Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/6727050866A211EBB4C01552C4F9AE02.roa
File: 6727050866A211EBB4C01552C4F9AE02.roa (raw, json)
Hash identifier: LVpvRBaWpEA1uqLJ3MsbraYAXhIKG4y2fLGe0oR1Jdk=
Subject key identifier: 2C:09:BC:3B:85:75:42:38:8C:CD:40:46:52:A7:53:13:2F:64:70:B7
Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial: 041C
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/6727050866A211EBB4C01552C4F9AE02.roa
Signing time: Sun 04 Jul 2021 22:17:19 +0000
ROA not before: Sun 04 Jul 2021 22:17:19 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 134180
IP address blocks: 45.127.248.0/24 maxlen: 24
45.127.249.0/24 maxlen: 24
45.127.250.0/24 maxlen: 24
45.127.251.0/24 maxlen: 24
45.250.228.0/24 maxlen: 24
45.250.229.0/24 maxlen: 24
45.250.230.0/24 maxlen: 24
45.250.231.0/24 maxlen: 24
103.57.41.0/24 maxlen: 24
103.57.42.0/24 maxlen: 24
103.57.43.0/24 maxlen: 24
103.199.232.0/24 maxlen: 24
103.199.233.0/24 maxlen: 24
103.199.234.0/23 maxlen: 24
103.202.220.0/22 maxlen: 22
103.202.220.0/24 maxlen: 24
103.202.221.0/24 maxlen: 24
103.202.222.0/23 maxlen: 23
103.202.222.0/24 maxlen: 24
103.202.223.0/24 maxlen: 24
103.209.196.0/24 maxlen: 24
103.209.197.0/24 maxlen: 24
103.209.198.0/24 maxlen: 24
103.209.199.0/24 maxlen: 24
202.133.88.0/24 maxlen: 24
202.133.89.0/24 maxlen: 24
202.133.90.0/24 maxlen: 24
202.133.91.0/24 maxlen: 24
2403:6940::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1052 (0x41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Validity
Not Before: Jul 4 22:17:19 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=60e2336f-7da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:f3:ed:16:22:83:22:30:23:8a:b7:66:22:
de:31:e1:51:d0:05:c9:9d:4c:68:df:98:a3:b5:1c:
59:3f:c7:82:6a:76:fa:bb:d5:e3:7d:54:8f:5c:bf:
b3:ac:0b:72:b6:02:c1:aa:58:f8:e0:35:27:b2:5b:
95:98:19:75:29:98:86:b1:01:39:a3:29:2d:b6:86:
c1:10:a8:25:b5:c4:7c:24:e7:0c:35:83:04:4b:a4:
f4:1f:b5:2d:a0:8b:7a:6a:53:77:b9:4e:bc:45:61:
2f:ef:6b:a7:62:76:eb:36:de:f7:04:5d:72:de:d9:
23:00:9a:bf:51:b3:35:15:83:76:de:cc:32:8e:c4:
2f:de:4d:cf:98:7e:4b:e9:29:a8:33:6b:e8:4b:ee:
bf:52:e8:6c:ff:3d:6d:7d:58:1b:09:83:3f:a8:15:
58:7d:b2:6e:34:85:4f:31:ac:da:5e:a1:a8:31:24:
71:31:d1:53:c7:24:bd:1a:04:23:7f:11:a6:35:88:
4d:ce:31:7a:80:ec:1e:7b:4a:4b:e0:d3:96:f6:32:
25:24:a5:be:7d:96:65:0f:ae:bb:b3:51:a3:8b:9b:
a0:8b:de:47:6f:16:db:15:74:6a:4a:56:39:a8:1b:
08:77:84:dd:d7:64:65:27:d5:6d:1c:b6:6c:cc:e4:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:BC:3B:85:75:42:38:8C:CD:40:46:52:A7:53:13:2F:64:70:B7
X509v3 Authority Key Identifier:
keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/6727050866A211EBB4C01552C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
45.250.228.0/22
103.57.41.0-103.57.43.255
103.199.232.0/22
103.202.220.0/22
103.209.196.0/22
202.133.88.0/22
IPv6:
2403:6940::/32
Signature Algorithm: sha256WithRSAEncryption
bc:27:0f:5e:4b:df:23:b1:b0:ab:59:e8:73:db:62:a5:94:e5:
51:49:f7:9e:7a:c9:59:51:f5:0c:63:a5:03:e4:fc:42:60:b3:
13:71:e4:b9:74:83:d2:9f:51:fc:59:a3:db:bf:fa:fe:57:eb:
4b:d8:70:87:c8:88:c3:75:57:09:8f:41:f0:74:90:6e:cd:c5:
a1:7e:9f:a6:a1:6b:c3:c0:39:af:51:e2:7f:6c:60:b3:62:54:
7d:4a:2d:d7:20:0f:fe:f0:28:ec:bd:b2:b7:bc:33:c6:3f:10:
f7:82:04:22:7d:46:83:62:94:9d:41:f1:14:43:bb:0d:f1:c8:
1f:84:13:39:62:a3:1e:60:d6:46:f3:d9:45:b8:d5:46:b8:83:
f1:10:f4:42:96:e3:4a:89:47:3f:4e:82:86:0a:39:63:5a:8a:
71:35:de:ed:81:6b:55:52:86:43:a2:39:f7:9f:94:09:a1:dd:
ac:e8:26:d6:55:61:72:e2:a3:8e:4b:00:12:78:2a:8e:01:a8:
98:05:c8:b1:c1:19:2d:41:8f:6c:1d:d2:a4:5d:e0:93:63:d0:
0e:35:3c:85:93:ff:c6:24:21:ea:71:49:c8:6d:36:fa:45:4b:
2d:19:52:ac:7d:54:19:dc:ac:f1:09:1f:7c:00:ca:e0:a9:cf:
9b:9a:61:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-fra.rpki-client.org