Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/1CDADC189DD911EBA1CDB81DC4F9AE02.roa
File: 1CDADC189DD911EBA1CDB81DC4F9AE02.roa (raw, json)
Hash identifier: nuRK9gjW9hTCza31jqTZcEYvbW4r+txlwNzVV8ldplQ=
Subject key identifier: 0D:8E:EB:7B:7F:D1:AA:1F:14:45:DC:85:11:3C:1B:E3:72:7D:19:34
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 09A8
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/1CDADC189DD911EBA1CDB81DC4F9AE02.roa
Signing time: Thu 09 Mar 2023 13:08:41 +0000
ROA not before: Thu 09 Mar 2023 13:08:40 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 136030
IP address blocks: 113.203.241.0/24 maxlen: 24
180.178.130.0/24 maxlen: 24
180.178.131.0/24 maxlen: 24
180.178.143.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2472 (0x9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Mar 9 13:08:40 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6409da58-8ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:8b:c0:a1:db:69:8f:be:ea:b2:69:e6:87:
db:6d:ca:6f:5f:c8:a5:13:a6:c5:e4:7f:8d:c2:14:
84:f6:c0:9a:ce:50:05:76:fd:ad:9c:03:a3:f1:5a:
fe:7e:a8:e7:c7:6d:45:f2:a3:6e:ec:cf:56:e5:1c:
6c:f2:ed:34:d8:7e:c5:3c:37:d0:a5:95:7a:b5:ed:
10:37:62:b0:7b:a8:d7:a4:fb:79:f6:a0:3b:58:c8:
96:a5:4b:b9:8c:06:5a:d8:31:96:91:5d:04:d7:9e:
c4:e0:d8:d0:35:ab:ef:b2:38:f7:60:f1:8c:c5:7b:
80:6d:fc:20:75:55:67:23:30:b5:a7:f5:2b:1f:a7:
4a:24:6c:69:7d:5b:c4:76:7a:eb:97:15:41:5a:cf:
ba:fc:3c:cb:2a:1e:3b:78:e3:ac:cd:57:d2:dc:f1:
51:bd:26:3a:a8:91:86:29:4e:3a:44:66:42:d7:47:
43:09:8c:7e:a2:79:c0:ce:c0:17:e8:09:ad:d0:44:
ef:b0:5b:de:cd:e7:84:5e:44:94:08:84:e7:21:e2:
26:0f:f3:a7:3b:6e:fa:c7:28:00:36:7e:8a:90:cc:
a7:13:9a:71:c3:32:12:95:80:8c:53:d4:c4:f9:03:
7c:b5:00:d2:0d:0b:bb:0c:18:6e:d9:77:44:c3:52:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:EB:7B:7F:D1:AA:1F:14:45:DC:85:11:3C:1B:E3:72:7D:19:34
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/1CDADC189DD911EBA1CDB81DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.241.0/24
180.178.130.0/23
180.178.143.0-180.178.144.255
180.178.169.0/24
223.29.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0b:17:95:e5:70:0d:9f:d7:bf:77:73:29:89:26:b9:11:c5:
7c:99:c2:54:00:2b:9e:86:71:0d:2f:62:e6:c5:cc:2f:03:7a:
0a:d2:6c:b5:f4:d5:8f:df:8f:a5:7e:f0:b4:5d:23:fb:16:5e:
7b:81:6d:f8:ce:42:0e:b1:f8:44:be:e7:dc:c6:24:19:c9:aa:
71:9f:23:3d:b7:2c:4a:71:4e:33:54:db:81:a2:34:fd:71:d1:
4b:62:e1:bb:f8:17:d3:28:f7:29:d2:57:c5:79:8a:06:c4:36:
ff:22:ae:74:35:56:2c:ba:aa:dd:ee:a0:38:62:ab:be:67:3b:
ee:7e:af:d5:e9:ee:9b:c1:56:bb:87:fa:f8:a6:db:22:02:d4:
80:54:db:f8:7b:05:e4:43:43:6e:94:32:27:57:f1:ed:85:ad:
9a:aa:b8:26:d2:e9:5c:64:05:41:99:bf:52:9b:12:83:6b:db:
27:74:af:f6:29:63:8b:e1:92:12:21:f7:1c:ab:f6:c2:c4:f1:
46:d3:da:18:d3:00:8f:f2:82:36:28:c1:e1:2d:15:b5:f6:0e:
8a:93:de:f0:56:1f:93:b4:3f:2f:a8:82:ea:43:68:db:87:60:
b0:09:0c:b6:74:61:a3:76:b0:22:3c:83:c0:ad:4d:49:d7:e8:
a8:ee:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:51 2024 by rpki-client on console-fra.rpki-client.org