Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/FD4AD1D6FC2A11EB93C7F37DC4F9AE02.roa
File: FD4AD1D6FC2A11EB93C7F37DC4F9AE02.roa (raw, json)
Hash identifier: Flem9Tmdwje4l8f5cQu8lWH3L2Lt6pRWADo4gX3ghbw=
Subject key identifier: 3D:D0:3F:30:EC:DE:08:D5:3A:30:CD:DE:14:B4:C1:B9:DB:44:C4:51
Certificate issuer: /CN=A915059B/serialNumber=CA877333B712345F05D2DC6706572E1CB6211778
Certificate serial: 02E8
Authority key identifier: CA:87:73:33:B7:12:34:5F:05:D2:DC:67:06:57:2E:1C:B6:21:17:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yodzM7cSNF8F0txnBlcuHLYhF3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/FD4AD1D6FC2A11EB93C7F37DC4F9AE02.roa
Signing time: Fri 13 Aug 2021 11:38:33 +0000
ROA not before: Fri 13 Aug 2021 11:38:33 +0000
ROA not after: Sat 28 May 2022 00:00:00 +0000
asID: 64052
IP address blocks: 137.59.4.0/24 maxlen: 24
137.59.5.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915059B/serialNumber=CA877333B712345F05D2DC6706572E1CB6211778
Validity
Not Before: Aug 13 11:38:33 2021 GMT
Not After : May 28 00:00:00 2022 GMT
Subject: CN=611659b9-9ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:8b:42:03:92:01:04:8d:9f:fb:9f:cf:06:
8c:02:e9:f6:b7:b6:05:8b:ad:ed:fc:87:ec:00:6b:
b7:bc:7c:c0:49:7f:42:18:21:c1:ba:9a:e9:e6:7e:
3e:c9:bb:14:88:8a:85:46:0f:33:d9:fb:79:43:d2:
3e:a3:75:fd:1c:78:04:20:92:51:d9:a9:9c:14:87:
56:73:3e:f6:2f:cc:6a:ea:6d:ac:56:77:de:c1:8e:
d1:41:9e:d5:55:78:e3:4f:b5:f0:ad:87:91:b4:09:
fd:fd:a3:91:51:e4:71:e3:64:7f:12:0c:65:1f:2e:
f6:df:5f:2d:30:f0:95:26:a5:0e:c5:b1:34:e6:e6:
9a:28:90:39:39:55:40:64:a0:5c:f3:e7:25:36:ab:
23:95:c6:d4:ea:ee:ed:65:e8:9a:b5:6a:7d:0f:c6:
bd:7e:d3:04:a1:7d:89:a9:00:48:05:d9:bf:69:bc:
6c:26:36:c4:e9:7a:e1:1f:17:55:80:ef:19:8c:ba:
56:38:4d:ab:f1:7f:de:20:9f:df:d0:b3:e7:4a:be:
86:f3:0c:20:2d:99:f6:f7:7e:b5:78:09:47:04:d9:
c9:91:b8:07:d1:e4:19:81:96:98:fc:fe:1e:42:30:
99:5f:4e:88:40:e6:a6:53:8d:1b:48:e2:64:b7:7c:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:3F:30:EC:DE:08:D5:3A:30:CD:DE:14:B4:C1:B9:DB:44:C4:51
X509v3 Authority Key Identifier:
keyid:CA:87:73:33:B7:12:34:5F:05:D2:DC:67:06:57:2E:1C:B6:21:17:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/yodzM7cSNF8F0txnBlcuHLYhF3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yodzM7cSNF8F0txnBlcuHLYhF3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/FD4AD1D6FC2A11EB93C7F37DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.59.4.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:70:36:6b:be:aa:b5:db:99:79:03:28:67:75:ee:a7:47:63:
