Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/23D6CBEE659C11ED95624350C4F9AE02.roa
File: 23D6CBEE659C11ED95624350C4F9AE02.roa (raw, json)
Hash identifier: Q3DmmaiBwMq/ds34PBpmOxl0IMNyddCxdkiFHh5UJYU=
Subject key identifier: 79:32:05:66:38:1A:D7:10:61:E9:6E:9B:CB:C1:7C:B7:27:39:FA:E9
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0900
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/23D6CBEE659C11ED95624350C4F9AE02.roa
Signing time: Wed 16 Nov 2022 10:48:01 +0000
ROA not before: Wed 16 Nov 2022 10:48:01 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 12679
IP address blocks: 180.178.168.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304 (0x900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Nov 16 10:48:01 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6374bfe1-9647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:c7:0d:7f:9a:ca:52:c1:3e:5a:d1:5d:22:
8e:cd:cb:ed:f3:dd:40:4e:55:d0:dd:c7:9d:67:4a:
dd:d7:60:60:0a:5c:08:38:35:ac:8d:96:97:07:fb:
33:dd:62:bf:c4:1d:f1:52:96:d6:08:5d:e8:b7:4a:
00:bb:1e:0a:bc:9c:11:43:65:46:e8:89:a6:ad:c5:
51:1a:19:37:0d:fe:ac:a4:7a:ca:ef:63:ef:c1:06:
fa:04:ab:a7:74:a8:09:4f:a5:5d:a3:90:76:2a:6e:
c3:39:6d:dc:1d:fd:7d:26:00:dc:b7:7f:5d:22:9c:
e3:f5:45:10:11:99:e0:8a:94:06:73:64:45:b1:4e:
57:61:6c:1f:71:24:18:8b:45:c0:59:d5:5e:34:36:
20:c3:69:0f:18:fc:21:5b:9a:60:b3:7b:62:17:bd:
fb:cc:17:fe:4e:78:08:06:21:ad:43:fc:c7:3f:4c:
69:46:72:12:26:bc:2b:dc:20:3a:42:b0:51:00:b4:
03:84:1a:19:46:32:05:52:49:30:2c:61:c9:16:b1:
d2:dd:42:b2:c2:9c:03:1b:7e:73:92:21:7b:2d:11:
08:56:63:85:a4:66:14:d2:32:c0:3e:b3:82:5a:2f:
50:12:d3:06:a1:93:5d:63:76:1a:f2:16:38:4f:dd:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:32:05:66:38:1A:D7:10:61:E9:6E:9B:CB:C1:7C:B7:27:39:FA:E9
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/23D6CBEE659C11ED95624350C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.168.0/24
Signature Algorithm: sha256WithRSAEncryption
74:12:04:27:53:2b:44:51:77:c5:01:4f:44:d0:17:a4:75:bf:
36:99:95:5c:45:1f:aa:5a:de:04:c6:0e:df:b5:f4:d8:d9:5e:
6a:c5:f9:75:69:39:f9:2a:0b:e8:83:0b:bf:92:ee:f3:5e:d9:
43:e2:2c:fa:cf:d0:36:ba:19:39:99:64:48:85:08:34:e7:06:
e8:dc:17:ab:ea:b7:36:4d:55:2c:24:29:c0:29:06:4d:23:8c:
9d:5f:40:ec:da:c6:ed:2e:a3:07:76:53:72:4b:95:7e:6e:b4:
c6:b8:e0:60:82:52:b4:8e:ff:b9:64:9d:7f:37:59:3d:07:60:
0b:d4:83:4f:61:dd:df:a2:26:19:dd:e5:ee:41:20:3b:25:39:
36:0e:b6:8d:b5:8b:e7:67:d4:fc:6d:46:4c:a3:84:d1:23:f9:
d3:ef:90:e2:ad:9d:34:f7:c6:e8:d1:68:46:4a:08:ca:cd:06:
67:e1:94:5b:ab:60:ff:36:31:01:f2:a9:b9:01:6a:61:fe:4e:
c7:68:50:c7:a9:68:65:8d:f0:fa:4d:29:6a:b5:d8:9d:cd:7b:
c3:8e:b8:7f:39:b2:61:45:4c:a2:22:89:6f:fb:f1:c4:b0:3a:
03:05:36:3c:b3:0f:8a:0b:fc:26:7d:2f:81:7b:99:b2:86:6e:
ad:5f:8b:5f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB
MURFRjcxOTAwHhcNMjIxMTE2MTA0ODAxWhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mzc0YmZlMS05NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0+zHDX+aylLBPlrRXSKOzcvt891ATlXQ3cedZ0rd12BgClwIODWsjZaXB/sz
3WK/xB3xUpbWCF3ot0oAux4KvJwRQ2VG6ImmrcVRGhk3Df6spHrK72PvwQb6BKun
dKgJT6Vdo5B2Km7DOW3cHf19JgDct39dIpzj9UUQEZngipQGc2RFsU5XYWwfcSQY
i0XAWdVeNDYgw2kPGPwhW5pgs3tiF737zBf+TngIBiGtQ/zHP0xpRnISJrwr3CA6
QrBRALQDhBoZRjIFUkkwLGHJFrHS3UKywpwDG35zkiF7LREIVmOFpGYU0jLAPrOC
Wi9QEtMGoZNdY3Ya8hY4T90lowIDAQABo4IClTCCApEwHQYDVR0OBBYEFHkyBWY4
GtcQYelum8vBfLcnOfrpMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw
NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjY5RTcvNDZBQUQ2QjI5MDQwMTFFQUE2ODhCRTQ1QzRGOUFFMDIvMjNENkNCRUU2
NTlDMTFFRDk1NjI0MzUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC0sqgwDQYJKoZIhvcNAQELBQADggEBAHQSBCdTK0RRd8UB
T0TQF6R1vzaZlVxFH6pa3gTGDt+19NjZXmrF+XVpOfkqC+iDC7+S7vNe2UPiLPrP
0Da6GTmZZEiFCDTnBujcF6vqtzZNVSwkKcApBk0jjJ1fQOzaxu0uowd2U3JLlX5u
tMa44GCCUrSO/7lknX83WT0HYAvUg09h3d+iJhnd5e5BIDslOTYOto21i+dn1Pxt
RkyjhNEj+dPvkOKtnTT3xujRaEZKCMrNBmfhlFurYP82MQHyqbkBamH+TsdoUMep
aGWN8PpNKWq12J3Ne8OOuH85smFFTKIiiW/78cSwOgMFNjyzD4oL/CZ9L4F7mbKG
bq1fi18=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org