Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/55819C8EC93511EE9935A228C4F9AE02.roa
File: 55819C8EC93511EE9935A228C4F9AE02.roa (raw, json)
Hash identifier: hvIfnpoFdFfAGrA2Tuspkje0VAimsTJqF4187FVmcV8=
Subject key identifier: 36:EA:7A:86:95:0A:FC:CB:FA:D9:E9:DB:B9:5E:10:EC:6A:25:49:96
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 0719
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/55819C8EC93511EE9935A228C4F9AE02.roa
Signing time: Sun 11 Feb 2024 23:29:00 +0000
ROA not before: Sun 11 Feb 2024 23:29:00 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 16509
IP address blocks: 202.139.236.0/22 maxlen: 24
202.139.252.0/24 maxlen: 24
202.148.147.0/24 maxlen: 24
203.27.226.0/23 maxlen: 24
210.247.238.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB
Validity
Not Before: Feb 11 23:29:00 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65c9583c-d4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:6e:64:e3:63:e1:59:3b:15:7c:3f:99:3d:
78:de:d0:ef:e0:8c:d8:59:65:7a:ac:d4:40:a4:15:
a0:96:e0:68:d3:3a:dd:7b:ad:31:ed:5e:4f:49:24:
7e:c0:ee:6e:c8:a7:70:c2:1c:22:6d:6e:4d:5e:74:
ae:c4:66:ae:63:cc:f7:f8:0f:7b:8b:78:bc:87:42:
35:06:da:ac:39:39:79:d1:92:df:e3:1f:18:8c:96:
95:83:51:ec:dc:0b:6a:fc:f5:d4:96:0d:38:5e:48:
fd:07:4b:43:12:74:a7:04:d6:0f:40:29:45:98:5d:
8a:a9:d0:28:02:d0:9f:fe:52:09:35:d4:5c:22:f0:
0e:6d:10:ed:9b:5e:7e:85:17:c8:59:a5:b8:94:82:
49:75:88:13:7c:ca:f5:6f:6c:3e:4b:85:20:42:da:
be:8f:c5:a4:0d:cd:28:35:11:bb:51:b3:32:cd:73:
f2:7e:bf:97:43:cc:c9:b5:65:6f:b4:5d:71:7c:a1:
6b:65:7f:bd:fd:09:43:f8:39:32:95:b4:a9:d1:b8:
e7:cc:db:d7:32:a5:41:d8:96:cd:fd:05:7d:8b:2e:
be:4e:b9:34:ba:5f:a8:71:cf:20:00:ce:40:fc:ad:
18:54:02:04:bd:7d:76:b3:47:ef:36:89:c6:22:14:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:7A:86:95:0A:FC:CB:FA:D9:E9:DB:B9:5E:10:EC:6A:25:49:96
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/55819C8EC93511EE9935A228C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.236.0/22
202.139.252.0/24
202.148.147.0/24
203.27.226.0/23
210.247.238.0/23
Signature Algorithm: sha256WithRSAEncryption
86:ca:54:26:fb:2c:6e:7f:64:c3:8f:4c:fe:5f:5c:51:94:ca:
e0:af:2a:0d:d8:0e:f8:bb:22:08:62:68:29:78:5c:dc:1d:f6:
2e:3b:06:b8:14:ed:82:bc:b1:25:f6:06:66:b3:a4:93:5f:1c:
e0:12:17:76:90:97:c1:c1:ea:a1:bc:5f:fe:2d:27:56:a9:6d:
00:ab:a3:c3:b6:d1:b0:62:65:60:da:4b:dd:27:1e:81:7c:d8:
a3:1a:a3:d1:75:45:a4:18:43:7d:99:98:c2:af:6b:b8:39:c5:
ee:45:c2:bd:3f:f1:ac:c0:c7:a0:fe:86:85:f9:7d:17:67:9f:
e8:0b:c6:3d:e3:c2:74:ae:9a:c8:73:aa:67:ae:56:19:9d:c1:
2d:84:04:8c:93:5d:3f:78:c0:1b:72:85:d2:88:66:56:8d:b3:
ae:7d:bd:0c:03:7b:61:0d:71:82:e4:b7:21:94:e6:ab:72:d6:
dd:19:b5:db:8d:37:dd:73:5c:75:cc:ea:40:33:12:13:06:52:
0f:c5:2c:7d:c8:eb:fa:1f:47:fb:58:39:2a:20:54:5b:8c:b0:
d4:f3:74:6d:65:f4:c1:3b:93:93:4c:82:7c:cb:5a:d2:d1:21:
b2:ed:bc:90:eb:69:d6:a7:7a:87:82:ce:f0:be:ea:94:c4:52:
8d:8c:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:57 2025 by rpki-client