Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/5850F63CBF8211EAA9EF906AC4F9AE02.roa
File: 5850F63CBF8211EAA9EF906AC4F9AE02.roa (raw, json)
Hash identifier: uQr6mrF45Uduk/uUqX+UNYDBT6yb/zaT/osGybj9kvQ=
Subject key identifier: EE:DE:98:00:CA:62:9A:EF:95:E4:D5:BB:7C:D3:65:3F:0F:97:B3:0A
Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Certificate serial: 06C3
Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/5850F63CBF8211EAA9EF906AC4F9AE02.roa
Signing time: Fri 28 Oct 2022 22:48:56 +0000
ROA not before: Fri 28 Oct 2022 22:48:56 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 55745
IP address blocks: 117.55.192.0/24 maxlen: 24
117.55.193.0/24 maxlen: 24
117.55.194.0/23 maxlen: 23
117.55.198.0/24 maxlen: 24
117.55.199.0/24 maxlen: 24
117.55.200.0/22 maxlen: 22
117.55.200.0/24 maxlen: 24
117.55.201.0/24 maxlen: 24
117.55.202.0/24 maxlen: 24
117.55.203.0/24 maxlen: 24
117.55.204.0/24 maxlen: 24
117.55.206.0/24 maxlen: 24
117.55.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731 (0x6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Validity
Not Before: Oct 28 22:48:56 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=635c5c58-cf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:00:69:24:d7:96:31:19:af:54:bd:9e:57:
e8:28:7c:30:5a:dc:ca:3a:d5:6a:b9:c6:b0:eb:53:
ff:61:d6:bc:2a:4c:80:3c:20:92:cd:95:03:10:73:
38:f4:31:df:19:57:a4:a5:e5:c7:18:cb:f2:79:14:
87:6e:5a:e9:ac:cd:39:9a:ff:61:b3:13:59:00:54:
7c:14:c4:60:a9:d8:6e:37:5c:dd:da:6b:39:b5:c3:
b0:7b:09:71:20:f5:40:2c:6a:9e:1c:00:ef:14:83:
a1:05:bd:be:db:b8:77:05:ca:c6:86:94:aa:85:00:
be:70:19:d4:8d:f4:ee:b4:f9:9b:61:22:6b:24:cc:
e1:57:21:e1:12:e3:e2:32:ec:64:04:17:c6:6a:7a:
69:57:5f:5e:44:01:e7:4d:85:24:04:8f:ec:a5:e2:
e3:72:dd:65:dd:a6:6f:ff:82:d7:e2:7f:c2:f4:29:
53:bd:a2:b4:88:44:d6:ed:85:d4:ed:a4:aa:05:4b:
76:a9:99:38:76:d4:2c:d2:2f:67:1f:cb:4e:18:09:
98:9c:5b:a6:94:bb:b6:7d:fb:3b:54:21:18:00:44:
68:1b:94:1b:23:04:fe:62:74:50:5f:12:ee:2c:f4:
a0:f6:1a:be:dd:07:c1:a3:b3:65:50:a1:32:ce:d0:
f3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DE:98:00:CA:62:9A:EF:95:E4:D5:BB:7C:D3:65:3F:0F:97:B3:0A
X509v3 Authority Key Identifier:
keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/5850F63CBF8211EAA9EF906AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.55.192.0/22
117.55.198.0-117.55.204.255
117.55.206.0/23
Signature Algorithm: sha256WithRSAEncryption
96:1c:e2:a6:d4:4a:7a:3a:36:a7:b0:f7:b3:9c:a3:d8:ff:c9:
1a:d4:81:7c:31:3a:a3:df:c6:cd:3d:53:3f:6c:bf:cf:0c:98:
54:41:ba:a0:8e:e3:a9:c0:5b:3b:b0:97:f1:19:cc:86:b0:29:
2b:e2:c5:f4:3b:05:0b:99:33:17:1f:e8:c6:10:1c:e9:9e:58:
5e:d5:af:1c:9d:ae:31:7f:9f:ca:f3:4b:20:5e:ba:05:c8:f5:
1f:f3:06:c8:a6:33:37:5a:f6:fa:68:ff:58:cf:79:d2:85:bd:
e6:db:12:2b:bd:de:53:1c:97:1a:28:19:2b:df:7a:ca:94:07:
73:fd:b4:70:43:1a:26:47:db:4a:ab:2c:7c:b6:a9:a2:d8:1f:
cf:40:bd:dc:0e:21:74:8c:44:1f:6d:a3:f0:63:e7:c8:09:93:
7c:53:51:b6:9a:e8:e3:06:24:fd:88:4f:23:f3:e1:e7:eb:68:
aa:d4:4e:64:74:59:54:b2:3f:a1:00:94:58:ac:2a:3f:36:92:
6f:ef:37:9d:b1:cb:7c:9a:0e:ec:58:f8:fd:20:6a:f3:d1:a6:
25:c8:05:b5:e5:a3:26:29:5d:4a:93:c2:f5:12:6c:cb:1e:9a:
ba:46:50:ad:cb:19:c1:41:7f:4e:df:91:37:74:b1:a0:36:d7:
73:85:ae:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org