Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/DD0BC880B2EF11ED9E4EFE54C4F9AE02.roa
File: DD0BC880B2EF11ED9E4EFE54C4F9AE02.roa (raw, json)
Hash identifier: Z6JSh6zx6bHZqjsK5GmGcTt1ulFZKfJbCdjP6Vd8Z8Q=
Subject key identifier: 87:9E:72:9F:5B:7D:3C:2C:ED:B8:1F:45:87:6D:74:EA:D1:D9:A3:E1
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 05AC
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/DD0BC880B2EF11ED9E4EFE54C4F9AE02.roa
Signing time: Wed 22 Feb 2023 20:31:20 +0000
ROA not before: Wed 22 Feb 2023 20:31:20 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 834
IP address blocks: 202.139.240.0/20 maxlen: 20
202.148.128.0/20 maxlen: 20
202.148.144.0/20 maxlen: 20
203.147.128.0/21 maxlen: 21
203.147.136.0/21 maxlen: 21
203.147.144.0/21 maxlen: 21
203.147.152.0/21 maxlen: 24
203.147.192.0/20 maxlen: 24
210.247.224.0/21 maxlen: 24
210.247.232.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1452 (0x5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB
Validity
Not Before: Feb 22 20:31:20 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63f67b97-4fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:e1:90:af:44:39:7f:25:3d:19:40:e9:ad:
fa:3a:1f:17:cd:6d:2e:80:34:e9:f6:c4:31:66:17:
d1:6b:5b:a8:b3:50:52:84:12:b7:43:3f:19:ec:78:
bb:26:7d:ac:43:5d:b1:ff:85:dc:dd:6f:10:cd:f7:
9a:30:f4:04:72:75:66:41:0a:06:4e:0f:09:58:eb:
3b:00:36:b0:21:03:03:62:69:a4:ef:cd:7b:50:c9:
b1:86:f4:82:34:10:03:a3:3c:e9:b8:5e:9c:a4:33:
50:e4:31:a9:ad:4d:bb:56:d8:58:6d:3d:4f:c2:5a:
be:97:f8:4c:7d:34:f1:1c:b9:c2:ad:9d:11:7b:ef:
f4:d2:dd:ec:27:12:f1:e7:80:be:fa:01:b6:6b:fe:
5d:f7:53:db:3d:f6:12:13:3f:26:5d:4b:8f:3b:51:
ae:6f:bf:4a:d2:4a:75:9a:6a:94:50:28:65:3d:20:
0b:4f:65:fa:48:c5:06:14:51:18:6f:e4:66:92:5e:
ac:43:3b:8e:9f:52:b6:6c:77:e7:89:6f:51:37:20:
5d:4d:5c:4c:fa:18:fa:e1:92:47:ef:bc:0a:4f:3f:
67:cb:3f:08:4d:d8:af:3c:e6:b5:29:1c:43:e7:dd:
d8:24:0d:18:2c:85:0c:cc:3f:14:92:82:40:a2:67:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9E:72:9F:5B:7D:3C:2C:ED:B8:1F:45:87:6D:74:EA:D1:D9:A3:E1
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/DD0BC880B2EF11ED9E4EFE54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.240.0/20
202.148.128.0/19
203.147.128.0/19
203.147.192.0/20
210.247.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:ab:6a:cb:a0:00:6f:d8:14:c3:52:13:b7:c9:88:bc:5f:57:
5d:8a:ec:59:b8:67:54:ac:ba:a6:08:b9:c8:d5:a0:2c:75:ad:
3c:b6:75:6f:66:e6:0b:42:d5:72:1c:e1:04:68:68:35:0c:01:
40:6a:7d:72:e6:a9:16:ba:f3:05:bb:bd:a9:97:98:fb:f9:a6:
be:0e:46:ac:bc:4d:97:b8:2e:e3:7d:0f:43:41:44:12:05:89:
84:d8:37:32:71:ca:49:b8:30:b2:c0:24:d9:d2:ee:da:2c:82:
c8:75:30:a1:8b:2b:d0:37:0a:4e:39:85:69:12:79:d4:58:c6:
e2:7c:6d:a1:4c:c6:dc:06:26:46:f1:f1:67:0b:5d:8d:2a:8b:
86:31:d1:d7:49:d9:59:18:be:f0:d7:b6:0c:4c:21:b7:f7:7f:
59:78:f2:38:44:aa:04:bc:94:47:c9:9d:af:c4:cc:6c:bf:b0:
33:1f:44:d7:85:f3:1d:2d:95:0b:b9:82:67:a6:3c:69:04:71:
11:b6:c3:ea:c5:8e:53:b9:7d:d0:f4:99:91:70:01:79:15:27:
5b:eb:8e:9f:25:ec:9e:45:a6:7a:aa:d6:cf:6c:a2:43:7d:7e:
ba:88:25:00:c9:39:c1:c9:a6:62:73:dd:9b:52:b7:76:d7:cf:
36:6d:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:54 2025 by rpki-client