Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/39988E4ADEAF11EDB7B0C04EC4F9AE02.roa
File: 39988E4ADEAF11EDB7B0C04EC4F9AE02.roa (raw, json)
Hash identifier: BS23BXFuor5V2CFqy/dT2r005aeVuO3qkGwLASMhGUQ=
Subject key identifier: 45:A9:38:E7:C6:71:59:38:8F:71:E8:05:DB:A4:87:3F:7E:C4:5A:E0
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0A30
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/39988E4ADEAF11EDB7B0C04EC4F9AE02.roa
Signing time: Wed 19 Apr 2023 12:39:29 +0000
ROA not before: Wed 19 Apr 2023 12:39:29 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 136030
IP address blocks: 113.203.241.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2608 (0xa30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Apr 19 12:39:29 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=643fe100-b343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:ac:65:ae:df:87:a0:0a:f3:93:01:45:2a:
ab:66:60:77:97:50:b5:49:56:ba:30:cb:9e:a1:80:
e8:9b:77:68:60:fd:f7:a9:0d:c6:ec:5a:3c:bb:3b:
dd:72:aa:8a:c2:af:c4:0c:c6:03:0c:38:42:10:8a:
1b:6a:fe:60:13:c5:50:64:5b:bb:84:17:30:f1:1d:
ad:8b:f1:ec:0e:e4:e0:55:c1:20:f0:01:00:ec:8d:
63:ba:22:7e:f0:c9:ff:26:37:57:71:42:77:fc:6c:
42:d1:69:8e:be:d8:1b:44:bf:fc:23:11:09:49:d4:
9f:0b:61:c1:bd:de:89:ab:b0:24:8c:ec:80:0a:2c:
bb:8a:43:89:b7:15:53:e5:c6:c9:71:b1:c1:05:49:
d4:53:cf:58:57:77:68:79:12:b7:09:d6:2b:18:f0:
c6:e8:0d:f4:7b:28:ad:b2:d2:01:bb:f7:aa:16:76:
38:b5:5d:5f:60:21:4d:0f:01:f7:9a:4a:9b:fd:97:
6f:f8:92:f8:0e:09:84:2f:11:59:10:44:97:18:09:
aa:b1:d2:56:6a:56:cb:84:47:6d:88:af:4d:49:bb:
ab:7f:0e:26:67:a3:f3:0b:6b:00:25:fb:78:74:3a:
8a:81:e0:e5:ae:b4:86:38:29:24:dc:69:67:f9:18:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A9:38:E7:C6:71:59:38:8F:71:E8:05:DB:A4:87:3F:7E:C4:5A:E0
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/39988E4ADEAF11EDB7B0C04EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.241.0/24
223.29.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:fd:bb:31:9d:cf:24:4d:bf:5b:ad:26:5b:ff:34:c4:f4:4c:
cd:a6:e1:1a:b7:d7:e9:1c:a6:0f:1d:66:17:99:d6:ef:65:d7:
e4:0a:ee:a5:11:49:12:8f:87:d8:ac:15:7c:ff:63:3d:fe:17:
0d:d9:ec:ea:2a:1d:1c:c2:ff:09:4c:8c:e5:71:b8:a8:bd:d9:
31:78:3c:4c:2d:0e:af:40:dd:3b:da:e7:37:80:e5:88:68:ae:
93:49:e8:72:64:fb:2f:32:87:85:0f:eb:fb:d4:8e:9c:ac:01:
90:af:4d:f9:57:d5:a3:86:c0:02:ed:39:4e:ee:4f:58:a7:59:
e6:d4:e6:8e:8c:f3:22:e2:af:16:94:65:e4:e3:f5:f4:e0:86:
b3:91:ec:93:96:0b:60:8d:c1:40:59:47:c7:54:d4:78:78:37:
8d:22:0b:77:e0:1a:ca:91:c0:34:c3:d4:eb:cc:f0:04:89:c6:
59:12:42:45:3f:92:cd:eb:01:47:5f:29:f5:8e:6a:fb:5a:40:
a6:fe:31:e0:9a:3c:e7:ad:99:6f:97:e2:23:02:ba:f8:be:50:
d8:ae:e1:88:7e:02:ce:03:a6:5d:89:50:5c:24:18:3f:e4:7e:
ff:ab:34:92:c7:ea:04:6f:7a:09:b7:f6:a7:05:7a:1a:4e:8f:
9b:52:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org