Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4B5183B2BDDD11EAA6A87049C4F9AE02.roa
File: 4B5183B2BDDD11EAA6A87049C4F9AE02.roa (raw, json)
Hash identifier: lT5hUHcQ0QvmSACgp4rjEKk82G7Tovu5lzMrP+pBEGY=
Subject key identifier: 61:25:91:17:D4:3C:A8:B8:1B:C3:FC:E0:85:03:E7:BD:32:BB:9E:F4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4FCA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4B5183B2BDDD11EAA6A87049C4F9AE02.roa
Signing time: Mon 16 May 2022 04:07:49 +0000
ROA not before: Mon 16 May 2022 04:07:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134330
IP address blocks: 137.59.8.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20426 (0x4fca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:07:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281ce15-c09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:1d:fc:ca:1c:fb:be:f9:11:2c:41:0c:d3:
db:69:a6:d6:f9:7f:13:11:46:d4:6b:b3:45:35:9c:
50:10:76:88:b7:e7:eb:9a:d0:74:56:4f:7b:c0:bc:
dc:86:9a:6d:05:98:ac:68:cb:fa:c9:d0:a4:e1:57:
fa:94:96:4a:12:c7:b8:0e:87:eb:67:0b:49:b5:e6:
4b:d3:19:35:39:f4:2f:d7:b5:c1:f2:0d:7d:2a:ef:
e0:ce:e8:b0:ee:4b:8a:5a:07:9f:5b:c4:25:da:73:
de:4a:7b:36:5b:40:19:e8:ab:ab:41:8d:9f:53:59:
50:93:c3:31:ce:be:2b:89:d6:db:d9:9a:be:42:c5:
5e:51:f5:31:2d:cd:ae:bd:75:63:f2:6e:8c:59:ea:
d1:3a:84:51:ad:00:de:27:0e:c5:69:e0:9a:0a:83:
64:38:2e:b6:90:3c:09:d8:07:7e:a0:57:38:3b:72:
d7:fb:18:07:37:70:8b:85:97:05:04:5b:6c:b1:b4:
bc:a8:af:fc:43:9f:ac:14:9f:11:12:4c:8d:fc:98:
ee:3b:2c:ed:c1:42:ae:bc:71:69:9a:49:0f:a6:ea:
f4:0f:72:eb:4a:15:4a:2b:6a:13:72:8d:42:85:3a:
5d:2b:de:89:64:14:5a:83:3a:0b:c0:87:0c:cf:2f:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:25:91:17:D4:3C:A8:B8:1B:C3:FC:E0:85:03:E7:BD:32:BB:9E:F4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4B5183B2BDDD11EAA6A87049C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.59.8.0/22
Signature Algorithm: sha256WithRSAEncryption
23:c4:7b:9f:67:f3:81:8f:2b:4a:53:f2:c1:fb:61:de:14:78:
59:3f:83:36:0a:91:a7:2f:bb:0c:ca:57:a6:ad:ae:a3:4c:2e:
eb:7c:13:a1:93:c6:fb:13:1e:29:59:95:99:2e:c7:c1:a0:cd:
10:1b:09:83:5e:ba:5c:25:88:3e:a1:92:21:ee:39:38:14:85:
80:82:60:2a:cb:69:c2:78:d0:f1:3f:c2:86:5b:c6:74:af:13:
eb:68:96:1e:d3:75:30:55:4e:4e:c1:49:af:3d:f6:40:6e:3a:
da:75:93:7c:85:5c:be:a4:d9:57:f1:54:31:b5:f9:0b:8f:23:
14:24:26:37:41:8c:ba:f2:46:05:4f:49:13:e0:33:ab:47:69:
11:95:10:6d:6d:3f:80:e8:b2:97:07:ee:b7:aa:9d:2b:34:04:
68:84:d6:26:9e:81:5a:9f:05:eb:5e:58:7d:e7:8f:65:c2:1b:
58:9e:56:f8:82:36:86:ca:00:e6:f0:d2:f9:a6:7f:d0:f7:c3:
0e:20:cb:ee:7e:3a:35:85:9c:e3:57:a2:44:ac:04:fa:97:aa:
0c:0c:86:fc:c8:3d:9e:82:97:5a:80:4a:5a:f0:3f:e0:a9:b6:
77:61:19:a1:dd:6f:90:4a:89:29:35:7f:21:ae:69:5b:f6:95:
ab:42:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-ams.rpki-client.org