5e:d5:fe:df:13:4e:fb:96:a6:49:ff:ba:06:87:97:2d:98:3b:
62:1a:9b:9e:ea:e3:9d:b8:f3:b0:c0:19:10:4f:f3:64:ad:31:
b7:7e:6b:81:6a:6e:8a:0a:e6:0e:2c:69:c5:74:04:ce:69:54:
e2:23:79:8c:01:94:03:62:ff:d2:ab:fe:fc:89:6b:be:91:27:
67:f7:aa:24:d8:47:5d:e2:b3:a2:dd:f7:8a:e2:ac:4d:4e:b4:
2d:23:f5:78:0e:2e:ca:38:72:7c:1b:d8:ae:77:92:73:43:c7:
41:88:5c:89:8e:fb:fc:59:46:bc:d0:a1:71:c3:d3:d8:d2:17:
40:ef:6e:1d:00:7a:7a:20:a2:15:38:65:16:c4:5f:8c:9f:d1:
04:53:62:42:f6:27:65:ca:2e:86:45:c4:fc:c2:03:7d:99:6c:
15:99:d0:3e:36:86:76:ae:28:29:c9:22:cb:31:29:9b:b8:3e:
e3:47:f7:8c:4a:f1:6b:9e:81:e1:1e:99:9c:91:0b:71:cb:70:
93:03:13:d8:c1:4f:2d:3a:d1:ec:4f:6f:ab:86:5a:94:5f:d2:
01:c0:52:66:fc:13:b1:63:27:b5:6a:c0:bb:22:74:68:41:18:
44:48:64:24
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA1OUIxMTAvBgNVBAUTKENBODc3MzMzQjcxMjM0NUYwNUQyREM2NzA2NTcyRTFD
QjYyMTE3NzgwHhcNMjEwODEzMTEzODMzWhcNMjIwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MTE2NTliOS05ZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlE2LQgOSAQSNn/ufzwaMAun2t7YFi63t/IfsAGu3vHzASX9CGCHBuprp5n4+
ybsUiIqFRg8z2ft5Q9I+o3X9HHgEIJJR2amcFIdWcz72L8xq6m2sVnfewY7RQZ7V
VXjjT7XwrYeRtAn9/aORUeRx42R/EgxlHy72318tMPCVJqUOxbE05uaaKJA5OVVA
ZKBc8+clNqsjlcbU6u7tZeiatWp9D8a9ftMEoX2JqQBIBdm/abxsJjbE6XrhHxdV
gO8ZjLpWOE2r8X/eIJ/f0LPnSr6G8wwgLZn29361eAlHBNnJkbgH0eQZgZaY/P4e
QjCZX06IQOamU40bSOJkt3yvCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD3QPzDs
3gjVOjDN3hS0wbnbRMRRMB8GA1UdIwQYMBaAFMqHczO3EjRfBdLcZwZXLhy2IRd4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDU5Qi83NEZCNDJBODIy
NzMxMUVBOEEwRjM4MjJDNEY5QUUwMi95b2R6TTdjU05GOEYwdHhuQmxjdUhMWWhG
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lvZHpNN2NTTkY4RjB0eG5CbGN1SExZaEYzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTA1OUIvNzRGQjQyQTgyMjczMTFFQThBMEYzODIyQzRGOUFFMDIvRkQ0QUQxRDZG
QzJBMTFFQjkzQzdGMzdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGJOwQwDQYJKoZIhvcNAQELBQADggEBAD9wNmu+qrXbmXkD
KGd17qdHY17V/t8TTvuWpkn/ugaHly2YO2Iam57q452487DAGRBP82StMbd+a4Fq
booK5g4sacV0BM5pVOIjeYwBlANi/9Kr/vyJa76RJ2f3qiTYR13is6Ld94rirE1O
tC0j9XgOLso4cnwb2K53knNDx0GIXImO+/xZRrzQoXHD09jSF0Dvbh0AenogohU4
ZRbEX4yf0QRTYkL2J2XKLoZFxPzCA32ZbBWZ0D42hnauKCnJIssxKZu4PuNH94xK
8WuegeEemZyRC3HLcJMDE9jBTy060exPb6uGWpRf0gHAUmb8E7FjJ7VqwLsidGhB
GERIZCQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-ams.rpki-client.org