Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/73344C9008B611EDACE57065C4F9AE02.roa
File: 73344C9008B611EDACE57065C4F9AE02.roa (raw, json)
Hash identifier: IrNHvp1ycnhRukIBzKDBPR3tgI2a0pvR4G0ynIHw/Ow=
Subject key identifier: A2:95:E3:96:15:47:E2:0E:9A:6D:D7:B9:C1:C8:E1:2E:84:06:8F:7E
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 0327
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/73344C9008B611EDACE57065C4F9AE02.roa
Signing time: Tue 23 Aug 2022 03:01:53 +0000
ROA not before: Tue 23 Aug 2022 03:01:53 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 10151
IP address blocks: 203.147.33.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807 (0x327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Aug 23 03:01:53 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=63044320-d7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:2c:f1:f8:82:79:91:b4:5f:86:2e:73:ba:
2a:59:dc:91:f5:6e:53:97:93:96:a8:9d:bc:7f:59:
66:a3:3c:69:03:4e:51:87:e6:80:a0:ee:81:47:3f:
4c:e5:49:30:73:3c:5e:b1:8b:cb:af:db:2c:74:43:
ac:98:ef:2c:51:be:a9:76:7a:b7:e6:68:0a:09:cd:
af:f7:b2:80:d8:46:79:91:8c:f8:c9:70:da:54:d8:
a2:cc:06:95:2f:83:fb:57:20:56:75:87:5d:70:08:
70:5e:5f:23:2c:82:c3:a4:69:49:42:81:87:36:dd:
e0:81:f1:09:99:60:f9:fa:c6:86:2e:74:58:77:d7:
7f:3a:c3:ac:21:54:54:ad:09:1b:28:b7:e1:39:40:
d3:9c:64:0c:95:cb:59:64:76:31:85:5c:a7:03:0a:
cb:fc:6f:be:be:a8:35:8c:7c:d1:e7:a1:c4:25:32:
3d:db:ce:74:40:ba:f9:7e:42:b0:61:49:9e:eb:29:
aa:8f:c3:54:d8:8c:a1:74:d9:92:68:3e:fe:0b:2f:
4d:0e:e6:f0:63:81:93:39:96:39:b0:7a:1e:b3:dd:
4c:c5:b0:d9:39:cc:88:d0:40:36:8e:00:1b:ac:8e:
56:f2:33:f2:41:8f:73:df:32:4d:eb:bf:34:7e:ad:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:E3:96:15:47:E2:0E:9A:6D:D7:B9:C1:C8:E1:2E:84:06:8F:7E
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/73344C9008B611EDACE57065C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.147.33.0/24
Signature Algorithm: sha256WithRSAEncryption
29:dd:da:24:f4:23:08:9b:91:16:6f:c5:ad:59:b4:ab:ea:66:
c7:60:cb:96:4b:2e:c1:1a:e9:7f:4a:12:70:32:2e:25:dc:b6:
be:27:83:46:21:a3:40:32:a3:b8:33:61:f9:7d:62:2e:50:6b:
89:15:b6:5a:9c:8e:ac:fc:78:79:b5:3b:f6:88:a0:52:42:8e:
f8:21:41:2a:6a:e7:85:27:b8:41:ff:e0:69:2a:9f:50:91:5c:
88:63:44:f4:cc:19:62:dc:9d:18:dd:45:d1:0e:2d:8c:a0:a2:
01:50:4d:69:2a:7d:c8:0e:ee:f3:e9:2b:46:d8:f3:95:59:90:
07:61:8d:3e:0d:4f:4b:26:36:f2:1a:d3:bf:c9:86:3c:ca:8d:
e9:55:68:ac:6e:07:4e:82:fd:97:f9:4f:99:f7:e7:97:58:ff:
79:71:e1:59:a6:31:70:3b:1e:cc:90:3a:2e:44:ad:57:bd:10:
c1:06:9c:d2:66:3c:8f:ef:76:fa:89:d7:c6:bd:13:b7:34:dd:
2e:2d:36:27:f2:d3:a3:3e:21:75:05:4c:ea:7c:44:c8:7b:99:
bc:ff:51:5e:94:b6:fa:a6:db:96:5a:4b:a9:66:43:64:5e:f4:
52:98:53:1d:d0:c5:9b:75:97:7e:92:31:07:85:ca:1c:fe:f4:
a2:67:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 02:08:18 2023 by rpki-client on console-fra.rpki-client.org