Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/5AB10D048DE311EDA0B5A058C4F9AE02.roa
File: 5AB10D048DE311EDA0B5A058C4F9AE02.roa (raw, json)
Hash identifier: M6cJj6gm9g0mIMHL6p0jGVEYUH+vPYD/W81wqKf4/tA=
Subject key identifier: 2D:B6:7E:3A:ED:8D:32:00:6D:21:12:2C:74:76:6E:D4:CD:62:3D:17
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 093C
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/5AB10D048DE311EDA0B5A058C4F9AE02.roa
Signing time: Fri 06 Jan 2023 16:58:34 +0000
ROA not before: Fri 06 Jan 2023 16:58:34 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 134489
IP address blocks: 180.178.146.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2364 (0x93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Jan 6 16:58:34 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63b8533a-d63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:e0:49:e1:8f:83:6d:f2:d3:f7:31:d7:36:
b5:b2:c5:7e:c1:70:6f:fe:01:8f:31:95:5b:82:81:
19:79:dd:9c:26:19:d9:3e:6f:68:ac:19:21:ee:90:
b2:3b:5d:85:d8:a1:88:a4:8e:23:99:b2:be:ff:76:
77:d1:31:c0:89:c2:3f:af:25:84:96:c3:a8:2a:3e:
e8:05:35:99:ed:e7:26:2d:03:3d:56:cd:8f:c1:57:
d5:ba:8b:7d:cf:c8:74:34:15:1c:0e:2d:08:19:a7:
5b:8d:be:4b:6d:a1:42:ba:37:f0:7c:ee:9f:aa:85:
8f:0b:f9:f2:2e:a2:78:2e:0d:1e:a6:9e:d1:6e:c2:
aa:21:f0:2e:89:99:ef:71:27:7f:0e:69:43:0c:97:
f5:f2:27:dc:e0:e1:0c:f4:30:46:7c:43:a5:e2:88:
cd:f8:59:af:a3:85:d1:96:cd:b9:7c:8d:69:cc:d2:
3a:fa:cd:82:f0:8e:63:6d:e9:56:50:1b:ea:a7:dc:
8d:d6:dd:46:31:5f:9e:5f:fc:5d:5c:4e:43:55:b4:
74:df:db:e7:51:52:a7:e0:48:cd:2d:4d:04:4c:49:
93:ec:d7:3f:53:8e:d8:e3:5e:fd:ae:f7:3e:b8:92:
3b:3a:8c:3d:1b:ad:90:cd:d1:e1:eb:85:06:be:92:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:7E:3A:ED:8D:32:00:6D:21:12:2C:74:76:6E:D4:CD:62:3D:17
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/5AB10D048DE311EDA0B5A058C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.146.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7e:49:a0:ab:0d:8b:a3:97:cd:e4:c7:e6:f0:8a:b5:b8:72:
f5:b5:02:a6:bd:9b:99:fe:24:58:61:50:49:39:b9:7e:ed:76:
de:ca:67:90:ec:5f:e6:12:a3:67:89:d0:37:b8:89:6c:a3:e0:
0f:2e:f4:04:cb:8c:3d:4b:17:8e:87:cd:ee:0b:df:4c:35:c4:
a2:86:91:bf:55:39:34:e4:bb:9b:82:5d:70:cc:9f:6b:69:fa:
3b:14:11:31:d9:4a:49:05:95:af:a2:da:7b:c6:4f:a0:9e:a2:
bc:08:8b:31:c0:60:b9:0b:09:a7:f4:2a:92:fc:bf:1f:a6:a6:
7d:6d:43:7d:a5:e0:7c:b0:9c:72:9c:1a:02:6c:e5:5b:66:1e:
0d:1a:36:3d:9c:b5:b2:d8:3f:9f:c9:77:d7:ab:e3:bc:d2:e3:
3c:e4:9f:bf:ec:21:d7:a8:85:46:e2:03:74:3b:0e:68:51:dd:
e0:1e:a0:c3:00:df:d1:5a:08:d5:3a:b6:10:95:0a:c8:96:34:
8e:ab:c4:0a:d9:79:11:7a:01:79:1d:3a:38:98:41:79:35:0e:
86:4b:0f:5c:18:2d:ce:8b:02:92:13:c4:40:50:0e:42:ee:88:
59:23:6d:a2:e2:e6:a7:b7:97:8a:32:33:e7:86:64:5a:d3:67:
19:e8:e1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org