Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/44BF3DB4E24311ECAFDFE757C4F9AE02.roa
File: 44BF3DB4E24311ECAFDFE757C4F9AE02.roa (raw, json)
Hash identifier: XJLyq4opGYSVrnTqpqLTyCzVzBF1XTmycp+WE8zvJ6Q=
Subject key identifier: 30:E1:88:7E:AE:14:15:32:97:FF:4D:F1:98:AE:01:AD:F3:4C:7E:F8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 567A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/44BF3DB4E24311ECAFDFE757C4F9AE02.roa
Signing time: Thu 02 Jun 2022 07:11:49 +0000
ROA not before: Thu 02 Jun 2022 07:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23682
IP address blocks: 203.76.176.0/24 maxlen: 24
203.76.177.0/24 maxlen: 24
203.76.179.0/24 maxlen: 24
203.76.182.0/24 maxlen: 24
203.76.183.0/24 maxlen: 24
203.76.184.0/24 maxlen: 24
203.76.187.0/24 maxlen: 24
203.76.189.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22138 (0x567a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 2 07:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=629862b4-2bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:88:2a:69:0b:d9:b7:06:bc:69:58:62:dd:
f3:78:e5:c9:fc:05:e5:ca:a4:e8:b8:54:d2:f0:68:
73:c2:6e:5c:99:19:ce:72:74:fe:ab:e3:e3:3f:9c:
02:0c:0d:2e:33:b4:85:03:67:0a:da:3a:17:79:09:
e8:4f:27:db:49:45:cf:fe:46:0e:18:22:d5:e6:c6:
66:ae:85:05:e0:4b:07:ce:44:a5:9c:53:1d:5b:c4:
26:4c:b1:3e:76:47:0d:20:08:a4:f9:f5:46:ca:b1:
fe:43:a6:79:86:db:12:d9:38:42:64:b9:26:04:f8:
81:25:df:4f:df:63:5d:4a:1c:3b:22:0b:c3:a9:ab:
cc:c8:07:e4:69:0f:41:94:aa:0c:2f:d8:6e:fe:21:
25:62:1a:f4:5d:74:42:08:79:b6:2a:73:ce:6b:f5:
45:36:bc:c3:e1:fc:d8:a8:51:10:d8:f4:2b:af:93:
a9:db:8d:43:2e:ef:04:5f:41:6e:14:9b:c0:cd:1f:
fa:b8:af:12:70:06:13:3a:96:5b:0a:11:f6:dc:b7:
51:da:57:b0:3c:da:4a:bd:de:d7:8d:44:05:18:d0:
7b:9e:ed:f1:eb:38:ab:e9:7c:37:51:95:0d:e5:29:
1f:40:fd:86:c7:b1:30:c0:86:34:29:56:f0:00:c3:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E1:88:7E:AE:14:15:32:97:FF:4D:F1:98:AE:01:AD:F3:4C:7E:F8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/44BF3DB4E24311ECAFDFE757C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.76.176.0/23
203.76.179.0/24
203.76.182.0-203.76.184.255
203.76.187.0/24
203.76.189.0/24
Signature Algorithm: sha256WithRSAEncryption
43:5f:8b:a1:7c:24:46:53:63:23:81:d3:d5:d2:2a:06:bc:82:
45:00:d3:60:91:7f:c9:c2:64:7e:a8:68:81:1f:b1:40:54:a4:
93:26:a3:6d:c7:bc:50:93:c8:af:a8:c3:2c:a8:8b:ef:d0:0b:
a3:a6:9f:16:1b:dd:44:b7:5d:e4:76:1b:c7:c4:ff:83:61:88:
1e:09:8d:b0:3b:95:72:69:a1:6a:c0:cf:cf:7a:36:7d:70:44:
62:40:52:51:0d:77:c6:32:bc:db:e5:9e:50:48:6d:b2:30:e3:
56:f9:ad:7e:cc:c8:dd:22:cc:67:a6:7c:87:33:6e:f4:ed:6f:
83:60:54:a5:f4:eb:26:ce:69:f7:b3:71:bb:c7:5d:3d:fd:98:
66:7c:18:90:36:ce:14:59:e8:4d:91:8d:87:d2:c7:9d:30:e2:
a5:60:d0:11:f4:3e:81:fe:ba:ed:87:36:fa:04:d2:9d:0f:37:
70:ef:bc:be:c8:af:92:44:cd:65:2b:60:e3:29:13:0d:5d:90:
d2:87:c5:c7:e9:5d:7d:ec:0f:17:72:0b:f5:db:a3:48:9a:b7:
22:e6:64:77:ec:2a:b4:f1:c1:e6:45:eb:27:8e:b4:5e:c9:04:
b9:d0:1f:76:1f:82:c7:10:f3:12:84:f8:e5:ce:cc:58:1f:30:
9b:d5:23:55
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgICVnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNjAyMDcxMTQ5WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjk4NjJiNC0yYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4N2IKmkL2bcGvGlYYt3zeOXJ/AXlyqTouFTS8Ghzwm5cmRnOcnT+q+PjP5wC
DA0uM7SFA2cK2joXeQnoTyfbSUXP/kYOGCLV5sZmroUF4EsHzkSlnFMdW8QmTLE+
dkcNIAik+fVGyrH+Q6Z5htsS2ThCZLkmBPiBJd9P32NdShw7IgvDqavMyAfkaQ9B
lKoML9hu/iElYhr0XXRCCHm2KnPOa/VFNrzD4fzYqFEQ2PQrr5Op241DLu8EX0Fu
FJvAzR/6uK8ScAYTOpZbChH23LdR2lewPNpKvd7XjUQFGNB7nu3x6zir6Xw3UZUN
5SkfQP2Gx7EwwIY0KVbwAMNmIQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFDDhiH6u
FBUyl/9N8ZiuAa3zTH74MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDRCRjNEQjRF
MjQzMTFFQ0FGREZFNzU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E
MDAuMCwEAgABMCYDBAHLTLADBADLTLMwDAMEActMtgMEAMtMuAMEAMtMuwMEAMtM
vTANBgkqhkiG9w0BAQsFAAOCAQEAQ1+LoXwkRlNjI4HT1dIqBryCRQDTYJF/ycJk
fqhogR+xQFSkkyajbce8UJPIr6jDLKiL79ALo6afFhvdRLdd5HYbx8T/g2GIHgmN
sDuVcmmhasDPz3o2fXBEYkBSUQ13xjK82+WeUEhtsjDjVvmtfszI3SLMZ6Z8hzNu
9O1vg2BUpfTrJs5p97Nxu8ddPf2YZnwYkDbOFFnoTZGNh9LHnTDipWDQEfQ+gf66
7Yc2+gTSnQ83cO+8vsivkkTNZStg4ykTDV2Q0ofFx+ldfewPF3IL9dujSJq3IuZk
d+wqtPHB5kXrJ460XskEudAfdh+CxxDzEoT45c7MWB8wm9UjVQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-ams.rpki-client.org