Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/E09A2C82F53211ED92369022C4F9AE02.roa
File: E09A2C82F53211ED92369022C4F9AE02.roa (raw, json)
Hash identifier: laVXL4XUUzzw3DGiuYHXVMlCKGYB83wvUGMMtaO8kv8=
Subject key identifier: 3D:A9:AB:23:C0:CD:9D:6A:7C:72:50:BC:D4:37:8A:0F:26:98:FC:5C
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 0619
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/E09A2C82F53211ED92369022C4F9AE02.roa
Signing time: Thu 18 May 2023 04:17:18 +0000
ROA not before: Thu 18 May 2023 04:17:18 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 60117
IP address blocks: 203.147.248.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1561 (0x619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB
Validity
Not Before: May 18 04:17:18 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=6465a6ce-366c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:13:74:c7:9b:4b:e2:21:0b:15:79:86:cb:
72:9b:1d:9d:be:91:f8:c3:b1:31:50:82:69:31:82:
a1:ba:77:1e:2a:bb:c3:be:45:26:21:a8:8d:4f:09:
92:b0:04:59:38:43:60:f6:21:a4:eb:69:b6:3e:b0:
f3:77:57:30:d8:8e:22:71:ce:ec:b3:13:20:e7:05:
07:7b:66:d4:82:2f:dd:f2:dd:21:05:f9:a6:52:da:
d3:63:4c:da:4f:78:5f:cc:d7:78:d2:bb:68:5c:8c:
e5:aa:9e:b1:aa:71:56:80:46:63:cb:bc:98:8f:df:
88:73:99:d3:97:b2:2f:27:2e:fd:22:bc:00:17:8c:
9b:b4:70:c5:30:37:83:d2:bc:75:fa:2e:2c:92:e8:
6d:81:01:b6:2a:d1:cf:12:ae:62:96:15:85:3d:73:
33:e8:45:e0:6b:98:33:16:46:c9:18:a6:c9:28:d2:
7a:69:ec:3c:7e:2b:c9:d3:2d:00:13:35:e9:07:92:
1b:51:ba:e1:c0:54:01:d1:24:50:bd:37:34:e1:51:
24:f4:fe:3b:34:a1:0f:2c:1a:76:68:93:a3:d8:82:
c5:8b:2e:aa:a4:5c:30:37:47:41:cb:26:c3:5d:2b:
5b:ea:00:2f:19:53:66:73:84:10:2e:60:83:26:bb:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A9:AB:23:C0:CD:9D:6A:7C:72:50:BC:D4:37:8A:0F:26:98:FC:5C
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/E09A2C82F53211ED92369022C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.147.248.0/22
Signature Algorithm: sha256WithRSAEncryption
96:39:f7:32:3e:dc:68:98:ef:ce:19:d1:72:76:e8:bd:3e:bf:
a4:ec:52:a0:64:ad:c2:24:43:8f:27:bb:3c:96:79:54:58:83:
c3:9b:7d:01:ae:53:69:7c:04:ab:5f:3f:95:36:99:80:c3:81:
34:ae:a8:28:0a:ee:b4:df:3f:80:2f:10:e6:17:13:a4:e8:9c:
b5:14:06:68:be:dd:64:b4:c7:56:6a:c2:d0:4e:48:9e:da:1d:
43:72:a8:a2:2b:4a:07:ff:92:b3:78:c0:61:b9:db:a4:68:ed:
8c:27:c9:79:fc:66:79:bc:37:5e:f4:cc:55:65:d8:f9:b3:55:
55:a5:76:02:e9:00:b5:50:72:4a:12:21:b0:f9:09:df:d4:a9:
e8:17:1e:71:d3:e5:67:e5:29:11:2b:8d:22:8f:fa:39:cf:7f:
d7:b1:b2:25:eb:20:cc:d7:3c:f5:d7:c9:3c:87:3f:be:7f:d8:
27:2e:b4:66:f6:3c:f4:5e:3c:79:a1:d6:84:fc:b0:c4:5d:69:
1f:a2:e2:1e:82:0f:e3:33:09:e9:6d:bb:20:00:16:e2:50:31:
e1:f8:09:07:34:2b:3b:05:ab:2e:bf:b1:2c:32:08:85:94:3c:
5d:2d:3f:d0:e0:92:aa:65:76:3c:05:df:1c:13:90:4a:38:c0:
94:26:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:27 2025 by rpki-client