Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/5B4708E851AA11EC9D87A643C4F9AE02.roa
File: 5B4708E851AA11EC9D87A643C4F9AE02.roa (raw, json)
Hash identifier: yaFLaP0Hoyeumio0mOxRjprdP9HZDEQA6shBXxlmsCc=
Subject key identifier: 2A:D3:37:2F:CD:9E:BB:AE:94:AE:72:45:17:0A:30:F5:15:87:C0:40
Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial: 0ACD
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/5B4708E851AA11EC9D87A643C4F9AE02.roa
Signing time: Thu 12 May 2022 18:44:51 +0000
ROA not before: Thu 12 May 2022 18:44:51 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 58945
IP address blocks: 59.152.3.0/24 maxlen: 24
59.152.14.0/24 maxlen: 24
59.152.15.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2765 (0xacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Validity
Not Before: May 12 18:44:51 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=627d55a3-0f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:79:76:65:da:93:ff:90:48:58:65:ef:c5:
5e:41:82:66:53:e0:20:3e:f6:1a:96:9b:b8:25:2b:
7a:57:89:cd:a9:67:d2:ff:d3:e7:6f:44:a0:e9:af:
93:1d:16:0b:4b:75:42:fd:be:14:af:83:65:f2:82:
53:56:65:a1:88:63:1a:71:a1:ee:d4:24:16:76:e1:
85:07:f7:ec:31:f0:47:d3:2d:a6:85:80:34:19:56:
88:0c:48:15:c6:0f:41:b0:42:43:cd:cb:ee:ad:a5:
2e:33:dc:9c:fb:dd:e1:13:18:49:23:ec:8f:b0:9c:
b5:c1:7f:3e:d6:c6:62:4f:5c:24:a3:1c:63:4f:0d:
f4:fb:00:ff:de:ac:81:3a:aa:09:20:93:99:92:96:
98:fc:83:17:25:ed:a6:98:66:53:82:6e:78:65:b0:
91:f6:bc:f1:80:d3:73:a8:97:04:3e:bd:06:8c:c4:
09:92:d3:62:bc:cd:e7:16:09:57:8e:f8:48:e2:84:
e4:ab:88:51:f3:fd:7f:03:10:d1:0e:00:39:06:bc:
2b:7a:fc:ab:b1:0c:40:17:66:11:f7:8e:1d:2e:0d:
03:c5:bd:73:de:6d:8e:c4:b4:dc:b9:03:9a:a4:44:
b7:96:62:75:37:2a:fb:5e:6a:17:8f:28:0a:42:03:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D3:37:2F:CD:9E:BB:AE:94:AE:72:45:17:0A:30:F5:15:87:C0:40
X509v3 Authority Key Identifier:
keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/5B4708E851AA11EC9D87A643C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.152.3.0/24
59.152.14.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:c4:f5:20:10:7d:ce:06:a7:3a:80:1e:ae:86:ee:19:b8:8f:
fe:35:3b:2b:21:d0:36:82:6d:c3:9a:a3:21:9a:f7:8a:95:27:
6f:48:e9:cc:09:40:d8:98:01:55:49:b0:a2:ab:08:a7:bd:12:
4f:b5:ba:94:de:0c:f9:86:f3:c2:ec:fb:b7:05:8a:c1:a0:91:
c5:28:2c:b8:9a:a6:32:ed:47:3e:de:52:7a:27:93:83:3c:dc:
8d:43:ad:6a:86:7d:d0:d0:4a:1d:d0:16:a6:d2:65:58:cd:93:
8a:42:57:14:31:5a:da:79:2e:34:b7:77:fd:7b:11:a8:b8:55:
3e:a8:00:dc:1f:1d:81:e4:91:3a:46:0f:05:04:53:20:bb:76:
fa:68:95:c7:de:c5:31:eb:c1:f2:ff:d8:c7:7b:6f:94:70:8f:
e8:77:4d:d6:1d:7c:07:ff:1e:73:c7:57:59:6a:45:dc:ee:72:
dc:09:bc:51:41:f8:50:11:1a:9b:ec:6d:38:89:1c:51:b2:e0:
75:db:92:a3:71:65:7a:4e:98:0c:84:b9:c6:82:73:8c:a1:cb:
00:4e:a9:b0:c3:f8:83:d6:ab:db:55:a6:2e:44:44:86:37:82:
85:b7:95:ba:97:6c:00:a1:5e:d2:86:60:31:82:29:cb:53:21:
27:d0:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org