000EB67911ECB02F1D5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.202.128.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:04:a3:fa:7c:db:98:0e:e0:c1:46:78:b1:8f:ef:87:3d:6b:
41:78:8a:e4:0f:b8:89:23:80:ec:cb:15:ce:61:f2:b7:4e:c9:
ff:ed:03:5f:3e:17:6a:00:c3:c7:16:65:6a:4f:df:bc:c7:5c:
2a:fb:51:51:2a:66:76:5b:e6:5c:98:75:d2:9d:64:51:66:d7:
7e:f0:f6:87:05:27:4d:a4:38:6f:4d:64:60:bc:70:83:d7:3b:
ac:da:79:a7:d3:d9:e0:d4:6c:16:ba:05:75:46:76:bd:8a:11:
19:da:10:21:45:7a:97:07:51:7f:b5:0e:02:a9:2d:6a:cf:68:
83:bd:c4:89:41:92:4b:06:59:1b:dc:5a:68:23:ad:3d:30:55:
b7:d2:81:7f:65:27:89:67:f2:89:2e:06:b0:d2:7f:ac:79:52:
94:1a:83:d3:43:2f:0e:12:5f:3d:40:57:2a:bf:0e:c3:e3:0a:
28:47:22:d4:ea:67:05:67:d5:ff:90:97:60:65:fb:62:8d:9d:
6b:70:1c:f1:5f:a2:ee:90:e7:53:d3:12:86:c6:dc:91:a3:aa:
38:69:e4:26:55:d1:90:87:2f:64:c9:59:07:0b:27:7d:9d:c5:
36:19:ac:76:f0:67:da:31:12:8b:2e:e1:18:02:5f:fa:82:3b:
09:ba:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org