Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/1926652E874811EDAD0D2436C4F9AE02.roa
File: 1926652E874811EDAD0D2436C4F9AE02.roa (raw, json)
Hash identifier: liwQILAH4t/tSacPFKWz8i2QQg+/Y1XCrXGpq3rsQ1I=
Subject key identifier: C1:7F:AE:CA:AF:24:15:E6:E8:83:5A:2C:BC:87:C2:F0:83:7B:31:66
Certificate issuer: /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Certificate serial: 28BC
Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/1926652E874811EDAD0D2436C4F9AE02.roa
Signing time: Fri 24 Feb 2023 16:22:08 +0000
ROA not before: Fri 24 Feb 2023 16:22:08 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 132698
IP address blocks: 183.90.189.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10428 (0x28bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Validity
Not Before: Feb 24 16:22:08 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63f8e42f-ac7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:59:87:7b:99:10:c1:de:b5:41:20:e4:39:
ff:ba:1f:c6:89:47:56:b6:6d:18:20:04:91:4d:15:
b0:be:f4:7b:70:3b:30:e1:f7:cc:02:10:ae:01:65:
94:db:13:c5:7c:44:19:a3:f6:3c:9b:f6:82:29:ac:
d5:6c:87:35:66:77:54:af:bb:a9:06:de:f0:13:fd:
79:2a:77:f1:1e:a2:5d:f8:35:f4:27:ab:ba:7f:14:
e5:4c:0f:28:00:61:9b:d8:b1:63:85:c6:ed:7e:e7:
2a:1e:56:65:0f:dd:31:58:18:2a:92:75:15:63:eb:
2e:8d:50:52:24:6d:fd:1b:bd:b5:71:b6:41:cf:91:
a6:71:e5:40:b2:04:bc:17:21:0f:f3:0e:6f:7f:57:
fd:b9:08:40:62:b2:bd:dd:4b:59:40:0c:59:ee:25:
78:31:9e:75:bd:d6:6e:53:87:0e:a7:51:31:42:84:
64:9d:3d:95:e6:4e:b7:8e:e1:a3:c7:8a:0c:fd:1d:
81:b1:f8:47:31:38:86:a6:25:c3:06:5c:e3:6c:36:
d5:72:7c:7f:21:12:72:90:69:00:7f:49:eb:32:85:
6d:b7:6a:17:fe:43:4a:4e:e5:f8:24:6d:0a:2c:36:
b6:79:25:59:57:79:34:d8:bf:b3:00:26:b3:ae:e4:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7F:AE:CA:AF:24:15:E6:E8:83:5A:2C:BC:87:C2:F0:83:7B:31:66
X509v3 Authority Key Identifier:
keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/1926652E874811EDAD0D2436C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f5:67:b0:af:a4:05:51:bb:47:52:a2:e9:7c:78:8c:ed:e6:
6e:55:97:91:9b:37:33:b1:2b:51:24:18:2b:42:4a:75:38:3a:
14:9b:68:27:29:e9:7d:ee:c9:0b:f7:4e:29:07:3b:83:71:16:
64:cf:9b:32:86:2c:bc:55:2f:10:19:33:de:ee:3c:f8:b6:76:
38:09:34:e2:3a:34:7c:c6:da:7d:bf:99:d1:a8:40:8e:c7:3c:
cc:44:67:80:5f:ab:9f:04:77:3e:8a:d3:19:e7:7e:1e:94:eb:
7d:34:ce:d8:4b:78:12:e9:fa:e5:13:b0:31:6d:38:cf:f2:71:
7b:a7:d9:1e:56:15:c4:88:ee:95:44:2a:65:75:13:40:38:6d:
c0:63:67:c7:0e:68:16:ab:9e:c4:44:43:b5:e2:43:e1:b2:cb:
30:cd:51:ba:96:85:59:a1:db:8b:d3:70:3b:b1:fc:71:02:56:
31:f8:58:e1:bc:ff:dc:41:c3:c7:a8:fc:6d:c4:8b:9a:9a:9b:
db:cc:7e:2a:f1:1c:d7:6d:9e:74:01:44:88:42:35:92:4c:69:
16:4f:e8:cd:be:d3:57:f5:53:58:ec:ea:e3:b6:8a:3e:25:4b:
83:b3:fa:7c:99:fe:ac:da:09:a5:d8:8b:60:e8:a8:cd:cc:a7:
dc:8b:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org