Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6CA5528EF41711EB8BCE7253C4F9AE02.roa
File: 6CA5528EF41711EB8BCE7253C4F9AE02.roa (raw, json)
Hash identifier: dnFpgBSZmRbf/3R6j1pgRL6IFA7SjPy1s+ikFBsJgDU=
Subject key identifier: CA:28:7E:49:E6:0B:DA:D1:19:77:52:B9:F2:BC:F7:F9:5E:CE:FC:9B
Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Certificate serial: 0716
Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6CA5528EF41711EB8BCE7253C4F9AE02.roa
Signing time: Tue 04 Apr 2023 04:59:26 +0000
ROA not before: Tue 04 Apr 2023 04:59:26 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 206283
IP address blocks: 117.55.195.0/24 maxlen: 24
117.55.205.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814 (0x716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Validity
Not Before: Apr 4 04:59:26 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=642baeae-ddcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:bd:bf:99:36:07:45:5d:ae:c5:87:1d:e1:
57:78:d0:96:c1:a8:b4:71:e1:d0:57:eb:b1:1b:1d:
da:a6:f7:6a:21:93:d5:9b:8f:c4:34:4c:41:25:05:
65:94:36:0d:d7:39:2a:0f:97:0f:b0:f9:fd:99:e7:
22:35:ca:01:89:76:99:1b:45:2a:81:cc:2e:89:bd:
cc:1a:5e:7b:2b:19:d2:70:94:3b:63:d7:5a:26:a2:
4a:d8:b1:ff:e2:01:cb:8c:1f:3a:93:22:83:60:2d:
5e:7f:38:9f:b1:13:66:3b:21:f8:ef:ff:ad:a2:b2:
0e:90:e6:29:93:c0:65:50:3e:0f:53:b0:7e:37:7c:
25:24:60:78:ca:f2:37:9e:be:8c:81:de:80:b8:c2:
03:cc:b8:e3:9c:2a:f3:1b:1c:89:7d:90:77:93:ef:
8e:9f:99:6f:ce:45:9c:00:3b:96:2d:a7:c7:c4:dd:
da:6a:6b:5f:97:24:3f:d6:df:8e:c2:14:db:16:d1:
5d:62:f3:1a:47:ae:e3:8a:75:99:4c:50:01:4d:24:
9e:02:d7:a4:d3:db:10:15:ea:b4:0f:92:d6:3e:44:
cb:bc:8a:ea:f8:24:62:c5:9c:ad:38:a3:9b:cd:1e:
f4:4e:6c:3e:ef:a0:fe:4c:0a:1b:05:c9:8f:1e:67:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:28:7E:49:E6:0B:DA:D1:19:77:52:B9:F2:BC:F7:F9:5E:CE:FC:9B
X509v3 Authority Key Identifier:
keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6CA5528EF41711EB8BCE7253C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.55.195.0/24
117.55.205.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e5:0b:a3:14:67:73:af:16:9c:69:b4:82:6a:5f:58:fc:02:
14:2d:20:90:66:be:9d:10:69:68:5d:25:dc:f1:23:93:e7:e8:
07:43:99:ee:a8:91:d1:04:75:62:3c:ab:f5:84:0e:bb:24:18:
86:b8:9a:90:5e:f9:07:b9:69:77:29:3d:11:f4:c6:f0:22:fa:
75:ae:47:d5:55:3f:2b:b3:37:57:fe:12:d9:f9:8e:cd:bc:ee:
55:ce:3f:80:6c:49:f3:00:80:62:c8:4e:21:d0:2b:8c:10:90:
c5:e7:fc:dd:21:de:db:bd:b0:05:e7:1e:5f:96:73:c1:69:7d:
f9:c2:48:35:dc:4c:7a:b6:4a:b0:4e:f9:e4:56:af:4f:ae:5f:
61:04:74:b2:94:1c:7a:bd:11:7f:08:69:83:c7:4a:86:87:da:
19:7c:49:37:28:19:53:d3:ee:33:bc:f3:89:8d:8c:7e:bc:dc:
cb:d1:dc:94:6c:f0:52:66:51:da:6f:df:fa:d7:00:06:30:18:
64:c3:d9:e4:5e:93:2b:99:bf:f3:93:77:c6:fd:d4:32:a4:2a:
a9:d9:2f:14:51:a5:86:f3:2b:c4:dc:9b:da:b2:15:91:1a:d4:
79:4e:03:12:ed:49:79:ad:ea:ce:81:b9:26:d5:9c:7f:2a:f1:
8f:fc:ca:3f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NBNEIxMTAvBgNVBAUTKDcwOTIxMENGNzYxRUM2N0ZCMzk0RUE1ODk2QTVDNjQ3
QjMwNUVFRjEwHhcNMjMwNDA0MDQ1OTI2WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDJiYWVhZS1kZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApOe9v5k2B0VdrsWHHeFXeNCWwai0ceHQV+uxGx3apvdqIZPVm4/ENExBJQVl
lDYN1zkqD5cPsPn9meciNcoBiXaZG0Uqgcwuib3MGl57KxnScJQ7Y9daJqJK2LH/
4gHLjB86kyKDYC1efzifsRNmOyH47/+torIOkOYpk8BlUD4PU7B+N3wlJGB4yvI3
nr6Mgd6AuMIDzLjjnCrzGxyJfZB3k++On5lvzkWcADuWLafHxN3aamtflyQ/1t+O
whTbFtFdYvMaR67jinWZTFABTSSeAtek09sQFeq0D5LWPkTLvIrq+CRixZytOKOb
zR70Tmw+76D+TAobBcmPHmcqBQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMoofknm
C9rRGXdSufK89/lezvybMB8GA1UdIwQYMBaAFHCSEM92HsZ/s5TqWJalxkezBe7x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E0Qi9EQzJGMDQzMkJG
ODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhuLXpsT3BZbHFYR1I3TUY3
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NKSVF6M1lleG4temxPcFlscVhHUjdNRjd2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0NBNEIvREMyRjA0MzJCRjgwMTFFQTk2RkU0QTY4QzRGOUFFMDIvNkNBNTUyOEVG
NDE3MTFFQjhCQ0U3MjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB1N8MDBAB1N80wDQYJKoZIhvcNAQELBQADggEBAEjlC6MU
Z3OvFpxptIJqX1j8AhQtIJBmvp0QaWhdJdzxI5Pn6AdDme6okdEEdWI8q/WEDrsk
GIa4mpBe+Qe5aXcpPRH0xvAi+nWuR9VVPyuzN1f+Etn5js287lXOP4BsSfMAgGLI
TiHQK4wQkMXn/N0h3tu9sAXnHl+Wc8FpffnCSDXcTHq2SrBO+eRWr0+uX2EEdLKU
HHq9EX8IaYPHSoaH2hl8STcoGVPT7jO884mNjH683MvR3JRs8FJmUdpv3/rXAAYw
GGTD2eRekyuZv/OTd8b91DKkKqnZLxRRpYbzK8Tcm9qyFZEa1HlOAxLtSXmt6s6B
uSbVnH8q8Y/8yj8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org