Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/3F101DAEDE8011ED958D5010C4F9AE02.roa
File: 3F101DAEDE8011ED958D5010C4F9AE02.roa (raw, json)
Hash identifier: yh5Waol94pXzB8SMmyAKCickAzjDz+mC4inQbrXT1H4=
Subject key identifier: 21:DE:DA:F0:52:8C:ED:F7:66:63:10:1E:B4:D7:0A:A7:32:0A:AB:58
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 043B
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/3F101DAEDE8011ED958D5010C4F9AE02.roa
Signing time: Wed 19 Apr 2023 07:03:12 +0000
ROA not before: Wed 19 Apr 2023 07:03:12 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 138687
IP address blocks: 43.230.142.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Apr 19 07:03:12 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=643f922f-e38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:39:d6:fc:ab:07:76:75:80:1f:6b:38:88:
b3:56:fd:6a:6f:b1:13:10:eb:e4:d7:8f:62:94:29:
68:9a:30:a1:95:60:a6:26:f9:72:c0:c3:e9:d9:8a:
1d:c8:94:34:da:79:76:e2:ce:36:4b:33:c4:ca:96:
b1:c3:14:62:2b:56:26:d1:19:2a:af:c7:bb:a7:79:
ce:9f:31:38:16:1d:ef:02:93:c5:08:94:d6:f3:e9:
d8:a1:1f:b8:76:dd:10:6c:6b:6e:87:1d:37:41:03:
1c:33:d3:c1:2d:1b:f3:32:8b:68:6d:19:da:38:2f:
0e:b2:7f:53:51:24:52:53:d9:f5:59:e3:9d:85:1d:
cf:cb:e4:04:95:18:24:c6:1d:f5:df:ac:a2:6c:e9:
fb:c0:13:33:a7:f1:89:2d:d0:92:83:b5:a8:6a:f6:
67:e5:26:35:84:79:71:86:e6:86:1d:7c:ea:42:c9:
ce:8a:2a:f5:05:f5:5a:36:f4:2a:f6:f3:7f:3a:10:
d5:00:20:28:b9:3f:5f:d8:18:89:f6:b2:15:af:fa:
02:4f:99:7d:78:79:3d:ad:f9:c2:92:c1:97:25:ff:
76:34:f1:fd:4d:ed:14:47:a6:4d:72:f5:7d:22:40:
3a:bc:dd:ef:fe:eb:9a:9a:89:68:98:3d:a1:6e:fc:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DE:DA:F0:52:8C:ED:F7:66:63:10:1E:B4:D7:0A:A7:32:0A:AB:58
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/3F101DAEDE8011ED958D5010C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.142.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e8:69:80:8a:48:49:72:3e:b5:32:c2:95:38:bf:d5:db:b2:
ca:bc:73:6c:a8:0c:33:2d:48:ff:16:1c:b5:23:e4:08:d5:05:
c2:b1:8a:08:51:3c:26:55:15:0b:99:76:fc:73:67:7a:26:96:
9a:08:32:11:c4:e7:70:49:84:8a:7c:3b:29:4b:a5:ee:52:27:
13:cc:ed:1c:a5:1c:dd:2b:fe:7b:19:57:46:65:16:41:bb:0b:
53:ec:6a:54:1c:91:8f:f4:23:c2:b4:04:ff:56:84:a8:d6:5d:
21:e6:e4:2b:d2:81:27:75:de:7b:f0:21:42:ab:70:f3:3b:f0:
6a:2f:87:1e:4a:65:19:a4:45:a5:a7:0d:a2:83:e2:9d:c9:8c:
a4:89:f0:d2:0d:a7:5c:94:5a:a3:01:8a:22:6a:71:bf:7a:6e:
01:d4:ec:32:62:32:4e:aa:cf:fb:30:19:05:32:16:26:99:a4:
17:88:1d:cd:0a:6a:8c:69:36:cf:c5:6f:db:6f:b4:d0:f4:9e:
8e:41:06:cd:e6:0b:31:c9:2b:07:e7:15:20:ea:73:00:2c:e7:
bd:e5:04:ef:c0:df:cc:b7:fd:73:10:06:43:19:cd:c2:b0:13:
1f:f4:00:bd:df:f2:b2:19:f9:38:93:aa:59:da:ae:65:1d:df:
1b:13:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:56 2024 by rpki-client on console-ams.rpki-client.org