Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/DA733DF0ED1F11ED95973F6BC4F9AE02.roa
File: DA733DF0ED1F11ED95973F6BC4F9AE02.roa (raw, json)
Hash identifier: cQpHCvtFPcYIj0lg9P73RbbWszUccyG6zl+KJUwmdSM=
Subject key identifier: 66:90:19:F2:08:77:0B:8E:E1:A4:DA:0C:78:7C:09:C8:6E:51:3F:19
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 070B
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/DA733DF0ED1F11ED95973F6BC4F9AE02.roa
Signing time: Wed 31 Jan 2024 00:12:35 +0000
ROA not before: Wed 31 Jan 2024 00:12:35 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 60781
IP address blocks: 202.148.145.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803 (0x70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB
Validity
Not Before: Jan 31 00:12:35 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65b99072-a1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a3:17:78:1e:c3:7d:f8:b2:2c:7d:e9:42:a2:
c7:24:b3:44:54:a2:c9:53:2e:6b:cd:b1:82:d4:a3:
f3:07:ee:41:16:ee:45:31:3c:37:bc:14:0a:25:25:
b1:8a:61:e8:2d:b2:95:ac:19:e9:1b:b2:ce:64:01:
ea:7c:92:0b:37:f6:01:08:99:47:ce:43:11:7c:8f:
b0:36:e3:c8:aa:71:2b:23:c5:63:51:e8:bd:02:c4:
e7:b9:b4:0c:03:4e:62:c3:71:71:57:6c:f2:02:00:
9a:70:2c:8e:4d:36:62:60:1a:9a:db:bb:1c:da:19:
65:e6:73:e5:8c:56:0b:a4:ac:bb:94:8d:73:60:cc:
d4:5b:49:8d:bd:e8:9e:b6:11:2a:05:0a:b1:b3:fd:
55:71:9f:f1:e4:7a:9d:70:15:64:5a:97:84:66:75:
cc:1a:7c:8c:8e:8b:70:ae:5d:3a:b9:5f:8a:ac:70:
da:82:cb:20:60:32:16:04:3b:ea:ce:fc:20:50:8c:
a8:8e:1d:16:d2:ac:9d:e1:74:b4:0b:82:f1:ac:46:
3a:03:d1:ef:a0:94:26:3e:76:95:12:b5:8a:93:b0:
d6:46:46:9b:72:b6:2e:b2:4e:29:79:f6:ed:e9:77:
51:36:ff:9b:9e:61:e5:38:44:33:18:c1:d4:87:16:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:90:19:F2:08:77:0B:8E:E1:A4:DA:0C:78:7C:09:C8:6E:51:3F:19
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/DA733DF0ED1F11ED95973F6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.148.145.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e5:b7:d3:88:0c:3c:38:c5:4e:6e:af:21:84:e4:dc:e3:63:
a4:86:02:9b:1f:38:92:dd:e2:98:c9:41:71:5e:61:b1:d4:8f:
bf:6e:77:46:9b:4b:72:16:20:87:e6:b1:4b:ea:5a:75:cb:8c:
d7:0f:38:01:16:54:20:08:07:53:45:30:c6:f3:3e:d3:96:72:
8b:0b:90:74:f9:9f:43:f3:50:ae:a1:99:e4:b1:33:2c:ec:57:
b7:4f:e6:90:a7:bb:a0:43:cc:89:c5:e4:1b:3c:00:28:43:ac:
21:e0:0f:8b:8b:ec:8b:0c:84:ed:99:95:21:e1:94:c9:e0:47:
2a:25:b0:4c:f1:f3:c4:a5:77:7c:8f:40:ac:19:6a:6c:48:bb:
68:70:f9:73:50:10:8a:cc:1a:9a:c2:10:a7:06:9a:26:e6:35:
b5:90:90:8c:07:7a:a1:0d:50:53:7c:2e:2f:ad:d4:a1:31:17:
39:a7:0b:a9:cd:ba:b1:ab:28:99:cc:08:36:78:cd:a1:dd:6d:
28:6f:6d:e0:21:99:d0:88:83:cd:f5:d8:69:69:54:0a:62:cb:
a9:7f:15:be:29:04:f0:87:ac:89:f7:05:7c:c2:d1:31:8a:58:
ea:25:37:58:da:c2:00:7c:6b:70:ef:c9:59:dc:4c:0f:8d:06:
5c:b5:1b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:32 2025 by rpki-client