Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/5C290B00175511ED86336C63C4F9AE02.roa
File: 5C290B00175511ED86336C63C4F9AE02.roa (raw, json)
Hash identifier: 1LpsoUDgDV1veC55/IpWCpFYOC38tSMlTOGDD1Ei8o0=
Subject key identifier: 4C:D5:D1:3A:72:B8:61:C3:B2:D0:05:FB:62:D6:56:E2:A3:95:4C:0A
Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial: 0B9A
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/5C290B00175511ED86336C63C4F9AE02.roa
Signing time: Mon 08 Aug 2022 20:04:51 +0000
ROA not before: Mon 08 Aug 2022 20:04:51 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 18230
IP address blocks: 59.152.0.0/20 maxlen: 20
59.152.0.0/24 maxlen: 24
59.152.1.0/24 maxlen: 24
59.152.2.0/24 maxlen: 24
59.152.4.0/24 maxlen: 24
59.152.5.0/24 maxlen: 24
59.152.6.0/24 maxlen: 24
59.152.7.0/24 maxlen: 24
59.152.8.0/24 maxlen: 24
59.152.9.0/24 maxlen: 24
59.152.10.0/24 maxlen: 24
59.152.12.0/24 maxlen: 24
59.152.13.0/24 maxlen: 24
59.152.15.0/24 maxlen: 24
203.189.225.0/24 maxlen: 24
203.189.226.0/24 maxlen: 24
2404:1b40::/32 maxlen: 32
2404:1b40::/48 maxlen: 48
2404:1b40:1::/48 maxlen: 48
2404:1b40:2::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2970 (0xb9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Validity
Not Before: Aug 8 20:04:51 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62f16c62-e07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:08:14:f4:6c:f2:bc:47:16:b7:b4:b1:d9:
37:6e:9e:33:d2:7f:cb:22:7a:8d:c7:5f:6a:d5:7b:
0a:38:aa:55:c2:92:cc:17:f2:4d:9f:f3:d9:3b:7d:
e6:3d:d5:4a:cc:e5:e1:b3:96:d4:9e:e6:65:53:7f:
96:1d:a3:ae:2c:e5:9e:e2:57:3a:6e:35:94:50:74:
36:5f:ac:ed:5e:5a:06:e7:2f:a7:75:a2:69:d4:eb:
0d:7a:b1:9e:f9:10:b8:e7:84:66:93:71:7e:73:17:
db:ad:d0:38:bb:cf:20:7e:71:98:ce:a3:03:ad:5b:
e7:fb:9b:a9:0d:49:ab:a7:e5:fa:b3:d4:79:2f:4e:
26:21:db:1f:22:0f:82:a0:d1:c7:bb:d6:45:11:16:
dd:f6:fc:e9:5a:e9:8c:c3:c9:70:25:74:7e:fb:42:
15:47:45:c4:3f:cc:05:36:54:f2:4c:ba:5c:dc:d2:
a4:25:ee:02:5b:9c:c1:4a:a8:8f:10:24:cf:7f:06:
62:6a:8a:8f:7a:ac:62:ef:5a:92:a4:fe:06:d7:fc:
0d:17:d2:cf:c3:5e:00:cc:d0:54:b6:1d:dd:4d:d3:
e3:12:4b:11:cd:83:bc:76:7b:f1:33:1b:0a:59:8a:
9f:94:5c:da:22:54:ec:7a:91:c1:0d:f7:38:2c:e9:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D5:D1:3A:72:B8:61:C3:B2:D0:05:FB:62:D6:56:E2:A3:95:4C:0A
X509v3 Authority Key Identifier:
keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/5C290B00175511ED86336C63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.152.0.0/20
203.189.225.0-203.189.226.255
IPv6:
2404:1b40::/32
Signature Algorithm: sha256WithRSAEncryption
9c:bb:3e:bd:11:8c:a5:c9:ef:66:43:81:22:69:87:15:61:0c:
e5:31:06:da:78:08:f9:a4:34:eb:91:95:aa:90:13:d3:eb:f3:
4d:67:26:83:17:47:af:62:92:37:62:f1:92:df:29:4b:d1:ac:
55:0f:28:56:a4:1f:3a:47:a9:a0:b3:1f:9b:06:69:94:47:aa:
c9:b7:f2:3c:b0:e2:4e:5c:de:8b:a4:38:21:26:6b:e3:96:ea:
3d:93:14:7a:c6:68:51:4f:f0:20:1b:14:ab:34:69:a6:fa:da:
7c:92:72:3b:57:2e:bd:d9:4c:33:c8:9b:12:26:49:45:03:fd:
61:2c:f2:3c:2e:81:6f:39:ce:a6:0c:c1:ce:6d:e8:9d:d9:93:
b9:fd:2d:3b:12:f8:1b:e8:cf:1c:3d:42:73:99:77:7b:31:47:
b3:8e:c4:c0:7e:5f:c0:88:31:11:1d:ed:e2:10:9f:c4:94:44:
d9:ba:55:61:1d:f3:ac:96:89:26:d2:2b:03:d4:4c:9b:99:95:
31:cd:c0:7e:f0:e1:b2:b2:c1:ab:a5:fe:30:fa:1d:ad:ab:3b:
5f:35:53:68:61:de:d9:89:d7:06:44:ca:d2:28:67:0f:75:9c:
b1:99:e1:d8:f8:fa:6c:c7:8d:35:34:04:0c:9c:2d:3d:3c:7c:
44:65:69:99
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0
QTdERUU5ODYwHhcNMjIwODA4MjAwNDUxWhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MmYxNmM2Mi1lMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1RIIFPRs8rxHFre0sdk3bp4z0n/LInqNx19q1XsKOKpVwpLMF/JNn/PZO33m
PdVKzOXhs5bUnuZlU3+WHaOuLOWe4lc6bjWUUHQ2X6ztXloG5y+ndaJp1OsNerGe
+RC454Rmk3F+cxfbrdA4u88gfnGYzqMDrVvn+5upDUmrp+X6s9R5L04mIdsfIg+C
oNHHu9ZFERbd9vzpWumMw8lwJXR++0IVR0XEP8wFNlTyTLpc3NKkJe4CW5zBSqiP
ECTPfwZiaoqPeqxi71qSpP4G1/wNF9LPw14AzNBUth3dTdPjEksRzYO8dnvxMxsK
WYqflFzaIlTsepHBDfc4LOlOJQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEzV0Tpy
uGHDstAF+2LWVuKjlUwKMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF
QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUIwNkMvRTlENjJFNzRGRUFFMTFFODkxMEQ0RDY2QzRGOUFFMDIvNUMyOTBCMDAx
NzU1MTFFRDg2MzM2QzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E
LTArMBoEAgABMBQDBAQ7mAAwDAMEAMu94QMEAMu94jANBAIAAjAHAwUAJAQbQDAN
BgkqhkiG9w0BAQsFAAOCAQEAnLs+vRGMpcnvZkOBImmHFWEM5TEG2ngI+aQ065GV
qpAT0+vzTWcmgxdHr2KSN2Lxkt8pS9GsVQ8oVqQfOkepoLMfmwZplEeqybfyPLDi
Tlzei6Q4ISZr45bqPZMUesZoUU/wIBsUqzRppvrafJJyO1cuvdlMM8ibEiZJRQP9
YSzyPC6BbznOpgzBzm3ondmTuf0tOxL4G+jPHD1Cc5l3ezFHs47EwH5fwIgxER3t
4hCfxJRE2bpVYR3zrJaJJtIrA9RMm5mVMc3AfvDhsrLBq6X+MPodras7XzVTaGHe
2YnXBkTK0ihnD3WcsZnh2Pj6bMeNNTQEDJwtPTx8RGVpmQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-ams.rpki-client.org