Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/D33F2462F4E111EDB0E62F1CC4F9AE02.roa
File: D33F2462F4E111EDB0E62F1CC4F9AE02.roa (raw, json)
Hash identifier: irQvMtbRjg49Q03Ix70mqYn9IU3zk1TI3JlA1z45mFA=
Subject key identifier: 51:BE:8A:04:ED:14:50:6D:AD:DA:44:FD:26:E2:5E:4B:01:66:F3:72
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 16AD
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/D33F2462F4E111EDB0E62F1CC4F9AE02.roa
Signing time: Wed 17 May 2023 18:37:07 +0000
ROA not before: Wed 17 May 2023 18:37:07 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 38285
IP address blocks: 122.148.0.0/17 maxlen: 17
122.148.0.0/19 maxlen: 19
122.150.0.0/24 maxlen: 24
122.151.0.0/24 maxlen: 24
122.151.2.0/24 maxlen: 24
123.2.0.0/19 maxlen: 19
123.3.0.0/24 maxlen: 24
202.136.32.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5805 (0x16ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: May 17 18:37:07 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64651ed3-df04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:fb:cc:b0:dc:8a:30:59:2b:6d:4f:8a:54:
d6:d1:7c:2a:3e:2e:14:84:0a:19:2d:11:50:16:6c:
dc:b7:e7:f5:ae:91:96:f7:f2:a3:6f:3b:e5:a5:3c:
7e:dd:6b:e3:f6:13:73:ff:e4:b2:41:b5:b7:ab:f7:
9e:f0:f6:9a:d0:3e:75:b1:c9:cb:f6:39:7f:02:36:
28:1e:1e:a6:d7:bd:89:6f:88:d9:3e:04:0a:28:f4:
27:3d:09:b8:7f:47:79:68:66:30:32:ee:73:e1:83:
64:78:17:0d:a7:3d:0e:24:c0:bf:48:ed:25:a4:04:
17:c2:00:e7:1d:a4:79:7c:8f:81:95:2a:4a:ee:a4:
d5:55:fb:37:70:20:8e:ba:a0:65:22:61:73:9a:59:
58:2e:53:09:45:83:bb:4f:8c:69:5d:e9:4a:6a:80:
01:dc:f6:fa:f5:99:49:c2:12:33:f6:da:cc:88:75:
6e:57:9e:74:50:c6:50:da:b0:ed:2b:e4:ec:41:11:
a8:54:62:66:e7:ed:10:1e:bd:b4:81:73:c1:48:ff:
7f:f6:c0:eb:f6:a8:59:d1:0c:26:94:69:fe:ea:97:
e5:0b:91:79:19:72:77:b4:74:a6:45:12:54:d8:d1:
88:35:4e:7f:79:4a:14:6d:73:d8:72:ef:d7:f1:ee:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BE:8A:04:ED:14:50:6D:AD:DA:44:FD:26:E2:5E:4B:01:66:F3:72
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/D33F2462F4E111EDB0E62F1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.148.0.0/17
122.150.0.0/24
122.151.0.0/24
122.151.2.0/24
123.2.0.0/19
123.3.0.0/24
202.136.32.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:5b:bd:c9:aa:81:e7:b6:e3:ef:df:81:37:cf:4e:6c:7b:5b:
64:b6:5c:cd:7d:63:2b:cb:9d:77:2c:fa:ae:bc:cf:b4:f0:d5:
06:df:df:8d:c6:e6:49:60:e9:5b:a5:1c:29:4e:c0:2a:64:ab:
02:f7:20:a6:ae:fb:c4:38:c7:a5:6f:35:4e:47:83:c7:11:65:
b8:d5:34:56:91:e4:34:b6:6f:24:45:14:2c:a3:7a:ae:50:80:
68:91:78:c6:cf:a5:6f:bc:d8:97:2c:35:13:cd:95:c8:fb:07:
fb:c8:3e:32:02:b2:85:9b:b9:8b:f5:3d:13:29:d4:ad:db:fe:
8d:7d:a1:5b:b9:45:ba:03:9f:f1:15:6c:15:94:6b:dc:a5:8f:
ba:9a:1a:19:d9:da:89:12:b7:06:0e:d2:09:26:5f:8d:64:7e:
60:f3:00:22:84:fb:fd:dd:58:50:3a:2e:38:3b:fd:2a:e4:0b:
a2:96:40:72:af:c2:16:f7:3f:c6:bf:59:2b:f0:28:d8:90:eb:
6a:a6:34:b1:36:ae:2a:eb:84:02:43:13:60:c9:f9:fe:3e:f9:
db:42:b0:b3:82:b8:44:a6:13:a5:40:21:4d:e5:92:f1:4e:53:
62:41:65:6e:f7:cb:c0:c4:92:32:26:a8:56:f0:cd:54:10:23:
53:25:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:47 2024 by rpki-client on console-fra.rpki-client.org