Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/1DE5632676BC11EE86D4B757C4F9AE02.roa
File: 1DE5632676BC11EE86D4B757C4F9AE02.roa (raw, json)
Hash identifier: LZrQUEEw1VVRSJM0doUFTI4zyPU/b3VFllvLodwqFZQ=
Subject key identifier: 39:8F:AD:BC:C3:A2:6E:0E:EC:D7:3B:C2:73:25:58:D2:AB:F2:C3:13
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 0708
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/1DE5632676BC11EE86D4B757C4F9AE02.roa
Signing time: Wed 31 Jan 2024 00:12:32 +0000
ROA not before: Wed 31 Jan 2024 00:12:32 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 396856
IP address blocks: 202.139.228.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB
Validity
Not Before: Jan 31 00:12:32 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65b99070-d58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:44:a9:78:cb:ec:e5:b4:4f:bf:f5:4c:eb:
42:e0:e5:36:05:8b:1f:87:38:86:35:fc:fc:79:cd:
6c:49:ab:5d:93:05:fb:c1:94:3c:cc:83:a1:51:f7:
36:95:4a:5d:60:5d:d7:5f:e3:a2:5d:7b:c1:da:54:
28:70:93:12:68:33:12:65:52:fa:c4:a8:82:59:77:
32:96:bd:7d:0a:62:d2:f5:47:d6:63:93:aa:43:82:
45:5e:41:12:12:9c:3a:95:35:83:6c:a3:b9:a2:0f:
a9:4e:62:05:d9:25:89:e7:73:b0:91:76:2b:b2:db:
44:e1:ad:c1:54:12:99:36:0c:cd:f6:e4:24:12:35:
c7:28:20:4c:28:04:aa:44:ee:6a:75:e1:f9:f9:06:
e6:f8:88:8d:26:11:91:02:1d:75:b8:76:3b:80:d8:
b6:44:19:77:a2:09:77:cd:0e:43:bd:cf:ce:b8:85:
0d:de:97:55:6e:b8:cd:54:31:c0:0a:a1:e5:c0:07:
43:cc:bc:8e:0c:23:8e:80:d8:7f:b0:82:83:f5:2b:
15:7f:0e:6e:db:f0:a0:64:dc:71:a0:39:48:74:9b:
a8:ab:68:3d:37:20:78:79:61:a5:b3:da:f2:91:eb:
2a:97:2d:e9:64:de:e4:bb:23:38:bf:2b:55:57:95:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:AD:BC:C3:A2:6E:0E:EC:D7:3B:C2:73:25:58:D2:AB:F2:C3:13
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/1DE5632676BC11EE86D4B757C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.228.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:66:87:06:cc:96:31:eb:40:be:94:cb:d0:ab:f3:0f:bd:23:
cf:f3:5e:0c:55:e4:c0:44:cf:20:87:e9:e2:d9:8a:42:63:4a:
3e:80:81:4a:64:7c:26:f6:37:3d:b7:d3:11:33:7f:d5:61:5c:
d7:93:7c:d4:df:72:d8:76:03:47:5f:1e:09:31:5e:9b:dc:c1:
0b:7f:7a:1d:9e:1a:4e:ad:77:9c:78:7a:97:54:70:9b:49:3c:
49:f5:82:7f:2e:bf:7f:1f:f6:82:02:a0:3f:45:c5:aa:ae:49:
f2:60:ca:1e:cc:9b:5c:de:11:cb:47:a4:cd:92:93:5d:15:1b:
75:3b:59:47:ed:66:3a:33:f6:80:ce:dc:05:54:8b:f8:64:a0:
4f:be:d6:b8:ce:30:43:b4:b2:9d:33:67:18:0b:b9:2b:21:7e:
37:37:4e:8e:32:3d:75:97:a1:0e:7d:a0:e0:cb:00:14:44:89:
de:36:20:4a:71:5d:e3:53:f8:53:eb:05:b2:b9:5f:96:19:98:
28:3b:d2:90:2f:ec:2d:5c:be:ae:10:96:86:2f:a2:f2:99:cd:
8f:d1:06:a1:86:18:87:9f:9a:05:ff:6c:a4:8d:65:d2:9f:e2:
b4:3f:a5:b1:84:bb:e9:fc:9c:ea:b5:68:40:4d:e7:ba:f6:c5:
49:12:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:37 2025 by rpki-client