Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/698E58FA2E8811EDAF9A0C54C4F9AE02.roa
File: 698E58FA2E8811EDAF9A0C54C4F9AE02.roa (raw, json)
Hash identifier: QZciswN683x+Gv3zr1wR59jmOd4PmXE1rQbANXIEebA=
Subject key identifier: 29:11:93:8C:E5:7D:56:F5:47:D7:09:D3:1A:E7:FF:E7:3A:9C:0E:C7
Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial: 0781
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/698E58FA2E8811EDAF9A0C54C4F9AE02.roa
Signing time: Wed 07 Sep 2022 08:38:14 +0000
ROA not before: Wed 07 Sep 2022 08:38:14 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 134180
IP address blocks: 45.250.228.0/24 maxlen: 24
45.250.229.0/24 maxlen: 24
45.250.230.0/24 maxlen: 24
45.250.231.0/24 maxlen: 24
103.199.232.0/24 maxlen: 24
103.199.233.0/24 maxlen: 24
103.199.234.0/23 maxlen: 24
103.202.220.0/22 maxlen: 22
103.202.220.0/24 maxlen: 24
103.202.221.0/24 maxlen: 24
103.202.222.0/23 maxlen: 23
103.202.222.0/24 maxlen: 24
103.202.223.0/24 maxlen: 24
103.209.196.0/24 maxlen: 24
103.209.197.0/24 maxlen: 24
103.209.198.0/24 maxlen: 24
103.209.199.0/24 maxlen: 24
202.133.88.0/24 maxlen: 24
202.133.89.0/24 maxlen: 24
202.133.91.0/24 maxlen: 24
2403:6940::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Validity
Not Before: Sep 7 08:38:14 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=63185876-bc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:84:51:1e:4b:77:f3:a8:82:3e:8f:93:be:
75:1f:cd:52:0f:7a:d2:cf:15:6a:89:20:32:7f:97:
15:a9:f1:c0:3b:c4:25:8a:48:dc:5f:0f:45:ec:a5:
f2:53:e0:84:01:17:1f:49:ad:5c:fa:be:30:63:3d:
26:74:5f:ca:4f:38:d7:09:83:d9:89:53:5a:bd:76:
92:d9:09:90:10:04:29:6e:2b:0a:ed:9f:66:24:e1:
f1:a2:74:f1:87:86:9a:c6:54:99:ce:15:06:d4:19:
cf:29:f8:cb:f7:c5:20:2e:ec:88:ed:76:8d:6c:cf:
62:63:e8:3a:c4:4f:4c:14:e8:30:eb:46:f1:d1:f9:
79:d7:0c:6f:68:f0:81:f7:75:c5:51:dd:25:02:1a:
e8:cf:80:14:78:74:95:85:88:d1:07:bd:1a:3c:bd:
28:17:1d:29:76:0f:85:66:26:5c:07:ab:1b:f3:0f:
07:68:6c:03:60:ab:f4:dd:5b:e7:2c:46:0b:9f:e8:
85:21:fb:55:14:dd:2c:95:e0:5c:0f:8e:46:b9:05:
10:87:79:f9:db:fa:f1:4c:2d:91:21:82:04:81:ba:
82:9a:a6:a7:0e:6b:2f:2c:88:9a:0e:7f:e7:72:11:
dc:b0:f7:70:ee:02:aa:7b:7f:87:26:28:6a:a7:60:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:11:93:8C:E5:7D:56:F5:47:D7:09:D3:1A:E7:FF:E7:3A:9C:0E:C7
X509v3 Authority Key Identifier:
keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/698E58FA2E8811EDAF9A0C54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.228.0/22
103.199.232.0/22
103.202.220.0/22
103.209.196.0/22
202.133.88.0/23
202.133.91.0/24
IPv6:
2403:6940::/32
Signature Algorithm: sha256WithRSAEncryption
ac:36:f0:72:20:87:b4:21:72:0d:24:59:b5:0f:c9:b2:41:30:
5e:d8:52:36:09:1e:40:e7:2f:db:19:e7:52:44:1d:13:61:da:
84:67:c7:19:80:d7:51:61:eb:0f:49:f0:22:6a:fb:a2:95:3e:
6f:5a:25:1c:b2:43:d6:c9:a4:9a:3d:41:cf:7a:48:fc:12:20:
8e:44:e9:3b:6e:b4:11:b1:d8:41:ca:4a:2d:3e:f0:c8:ef:9f:
a7:ef:34:91:b4:a9:2b:d0:50:0d:0d:99:7f:32:54:f0:18:b4:
be:a9:11:d0:69:9b:a4:69:57:dd:c5:52:be:9f:68:65:81:d9:
8b:ed:c9:c1:f4:b6:e1:58:62:73:23:3a:c9:f4:cd:4d:c6:08:
53:43:83:f8:75:17:ac:7c:f6:33:73:3f:2c:47:b9:13:7a:5c:
9c:01:95:27:6c:3c:00:7e:fc:c0:f7:92:d3:68:b4:7b:8e:fa:
76:98:eb:28:8f:f0:a5:56:04:33:bb:e7:96:74:5e:fd:38:73:
66:14:23:24:2d:dd:07:6c:70:f7:1a:0f:e7:7d:2d:c1:12:7e:
9d:79:6f:64:6a:75:07:3e:01:ca:33:c9:0a:dc:12:73:ba:13:
e3:45:5d:30:ee:dc:79:a6:95:1f:63:9f:7e:45:70:94:f0:37:
52:30:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org