Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/04D9406602CF11EE83CAF94FC4F9AE02.roa
File: 04D9406602CF11EE83CAF94FC4F9AE02.roa (raw, json)
Hash identifier: A5NNPWnzjWBDS4nx3zi01uXejCUGbyaqo9Uq4IjSDig=
Subject key identifier: B6:F4:50:33:8A:12:C7:65:47:42:F3:C9:6D:7E:11:9D:1F:9E:A2:ED
Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial: 0C9E
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/04D9406602CF11EE83CAF94FC4F9AE02.roa
Signing time: Sun 04 Jun 2023 11:57:46 +0000
ROA not before: Sun 04 Jun 2023 11:57:46 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 18230
IP address blocks: 59.152.0.0/20 maxlen: 20
59.152.0.0/24 maxlen: 24
59.152.1.0/24 maxlen: 24
59.152.2.0/24 maxlen: 24
59.152.5.0/24 maxlen: 24
59.152.8.0/24 maxlen: 24
59.152.9.0/24 maxlen: 24
59.152.10.0/24 maxlen: 24
59.152.12.0/24 maxlen: 24
59.152.13.0/24 maxlen: 24
59.152.15.0/24 maxlen: 24
2404:1b40::/32 maxlen: 32
2404:1b40::/48 maxlen: 48
2404:1b40:1::/48 maxlen: 48
2404:1b40:2::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3230 (0xc9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Validity
Not Before: Jun 4 11:57:46 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=647c7c3a-7f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:dc:4e:63:22:b7:07:f1:2f:99:a7:00:8c:
6d:2a:6a:b2:21:e5:fb:1c:61:b7:43:6a:ed:ac:72:
db:9b:b4:51:1b:2a:49:ee:5b:5a:df:31:21:27:c9:
4c:6c:00:c3:35:92:ce:1c:ef:66:e3:84:89:58:88:
cd:b1:e6:25:92:5f:54:07:a9:6a:66:30:f2:94:e9:
ee:d2:49:a8:9f:09:62:45:a6:89:af:30:d7:06:37:
88:eb:ed:7b:16:8b:fa:12:49:c4:d1:51:c9:a9:34:
e1:9b:1e:f9:9c:9f:dd:7f:f8:15:de:9d:21:76:1e:
ce:ed:98:3f:3f:21:cf:1d:6d:0f:6a:24:bf:2e:00:
a5:ca:18:74:08:f6:c7:f3:45:55:1a:8a:c4:2e:0e:
9a:49:0b:47:20:da:75:da:fc:50:49:19:01:76:e2:
03:09:d3:c1:8a:70:67:99:b9:2a:33:3c:9c:32:4e:
6c:cf:6e:de:36:46:e2:0a:3e:f2:5a:87:9a:94:74:
a4:e0:93:96:7b:49:52:4f:b5:b3:fa:fd:ca:60:fe:
22:5f:7a:d1:4b:b3:21:33:84:ba:b5:c0:0f:0e:53:
67:d4:11:f5:ef:2d:16:9c:e3:66:e0:20:76:72:73:
8a:29:c7:eb:29:92:ca:5a:b8:01:b5:f5:d0:03:42:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F4:50:33:8A:12:C7:65:47:42:F3:C9:6D:7E:11:9D:1F:9E:A2:ED
X509v3 Authority Key Identifier:
keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/04D9406602CF11EE83CAF94FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.152.0.0/20
IPv6:
2404:1b40::/32
Signature Algorithm: sha256WithRSAEncryption
a5:fc:0e:e5:3e:a7:bb:e3:29:a7:13:27:8a:0d:56:59:e7:80:
b4:5a:a5:82:98:7a:50:3f:63:83:7f:24:8e:59:85:4c:47:34:
e8:51:5a:13:91:bc:5e:17:8a:a4:50:62:49:d7:94:99:dc:39:
25:53:b5:e1:2a:75:73:30:10:a8:ea:1a:70:e8:35:8b:af:cd:
1d:fe:a1:80:a9:f4:b4:0e:e9:09:11:b1:3c:19:ee:c2:08:75:
b2:bc:dd:dd:b1:b9:4f:87:58:1a:1b:37:84:35:23:c9:a3:4f:
54:43:eb:3f:eb:ed:90:b4:b5:9b:1a:d7:ee:fb:50:c5:54:8b:
e7:58:61:2d:fd:68:81:32:a6:cd:f0:0d:27:7f:b6:29:3d:3f:
34:37:c6:5e:2c:54:1b:58:6a:e3:9e:9b:9e:21:7d:2e:6e:d0:
af:24:ad:49:df:e2:43:3a:2f:5a:8d:35:c5:20:92:39:fa:b4:
c1:9c:3d:b1:05:51:00:69:2c:5c:95:04:cb:c0:2f:e3:b7:d3:
0d:51:71:c9:55:44:c8:bd:0b:7e:f6:44:1e:4a:7b:ba:47:c7:
c8:47:e4:b4:f5:ec:27:78:0d:9b:cb:21:65:60:96:d0:81:3f:
e1:36:17:30:0b:f2:eb:b0:f0:e7:f7:26:60:4e:3b:4e:94:bb:
da:6e:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org