Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/A7C914BC959311EDB77DA179C4F9AE02.roa
File: A7C914BC959311EDB77DA179C4F9AE02.roa (raw, json)
Hash identifier: nagf+n0re7NLPZ05hzxYgjENL/9igD1MDb1ZBdJsW9A=
Subject key identifier: D6:F3:AC:BA:98:49:09:79:C5:27:B0:50:98:3F:92:CF:DB:10:11:57
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0949
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/A7C914BC959311EDB77DA179C4F9AE02.roa
Signing time: Mon 16 Jan 2023 11:48:13 +0000
ROA not before: Mon 16 Jan 2023 11:48:13 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 12679
IP address blocks: 180.178.176.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377 (0x949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Jan 16 11:48:13 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63c5397c-3d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:9a:2d:db:d9:38:d9:64:6a:26:a9:65:fc:
77:5f:07:f5:a9:06:69:e5:b2:e7:04:03:2d:aa:91:
36:95:84:9b:25:dd:87:06:f8:1b:4c:b6:18:27:86:
98:0c:c1:5e:d0:51:05:31:ac:ec:a5:8b:ce:3b:7f:
a2:f3:c3:67:c9:18:44:b5:57:bc:d6:77:12:f6:27:
7f:57:64:5e:c8:56:75:72:eb:84:64:8d:77:b4:d4:
37:b6:3c:9a:77:34:ca:d1:d5:47:d5:62:b4:ce:d5:
01:e1:8f:0e:56:62:b0:5d:29:32:d1:a7:62:57:b8:
0e:2c:23:4f:70:88:b9:f3:b4:63:c7:61:7e:3f:c2:
7a:40:ea:1d:f8:60:85:13:42:87:2e:bc:c5:db:04:
6f:e4:27:ba:a6:21:c2:6e:86:a9:c1:c6:26:ca:a3:
6c:37:f8:22:72:bd:37:4a:43:11:46:14:60:91:cf:
97:40:32:86:b2:5c:80:3b:44:f5:f2:a9:9e:6d:70:
b2:2a:a6:f3:e9:6d:62:b5:df:3f:da:9d:6a:56:c2:
58:97:4f:15:aa:cd:e9:80:a1:c4:e8:9e:01:5b:ab:
fc:8e:41:7c:6d:de:0d:96:83:08:65:0b:bf:d4:75:
b6:c8:92:f0:9c:0e:c8:b4:6d:2c:4d:a4:9c:89:19:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:AC:BA:98:49:09:79:C5:27:B0:50:98:3F:92:CF:DB:10:11:57
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/A7C914BC959311EDB77DA179C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.176.0/23
180.178.179.0/24
Signature Algorithm: sha256WithRSAEncryption
86:29:9b:44:9e:18:fc:6f:d9:82:50:a3:1e:04:9a:de:39:fc:
0e:ba:f6:04:00:2e:aa:ee:a9:f7:f9:cd:41:7b:01:00:e4:de:
08:1e:72:04:bd:79:ac:d9:33:c1:a0:6c:bb:8b:0f:20:9c:26:
73:a7:01:6e:25:dd:a4:c4:fe:d4:9a:8b:c8:dc:62:00:ac:94:
3f:8e:f6:8e:46:83:51:c5:a5:e5:f2:2d:11:56:a6:8e:e3:9b:
93:f4:ef:5a:14:22:c2:36:b8:7b:a5:93:7a:73:6f:3d:a0:e2:
fd:f6:23:13:87:ba:55:80:6d:56:9b:55:38:bd:16:4a:1a:f1:
3c:98:44:15:ee:0c:1b:03:c7:c0:0f:a0:be:c9:bd:8b:eb:7e:
b1:75:f0:8a:27:32:60:1c:67:d3:31:74:ee:d8:8f:f2:62:43:
3a:be:ef:af:ab:ef:24:7c:1e:6d:64:b8:49:6a:fa:be:b6:66:
67:0f:e9:8b:46:9c:1b:8a:12:0e:84:49:88:35:46:21:db:20:
11:00:d1:21:f7:cf:ca:d0:89:67:61:71:75:38:14:51:05:e7:
4a:fa:1f:26:c4:01:65:f4:7d:6e:3a:74:85:8e:a9:59:af:64:
5d:bb:25:fb:6c:a3:c7:fe:4e:34:9c:0f:0b:04:62:a6:ce:ee:
8f:e5:1b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org