Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/A93EFF167E8B11ECB9A60D74C4F9AE02.roa
File: A93EFF167E8B11ECB9A60D74C4F9AE02.roa (raw, json)
Hash identifier: R/4kchRpSLRi0EM6b4gPypdSP2TM6uDB0TMmBKds+fY=
Subject key identifier: DB:EA:FF:ED:CD:E3:3F:D0:9C:1B:37:01:A5:5F:A9:1D:77:54:EB:B2
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 063F
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/A93EFF167E8B11ECB9A60D74C4F9AE02.roa
Signing time: Wed 26 Jan 2022 09:38:06 +0000
ROA not before: Wed 26 Jan 2022 09:38:05 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 43260
IP address blocks: 180.178.168.0/24 maxlen: 24
223.29.224.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Jan 26 09:38:05 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=61f1167d-a1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:8d:1e:f0:a5:84:8d:83:f3:4b:33:72:68:
58:75:da:6d:50:4a:a6:55:61:72:73:00:4c:4b:fa:
03:f4:9f:a6:1a:b9:20:8c:04:81:f6:79:12:53:db:
60:e4:80:95:96:57:25:d4:a2:fb:2e:aa:30:8a:34:
86:9e:3d:00:81:b4:ee:7a:39:1d:38:5a:f1:7c:40:
89:54:1f:aa:06:20:67:2c:e5:c1:ef:d4:d4:24:84:
30:be:87:18:e0:53:b5:d4:e8:07:76:81:ea:3e:64:
07:11:36:8c:64:28:c5:1b:46:e2:8a:c6:02:9a:a9:
8f:3d:d1:fe:c6:00:42:e3:d1:37:df:1d:92:97:bf:
82:1e:93:d7:81:55:1c:97:3c:dd:7a:68:53:57:84:
49:9d:05:94:7f:08:b8:6d:65:a6:05:b5:63:50:fb:
44:75:17:6c:cc:a4:fe:98:df:ec:e9:d3:5c:37:3a:
82:e6:56:0e:cc:72:92:02:54:67:b4:31:d7:7a:14:
d2:5c:fc:ce:24:33:82:b8:78:8f:8a:c2:62:df:e5:
48:d9:82:8d:2f:d6:42:4f:b9:f1:62:88:f6:b7:4a:
21:6b:bd:6d:f0:0f:e3:aa:67:38:ee:fe:c8:6a:49:
01:23:cd:de:e3:7e:37:6f:ea:59:c5:b7:fe:0f:18:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EA:FF:ED:CD:E3:3F:D0:9C:1B:37:01:A5:5F:A9:1D:77:54:EB:B2
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/A93EFF167E8B11ECB9A60D74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.168.0/24
223.29.224.0/23
Signature Algorithm: sha256WithRSAEncryption
22:e3:ff:0b:b0:88:ea:ae:1c:b2:fb:7a:27:51:85:5f:0e:44:
28:56:ec:24:3c:72:de:3b:30:4d:02:7b:fe:de:a4:89:09:b9:
7f:8e:4b:6e:10:00:72:fa:a1:76:fc:f1:5d:3c:91:0c:51:bc:
1b:98:c8:1d:c8:5d:3d:c3:d2:43:58:f0:e1:e0:7d:de:b7:8f:
bf:23:d1:9b:2d:69:3c:d8:d1:cf:89:84:24:13:f7:b3:e9:c8:
6f:91:15:80:08:6f:e8:ea:67:a3:1b:c1:6c:84:6c:8c:0d:89:
66:c1:0c:18:eb:f4:83:64:05:3f:aa:aa:78:13:f5:de:13:ed:
de:f9:63:ae:ea:91:90:22:18:4d:ff:eb:12:d1:04:06:69:c1:
f7:27:51:15:7c:cd:79:02:02:0f:cf:c9:90:84:67:e4:71:12:
16:c0:1d:dc:d1:6e:11:94:cc:fa:62:7d:14:e1:de:f9:37:15:
8b:e6:9e:f8:f0:e6:a1:58:78:55:de:e4:03:72:7b:52:f3:34:
63:24:3f:2d:4e:ff:02:76:bc:86:e2:a6:1e:b6:28:f7:3c:78:
da:df:ef:0d:0e:a0:ff:d7:d0:1b:69:b7:a0:46:aa:c6:09:8c:
db:b9:36:1c:c7:e8:a4:5a:a8:50:ce:6c:e4:92:bd:82:95:10:
83:f1:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org