Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/7EE5BC4AB83A11EB869C6A53C4F9AE02.roa
File: 7EE5BC4AB83A11EB869C6A53C4F9AE02.roa (raw, json)
Hash identifier: 8dQzaw3GXgoR/ZOxSWLRcx7jXj1ly5t5Zm5JvmPIt4s=
Subject key identifier: E8:6B:AD:25:E5:BD:09:1A:6F:E8:50:34:53:C4:B1:85:66:3E:00:D0
Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Certificate serial: 0364
Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/7EE5BC4AB83A11EB869C6A53C4F9AE02.roa
Signing time: Mon 25 Jul 2022 01:50:26 +0000
ROA not before: Mon 25 Jul 2022 01:50:26 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 38829
IP address blocks: 118.127.160.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 868 (0x364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Validity
Not Before: Jul 25 01:50:26 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62ddf6e1-d754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:07:1b:d3:0a:ae:7e:ba:17:43:e1:2a:b7:
dd:ec:ec:60:a2:21:c1:e8:60:d0:ed:ab:7f:34:4b:
69:bf:be:ad:1f:5c:a5:24:90:82:96:4c:84:e1:cf:
f8:27:b5:81:75:7f:a2:72:a7:2d:82:a0:33:c6:2c:
c0:6d:9e:65:97:14:54:75:7a:f6:dd:d8:8f:1d:d0:
42:10:44:ee:76:35:25:5d:ee:d2:d4:05:b7:5e:de:
88:34:15:df:28:50:67:3f:2a:eb:96:11:0d:d0:57:
85:4a:3d:72:0c:0f:93:36:36:93:2e:92:f2:62:39:
b0:12:ec:a4:04:58:2c:94:49:fb:c8:22:b3:d8:81:
d9:48:0c:88:a7:c8:ab:26:c5:cf:f5:4f:22:f4:fe:
a2:ed:e1:d1:d9:1d:ee:f6:85:d1:e3:0f:d4:e8:33:
44:5f:2f:c2:51:fd:c9:50:13:09:f9:a9:eb:05:1b:
c8:96:e6:98:d1:51:2a:9e:21:78:f6:47:00:be:bf:
b1:ea:81:26:f7:5d:12:ad:ce:95:0f:e6:85:89:48:
71:0a:18:9c:2e:db:78:4c:1d:c4:54:78:d4:21:13:
15:ed:98:87:5f:6b:b8:1d:57:8a:b9:4a:44:8c:2e:
77:83:66:b8:06:ad:3b:85:a9:cf:5d:eb:1f:52:ef:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6B:AD:25:E5:BD:09:1A:6F:E8:50:34:53:C4:B1:85:66:3E:00:D0
X509v3 Authority Key Identifier:
keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/7EE5BC4AB83A11EB869C6A53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.127.160.0/19
Signature Algorithm: sha256WithRSAEncryption
51:2e:b7:23:3b:42:9f:9b:e5:70:93:73:cd:55:dc:a7:31:27:
a4:36:18:df:c5:f6:f2:5c:a9:3e:86:e2:ef:84:e7:43:7b:4b:
aa:a2:4e:c6:c2:05:c1:50:6c:ff:dd:f3:96:45:de:17:9d:85:
76:90:65:20:82:ea:29:c7:8f:2c:a9:1f:cc:b7:9d:63:e4:69:
7c:8d:46:74:9e:4b:b8:8d:7a:9f:04:4f:36:e9:69:f3:85:8e:
7a:15:7b:64:41:95:f5:0f:05:e9:f5:fe:fd:a9:22:8a:77:86:
5b:0f:79:f1:a7:ab:9a:08:a5:66:9a:26:29:86:61:68:be:a0:
9e:b8:c3:72:47:78:d8:d9:05:ac:b3:ed:fa:e4:9c:0f:f6:d1:
d7:3f:6a:31:99:f2:c6:ba:a7:f0:c8:16:08:95:b6:ff:9f:01:
a3:b5:ea:ff:d8:fd:0f:ec:6d:28:ea:af:5b:fd:f9:e0:df:56:
1f:97:8f:71:5b:17:c0:0d:3f:67:5d:f0:0e:e3:91:7c:ec:c0:
f7:23:c1:20:fb:b9:de:56:45:49:47:a1:34:28:26:3f:75:8c:
d3:92:18:6e:69:88:ce:9a:75:3d:2f:d1:1f:6f:6b:16:a2:51:
c8:8b:57:fc:6a:c0:98:df:19:42:7b:6c:db:7c:db:91:0b:15:
47:12:f2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org