Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/D4747DD4FE8111ECBAB0E13FC4F9AE02.roa
File: D4747DD4FE8111ECBAB0E13FC4F9AE02.roa (raw, json)
Hash identifier: yY/qVBzrmSt8uHcXRJ03lFDNhQYsluuwivTBmzo5dQA=
Subject key identifier: 00:91:41:61:62:D9:56:18:37:9A:01:C9:6D:9C:F1:CF:C1:7C:84:BC
Certificate issuer: /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
Certificate serial: 0488
Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/D4747DD4FE8111ECBAB0E13FC4F9AE02.roa
Signing time: Fri 08 Jul 2022 05:50:11 +0000
ROA not before: Fri 08 Jul 2022 05:50:11 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 17763
IP address blocks: 203.12.28.0/24 maxlen: 24
203.18.216.0/24 maxlen: 24
203.18.217.0/24 maxlen: 24
203.18.218.0/24 maxlen: 24
203.18.219.0/24 maxlen: 24
203.18.220.0/24 maxlen: 24
203.18.221.0/24 maxlen: 24
203.18.222.0/24 maxlen: 24
203.18.223.0/24 maxlen: 24
203.25.32.0/24 maxlen: 24
203.25.33.0/24 maxlen: 24
203.25.34.0/24 maxlen: 24
203.25.35.0/24 maxlen: 24
203.28.64.0/24 maxlen: 24
203.28.70.0/24 maxlen: 24
203.28.71.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160 (0x488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
Validity
Not Before: Jul 8 05:50:11 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62c7c593-23d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:af:be:a3:88:0a:54:0b:ab:0b:27:95:a2:
3f:77:d7:60:89:e3:67:78:e1:57:2a:ce:97:ab:0c:
23:76:0e:d3:5f:e9:d4:0d:13:0a:46:52:f9:5b:a4:
fb:c7:83:b3:4d:d2:92:68:55:b3:32:c1:57:e0:42:
eb:f1:8e:a5:d0:43:be:3a:c3:dd:ba:62:f7:90:fa:
ed:1d:46:1e:c4:de:9b:90:17:ce:e3:69:ab:2c:00:
d5:a7:a2:ca:19:a3:52:fd:ca:b8:3f:76:9c:d3:0f:
5c:44:a5:b8:42:a9:d6:03:29:f5:00:1b:7a:b0:24:
49:05:6f:61:64:91:a7:02:ab:fd:b0:eb:6f:4c:b2:
78:ae:b3:5b:43:bf:6e:a2:24:5d:94:8e:44:11:be:
4d:27:f2:d3:20:89:01:b8:f9:35:56:81:ea:d2:8a:
0d:75:a3:9e:f5:ff:6e:b9:a1:bb:00:2c:f5:05:c2:
33:cf:15:92:a8:26:4f:20:88:5a:0c:1c:dd:11:ed:
e9:e9:a6:71:79:73:af:46:fb:b4:85:36:bb:03:df:
00:e5:94:b8:65:5c:d1:6d:dc:c2:30:9e:8c:f1:ce:
7e:fa:40:2f:69:6a:31:fe:2f:ec:fa:6c:4b:78:15:
cf:16:71:d6:be:6d:3c:c2:95:62:fc:c7:66:99:e6:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:91:41:61:62:D9:56:18:37:9A:01:C9:6D:9C:F1:CF:C1:7C:84:BC
X509v3 Authority Key Identifier:
keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/D4747DD4FE8111ECBAB0E13FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.12.28.0/24
203.18.216.0/21
203.25.32.0/22
203.28.64.0/24
203.28.70.0/23
Signature Algorithm: sha256WithRSAEncryption
57:a7:c6:39:2f:fd:a4:12:6c:71:81:71:5e:11:8a:cf:68:0f:
4a:24:94:20:35:d0:3c:28:04:fa:12:a8:71:a5:58:f6:cb:00:
66:6b:a5:3b:4e:49:3d:bf:20:95:20:7f:7e:38:19:f6:c7:13:
77:4a:f9:4d:64:32:b4:eb:d0:2d:69:8f:dc:39:3e:f9:dc:1f:
c1:a2:84:d8:1d:45:d3:43:17:06:47:19:ae:88:bf:6b:9f:69:
e2:8d:db:c4:e0:19:18:a6:a3:30:a5:4e:41:cf:b0:5d:23:f6:
95:eb:7f:df:16:0b:e5:07:42:80:3f:5d:86:32:29:5e:ed:37:
86:99:87:4e:6b:a3:11:d8:b8:15:ea:dd:ac:12:d0:0f:06:11:
6d:6d:94:aa:5e:6d:7d:aa:f9:e9:eb:8b:ef:82:5c:6e:e3:ec:
a0:c9:d9:95:38:5a:34:17:a9:b5:ac:dc:89:f4:f7:01:12:04:
e9:84:df:1b:2f:c3:22:14:d8:12:80:1e:5e:e3:50:cb:9d:2c:
fb:97:1c:27:66:92:0a:94:1c:8d:8d:98:62:c9:0a:39:f4:5f:
dd:0d:18:82:1f:93:2d:24:f6:40:bc:08:b6:02:5d:f2:c5:94:
fe:c1:e2:47:fd:ef:f6:6b:91:75:80:0b:8c:f1:4d:d6:d7:28:
e9:3b:1e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-fra.rpki-client.org