Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/6E0DC2AE18BB11EDA0F3CA38C4F9AE02.roa
File: 6E0DC2AE18BB11EDA0F3CA38C4F9AE02.roa (raw, json)
Hash identifier: b5bHb3XrjwfMbV97abzR/qWerjhLUIFk4SSeU0glabw=
Subject key identifier: 64:FF:95:F5:D6:B5:B2:A7:B0:98:A0:6B:92:45:66:94:F6:15:F5:35
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0827
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/6E0DC2AE18BB11EDA0F3CA38C4F9AE02.roa
Signing time: Wed 10 Aug 2022 14:48:00 +0000
ROA not before: Wed 10 Aug 2022 14:48:00 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 208485
IP address blocks: 113.203.230.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Aug 10 14:48:00 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=62f3c520-0766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:b9:56:f0:01:d7:dc:b1:1f:b4:0e:7f:9c:
c4:be:fd:3d:04:71:59:24:1a:82:ae:9d:b8:7f:1c:
12:a1:39:1f:d2:dc:51:41:58:14:8e:b4:d0:57:90:
78:58:38:74:1d:18:68:e2:b3:66:c1:16:b2:ac:2e:
da:20:e6:57:8d:66:ff:6f:ba:64:8a:f4:0f:48:07:
40:7b:69:87:e4:6b:f1:63:4b:20:88:47:68:52:42:
a6:7b:0a:af:a5:a2:c4:60:89:7a:90:e1:da:57:7d:
83:d8:b0:e9:93:57:92:0c:2e:4d:e8:90:da:60:84:
02:75:53:23:3f:a0:de:4e:3b:36:50:05:79:78:9e:
2e:ad:d6:ea:25:68:e0:e2:6d:97:3f:41:78:be:8f:
b1:13:20:0b:f5:a1:1b:86:76:06:21:18:35:7d:e1:
24:0a:16:2e:be:fb:30:f2:09:5d:0d:16:64:1d:e4:
d1:c7:30:d7:3f:05:e5:83:04:4b:6b:56:0f:64:d4:
e7:2f:d3:c0:a5:45:ea:1d:c8:28:c3:15:24:b8:ff:
81:2a:75:8b:27:be:b0:ff:86:b7:d1:85:d0:48:4b:
2f:f8:df:96:a1:2a:53:20:3b:24:eb:c0:57:87:be:
0b:30:0a:c5:a4:53:c3:57:50:b0:de:f4:18:70:df:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:95:F5:D6:B5:B2:A7:B0:98:A0:6B:92:45:66:94:F6:15:F5:35
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/6E0DC2AE18BB11EDA0F3CA38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.230.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d1:7c:73:34:5a:da:9f:db:c7:bf:a1:a5:5d:a6:fd:f1:93:
61:20:b5:c0:03:d8:67:1e:f2:35:29:ab:72:bd:58:10:c2:56:
f4:21:81:21:fa:3c:32:9c:72:f8:f6:0b:31:a2:12:66:16:79:
74:bb:ae:cb:59:3e:eb:f2:dc:3d:b3:dc:e6:07:32:49:56:98:
d7:c4:b1:5e:b6:04:69:61:5d:56:31:88:52:53:82:0b:55:49:
d4:01:68:e2:41:71:ef:c0:ca:a3:43:8e:c4:19:3a:59:be:e3:
55:02:21:0d:43:80:68:83:a0:b4:cc:79:d1:2b:c0:6d:08:94:
2a:40:76:1f:e1:90:8e:d0:99:97:c2:5b:de:6f:ca:c4:9c:d6:
b7:95:de:6a:27:68:dc:38:ef:06:b7:b5:c0:90:d9:04:85:a4:
94:ba:ca:5e:87:f8:2a:ca:85:41:ae:54:10:10:d8:46:27:cb:
86:30:12:5e:74:5a:95:c1:c7:51:7e:6e:f9:f6:db:68:5f:ae:
55:14:d8:25:b3:a0:08:4e:20:9d:23:28:68:30:86:a6:91:ab:
60:ba:ae:a8:1f:e2:c3:3e:26:60:bb:74:b3:c7:76:be:58:24:
b7:08:75:6c:76:3b:c8:7b:e1:7a:7d:d9:5c:79:2d:0f:bf:85:
6b:29:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org