Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/4C1D7E5E3B3611ECB60C5429C4F9AE02.roa
File: 4C1D7E5E3B3611ECB60C5429C4F9AE02.roa (raw, json)
Hash identifier: bSownzW1ktFsoXVsm7IqpHYVWlyShQfmZZbfEplaJPU=
Subject key identifier: EA:04:42:54:FD:53:07:2A:FC:4D:31:3C:86:9E:30:81:D6:F9:C1:D6
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0568
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/4C1D7E5E3B3611ECB60C5429C4F9AE02.roa
Signing time: Mon 01 Nov 2021 17:08:14 +0000
ROA not before: Mon 01 Nov 2021 17:08:13 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 46664
IP address blocks: 113.203.231.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Nov 1 17:08:13 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=61801efd-e3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:ea:cb:ea:c4:ca:1d:d1:eb:ff:95:14:58:
12:2b:4d:89:13:d4:90:62:e1:71:37:83:d7:c3:08:
43:9c:08:40:17:98:7e:1b:7b:32:62:57:55:7d:89:
07:42:75:86:c6:dc:8e:d3:86:e8:a0:33:e8:5a:3b:
f8:cf:b1:92:f1:e2:38:69:e6:40:32:46:88:7c:f1:
8b:04:94:fd:bf:ca:62:3b:6b:55:f8:e0:c2:57:32:
f4:4d:c4:ca:23:8a:33:55:40:52:69:d1:5f:8e:16:
d0:c9:5c:58:12:92:40:48:75:44:32:12:5e:e4:5f:
84:62:14:66:43:37:25:75:f4:58:06:60:65:c5:a3:
41:86:43:50:ad:ce:f4:78:39:76:84:d0:0f:8a:33:
61:f9:28:23:cb:fa:f0:cd:01:59:c0:d1:8f:5c:7a:
11:1c:4c:af:be:77:1b:3c:5c:99:6f:9c:24:d5:0f:
0f:3a:31:af:25:31:fc:0d:c5:db:c4:ea:0e:12:5d:
ba:d7:fc:9c:63:d2:d7:33:32:75:e3:b2:3c:66:54:
e0:e8:8d:8c:8a:f4:da:00:37:5c:74:c7:72:cb:49:
6b:75:62:23:13:87:f4:13:2b:28:e5:fc:ce:16:06:
8b:62:cb:1e:cd:94:e2:a4:8e:35:24:ce:6f:b4:a9:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:04:42:54:FD:53:07:2A:FC:4D:31:3C:86:9E:30:81:D6:F9:C1:D6
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/4C1D7E5E3B3611ECB60C5429C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.231.0/24
Signature Algorithm: sha256WithRSAEncryption
34:da:0e:29:96:d6:53:8e:c1:51:d4:f2:fb:cc:4a:56:e4:a1:
23:6c:e0:e7:30:b1:e0:1c:71:f6:1d:fd:fb:a7:98:0d:e4:da:
85:b4:35:0a:a3:64:46:84:35:30:49:17:a4:39:76:a7:8a:24:
8a:83:66:c3:f6:fc:88:ff:6d:c3:eb:0a:0d:bd:34:05:77:6d:
7f:32:43:0c:9f:da:0b:d6:12:47:13:97:9d:b2:a5:a3:cd:32:
c1:d9:af:0f:d8:fb:9c:9c:1a:e4:06:4a:0f:2d:dd:0f:95:35:
56:1d:f3:bb:b2:c5:17:2c:40:91:6e:16:a3:59:f8:65:30:5e:
76:e2:a5:91:ad:74:90:19:43:9f:c8:14:30:35:85:c5:36:88:
f6:39:bf:a3:5b:e9:99:89:56:5f:b3:fb:ec:57:2a:2d:f7:b9:
2f:e4:98:95:41:f6:c3:95:9e:bd:09:fd:a1:4e:cb:69:7c:45:
cb:21:58:c6:7a:57:6b:6f:d8:06:f8:42:21:a5:f6:e9:b5:6a:
5e:c8:a7:9b:1d:e0:bd:04:5b:0e:64:44:41:2c:f5:88:65:1c:
17:50:bd:fa:b6:56:56:25:a0:e5:77:38:60:b3:63:27:25:83:
39:f0:1c:8d:68:ae:fd:36:a6:ff:e0:c0:eb:3f:ff:f5:40:44:
09:2c:ea:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org