Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E154C2F86B8D11EB8EBA404BC4F9AE02.roa
File: E154C2F86B8D11EB8EBA404BC4F9AE02.roa (raw, json)
Hash identifier: CBeM36iJU7eiI6mT/Ew7a7nSE/mjhUxa8AZbsPlAeLM=
Subject key identifier: 29:35:DB:C4:A0:A0:8D:FB:E6:ED:D3:1A:D7:11:59:34:EF:0C:5F:BA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 33ED
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E154C2F86B8D11EB8EBA404BC4F9AE02.roa
Signing time: Tue 25 May 2021 16:21:16 +0000
ROA not before: Tue 25 May 2021 16:21:16 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 23682
IP address blocks: 203.76.176.0/24 maxlen: 24
203.76.177.0/24 maxlen: 24
203.76.178.0/24 maxlen: 24
203.76.179.0/24 maxlen: 24
203.76.182.0/24 maxlen: 24
203.76.183.0/24 maxlen: 24
203.76.184.0/24 maxlen: 24
203.76.187.0/24 maxlen: 24
203.76.189.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13293 (0x33ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 25 16:21:16 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60ad23fc-ddb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:1d:3d:1d:d7:fe:65:cf:99:16:2d:2c:f0:
da:e9:c6:94:2a:54:fd:12:be:85:33:79:ec:78:8c:
f3:96:50:3d:91:d6:7e:fb:1e:96:ae:71:c8:b0:c6:
5e:7e:9f:1e:cf:ed:da:6c:f6:de:97:84:d0:1a:51:
6f:86:9d:59:bb:ad:d1:62:ab:d5:de:8f:16:71:57:
e9:20:94:e6:38:ec:20:67:42:85:72:a8:55:42:77:
db:d3:b4:72:57:96:44:a0:4c:52:95:dd:64:ca:74:
d2:98:19:9a:49:9b:59:63:24:63:dd:da:cc:22:2e:
eb:48:26:60:d9:66:35:65:b3:71:d5:9b:19:e2:75:
c5:5f:bf:bf:58:38:b4:ce:70:90:b2:73:cf:c1:f3:
ec:6b:3e:5c:01:d5:c5:a7:9f:db:59:52:b6:d7:2e:
a0:ac:9c:01:e6:59:db:8a:d1:2b:b6:8e:39:b7:cb:
5f:3c:5b:b8:05:67:38:e4:0e:4a:74:a1:7e:ab:fd:
34:60:5a:21:0d:93:51:80:9a:8b:f8:98:d8:1a:b4:
5a:39:54:d5:2c:c5:a2:d2:49:df:f0:6e:dd:b2:87:
fd:c5:b6:d8:28:b0:64:4a:5f:5b:60:e0:fa:d4:e7:
32:cf:68:ec:a2:d8:c9:87:68:5e:23:d7:a7:c9:c1:
44:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:35:DB:C4:A0:A0:8D:FB:E6:ED:D3:1A:D7:11:59:34:EF:0C:5F:BA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E154C2F86B8D11EB8EBA404BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.76.176.0/22
203.76.182.0-203.76.184.255
203.76.187.0/24
203.76.189.0/24
Signature Algorithm: sha256WithRSAEncryption
38:3f:9c:cc:8b:2e:14:f4:92:f5:4e:b3:e8:3f:b5:3e:d0:cd:
60:69:e4:aa:d2:d7:93:8e:7d:2d:21:3d:72:21:76:0d:ca:84:
1d:84:08:11:ce:44:fc:a9:a9:bd:69:17:a8:d1:81:91:cf:75:
38:f6:81:bc:b5:7f:1a:fd:40:fd:db:ff:78:6c:07:82:8f:ac:
07:91:b0:c3:3f:9d:2e:a9:28:b7:a8:52:6e:76:a3:33:e2:ce:
f2:7a:bb:50:93:f4:30:f6:86:1d:ad:60:cf:bf:5a:e1:e5:6a:
3f:95:d2:53:cb:bf:dc:6a:9c:49:0b:f2:f7:c4:c8:d3:5e:d5:
94:f1:21:6e:38:a8:c4:c9:ff:45:a3:81:92:2f:b2:8a:fd:c2:
1f:09:e3:35:68:ea:99:bf:26:85:14:e3:d6:f5:2e:8a:60:bf:
2d:9d:74:a4:59:15:21:39:37:6d:73:7d:4f:a3:b2:da:ef:01:
3f:8e:d8:94:d8:b9:21:22:16:a0:ab:b9:c4:9e:a1:bd:9f:5a:
3e:57:55:72:d0:a7:a9:49:88:3d:1b:e0:ba:b8:7b:2f:04:97:
00:17:33:d3:fa:21:69:9c:6d:05:a4:7e:0d:85:89:31:c9:e7:
82:a5:d5:32:ed:81:ec:48:ae:a2:38:b0:67:3e:39:d9:6c:e7:
bf:47:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org