Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/75B880E408B611EDACE57065C4F9AE02.roa
File: 75B880E408B611EDACE57065C4F9AE02.roa (raw, json)
Hash identifier: WnhjaB42muAajYIMc9/FG5USj07yYg1nM6sHtQooDEw=
Subject key identifier: 00:E1:F0:0A:F1:26:0A:80:36:32:5D:9E:9A:E4:FF:2D:00:DF:83:F0
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 032D
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/75B880E408B611EDACE57065C4F9AE02.roa
Signing time: Tue 23 Aug 2022 03:01:59 +0000
ROA not before: Tue 23 Aug 2022 03:01:59 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 24042
IP address blocks: 203.130.136.0/24 maxlen: 24
203.156.154.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Aug 23 03:01:59 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=63044327-fc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:4e:39:8c:7b:45:a0:c2:8f:97:ed:c1:c4:
e6:43:8e:48:14:39:02:66:62:03:51:8d:89:d9:c1:
ab:44:ec:96:c0:ac:23:12:b8:88:89:6f:fb:60:3c:
8c:32:23:8f:3c:c7:43:00:fe:e3:ba:0c:1a:dd:a4:
d7:bc:27:60:c1:6e:f5:b6:1a:6a:0c:99:63:6a:93:
d3:f7:61:36:19:68:cf:29:ae:9e:26:7b:fe:cc:9a:
82:03:86:35:96:ff:c6:21:1c:5d:27:4a:de:69:64:
08:fd:fd:2f:14:8d:a3:ac:90:3d:2b:1f:4d:b5:f7:
5a:0d:dd:44:c8:e6:1e:68:5d:4b:00:f8:1d:7e:f7:
5f:cf:a1:d2:1e:2e:81:89:8b:73:6a:51:19:81:67:
91:e5:f3:c6:58:14:15:55:e1:22:15:fc:36:3e:31:
88:64:75:69:a0:a8:6b:87:25:4b:d9:8f:d9:3c:e5:
cb:17:0c:16:88:88:2d:62:08:73:60:9f:c5:a5:f9:
83:d3:65:e1:88:df:40:8e:5f:66:78:34:56:e4:bc:
a8:53:01:19:94:ae:a5:fb:a9:5a:66:b0:34:dc:7c:
fa:1b:72:58:37:ae:ff:e9:04:aa:7f:a8:d6:b0:4e:
2b:a0:55:df:e0:52:26:d5:88:39:08:04:fb:22:eb:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:F0:0A:F1:26:0A:80:36:32:5D:9E:9A:E4:FF:2D:00:DF:83:F0
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/75B880E408B611EDACE57065C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.130.136.0/24
203.156.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:67:ff:69:a4:96:22:d8:ca:03:24:a6:54:58:07:ad:16:52:
11:a5:0a:04:c2:87:fb:c7:72:d8:a3:19:bf:45:d5:e4:00:c4:
b5:0d:25:0d:50:91:d6:64:47:ee:47:8b:93:00:00:b2:d8:c4:
22:1b:b6:15:85:82:0f:0b:21:f3:29:07:5f:30:7f:45:dc:4d:
e1:83:7f:5e:11:ce:a8:08:42:43:1d:f4:e8:f6:a5:c6:9f:75:
e5:9d:78:dc:29:6d:33:85:29:4c:eb:31:be:79:4f:ee:64:8b:
1e:ac:97:61:a1:0b:6e:6f:15:3a:e2:b2:b7:33:45:5e:0c:4b:
11:75:03:8c:7b:63:e1:ae:b3:38:e5:a9:f2:56:ee:34:9d:c3:
73:8d:43:13:70:af:90:0a:e8:0d:98:79:8a:be:d6:e2:7e:51:
34:3b:2f:b9:0c:ca:92:12:58:97:13:40:fa:86:d7:aa:47:f1:
0c:df:0c:61:03:b3:b2:89:f3:89:66:8c:c7:48:31:5e:a3:0f:
33:fe:78:60:9e:af:c7:10:1b:ec:2e:79:79:6f:d6:3e:fb:3b:
6e:09:d1:8e:ad:78:74:62:29:10:74:57:0e:d5:ed:9f:50:b6:
53:74:0f:cc:bd:f0:9a:41:04:9e:4a:35:12:83:d3:8c:12:62:
c4:8f:00:d8
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE
RDhDRUNEMDQwHhcNMjIwODIzMDMwMTU5WhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzA0NDMyNy1mYzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA69JOOYx7RaDCj5ftwcTmQ45IFDkCZmIDUY2J2cGrROyWwKwjEriIiW/7YDyM
MiOPPMdDAP7jugwa3aTXvCdgwW71thpqDJljapPT92E2GWjPKa6eJnv+zJqCA4Y1
lv/GIRxdJ0reaWQI/f0vFI2jrJA9Kx9NtfdaDd1EyOYeaF1LAPgdfvdfz6HSHi6B
iYtzalEZgWeR5fPGWBQVVeEiFfw2PjGIZHVpoKhrhyVL2Y/ZPOXLFwwWiIgtYghz
YJ/FpfmD02XhiN9Ajl9meDRW5LyoUwEZlK6l+6laZrA03Hz6G3JYN67/6QSqf6jW
sE4roFXf4FIm1Yg5CAT7IutNEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFADh8Arx
JgqANjJdnprk/y0A34PwMB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1
NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvNzVCODgwRTQw
OEI2MTFFREFDRTU3MDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADLgogDBADLnJowDQYJKoZIhvcNAQELBQADggEBACxn/2mk
liLYygMkplRYB60WUhGlCgTCh/vHctijGb9F1eQAxLUNJQ1QkdZkR+5Hi5MAALLY
xCIbthWFgg8LIfMpB18wf0XcTeGDf14RzqgIQkMd9Oj2pcafdeWdeNwpbTOFKUzr
Mb55T+5kix6sl2GhC25vFTrisrczRV4MSxF1A4x7Y+GuszjlqfJW7jSdw3ONQxNw
r5AK6A2YeYq+1uJ+UTQ7L7kMypISWJcTQPqG16pH8QzfDGEDs7KJ84lmjMdIMV6j
DzP+eGCer8cQG+wueXlv1j77O24J0Y6teHRiKRB0Vw7V7Z9QtlN0D8y98JpBBJ5K
NRKD04wSYsSPANg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:46 2024 by rpki-client on console-fra.rpki-client.org