Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/74926E3A7B5611EBAC665137C4F9AE02.roa
File: 74926E3A7B5611EBAC665137C4F9AE02.roa (raw, json)
Hash identifier: 5UQY1c+vxP/auC7Y7LR7Uo4nRNPFWW1xUSjlVu9gaLg=
Subject key identifier: 61:96:42:3B:AD:EC:FB:41:36:22:68:96:3F:7F:0A:45:ED:C2:EB:4E
Certificate issuer: /CN=A91C9D2A/serialNumber=C99EF20F9F0B0077C70D5D7300E0BBFD8721EFFF
Certificate serial: 0992
Authority key identifier: C9:9E:F2:0F:9F:0B:00:77:C7:0D:5D:73:00:E0:BB:FD:87:21:EF:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ7yD58LAHfHDV1zAOC7_Ych7_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/74926E3A7B5611EBAC665137C4F9AE02.roa
Signing time: Thu 23 Feb 2023 12:09:33 +0000
ROA not before: Thu 23 Feb 2023 12:09:32 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 134526
IP address blocks: 150.242.39.0/24 maxlen: 24
2403:6dc0::/40 maxlen: 40
2403:6dc0:8000::/36 maxlen: 40
2403:6dc0:f000::/36 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D2A/serialNumber=C99EF20F9F0B0077C70D5D7300E0BBFD8721EFFF
Validity
Not Before: Feb 23 12:09:32 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63f7577c-855f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:df:b5:98:9e:b3:74:f7:fc:13:6d:b5:cc:
0d:a6:a1:de:96:df:e5:5e:cb:1a:ee:37:74:92:19:
e3:2d:ec:9c:0a:84:bd:63:bd:80:fe:4f:b1:cb:83:
53:46:1b:cc:5f:d0:8b:c8:5c:0d:5c:d2:5b:8f:24:
d8:d1:f0:b5:66:1c:66:7f:fa:26:8b:74:43:1e:6f:
24:72:80:51:bc:c6:cc:88:bc:35:c6:4e:32:76:07:
51:3d:7b:0e:fd:07:9d:63:ed:85:6e:09:05:ec:e7:
93:ce:a5:1e:be:26:fb:90:1c:d8:9c:77:51:9e:4d:
55:77:62:86:84:b1:81:11:d2:48:bd:82:a1:b0:79:
b0:28:3b:77:b4:ed:fc:9b:02:44:ca:69:5c:64:68:
a8:17:de:15:de:3d:9c:4b:de:42:a4:d0:2d:95:33:
2c:e2:c7:ca:08:fc:6a:17:9d:19:08:bd:c2:91:5f:
c0:24:a3:fc:d0:2e:52:17:a5:7d:b7:d3:e5:ba:31:
a0:f1:11:35:aa:28:ce:9e:74:17:93:6c:31:e9:d2:
93:e6:9a:f7:30:4b:19:14:2e:17:ce:5c:81:7d:2d:
63:a9:67:8f:37:62:3b:14:25:38:f9:79:6c:57:86:
54:e2:ee:a5:3c:1a:c8:c9:f5:01:bc:3a:f9:b0:6d:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:96:42:3B:AD:EC:FB:41:36:22:68:96:3F:7F:0A:45:ED:C2:EB:4E
X509v3 Authority Key Identifier:
keyid:C9:9E:F2:0F:9F:0B:00:77:C7:0D:5D:73:00:E0:BB:FD:87:21:EF:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/yZ7yD58LAHfHDV1zAOC7_Ych7_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ7yD58LAHfHDV1zAOC7_Ych7_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/74926E3A7B5611EBAC665137C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.242.39.0/24
IPv6:
2403:6dc0::/40
2403:6dc0:8000::/36
2403:6dc0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
4a:95:90:55:50:5d:e5:af:00:f9:f9:58:43:61:31:37:9e:bb:
95:1d:5a:cb:8c:b7:88:7a:46:77:e7:e4:68:b9:3b:40:33:8a:
6a:51:9d:05:ef:93:c8:70:ce:3e:42:04:6c:27:33:71:f5:3a:
d9:53:38:ff:1e:1d:61:61:85:d2:c3:ac:c3:76:f2:ac:19:60:
45:08:39:58:1f:b4:2d:e7:3a:84:26:ea:41:77:57:5b:25:77:
43:0c:27:61:ba:9c:a6:40:32:a8:d2:eb:2f:9d:a6:85:fb:6c:
8e:c8:60:f3:96:73:97:23:54:da:d3:fa:b7:14:92:6c:7a:01:
58:92:aa:70:5b:f4:b1:e9:13:8f:c4:5a:cd:70:9d:b4:97:50:
c5:3f:f9:96:a5:5a:4e:b1:bd:93:ef:4e:0f:37:af:99:ea:55:
e5:61:06:5c:a4:91:6a:6f:ac:04:50:7c:7c:94:65:34:60:bd:
e6:40:20:36:63:e3:3c:2f:c6:81:77:ec:f2:e7:be:80:b0:27:
39:e7:03:37:27:ae:b8:c8:3f:bf:8e:4e:c4:8e:dd:b7:be:24:
ce:55:7b:33:86:c6:70:57:fb:80:18:3d:98:35:59:d6:cb:63:
b0:10:17:54:e5:c9:7e:9d:c6:0f:05:92:74:c3:e2:e5:a5:c8:
d4:f7:18:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:26 2024 by rpki-client on console-ams.rpki-client.org