Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/B49AD84C2E0A11ED8128767CC4F9AE02.roa
File: B49AD84C2E0A11ED8128767CC4F9AE02.roa (raw, json)
Hash identifier: gw3yLUMUtdHtAGWP9llBw0hw4DxZ3fEuzgQZSYBNuHc=
Subject key identifier: 56:D7:2D:D9:05:79:60:DD:6F:A7:73:1E:E1:58:0C:3E:8A:EA:EB:F1
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 086F
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/B49AD84C2E0A11ED8128767CC4F9AE02.roa
Signing time: Tue 06 Sep 2022 17:38:23 +0000
ROA not before: Tue 06 Sep 2022 17:38:23 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 206150
IP address blocks: 113.203.230.0/24 maxlen: 24
113.203.247.0/24 maxlen: 24
180.178.145.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Sep 6 17:38:23 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6317858f-dab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:d0:52:06:23:a2:8b:b2:3e:ca:b6:41:22:
c5:9e:52:20:4b:94:9f:7c:84:f1:18:0e:be:00:ca:
2b:26:7d:94:98:9b:00:d2:58:09:84:bf:26:83:01:
a5:11:6f:6e:63:ee:6f:d8:cf:23:e6:bc:ff:46:92:
25:97:3a:b8:ef:9d:c7:70:da:6b:57:6c:00:28:5a:
ea:d5:ac:40:a1:37:c6:11:c2:3a:4f:74:a3:e7:4e:
93:ed:40:ac:6e:cf:f9:81:ea:12:8d:0a:71:66:7f:
4f:bf:b5:4c:50:9a:11:c9:9f:cb:7f:81:4c:ac:2b:
47:bf:a2:36:4b:70:26:da:88:ea:09:a6:14:63:3d:
c8:59:87:df:f2:9d:3a:d5:a4:5e:ff:31:f2:6c:65:
2f:a9:4a:af:a4:46:4c:cd:e8:97:e7:fd:f6:11:89:
7f:a1:21:ac:a1:c5:57:b8:97:44:c0:8c:da:5c:d7:
30:e5:90:19:f5:72:61:0c:75:8c:6f:7e:b6:02:5f:
64:ac:c3:13:b6:47:8c:37:7a:ff:00:7e:e2:ff:48:
d8:6d:59:40:69:f4:8c:0c:2e:9c:bd:7c:e9:4a:01:
41:2f:bf:0f:f7:de:53:66:35:0d:be:2a:ea:66:83:
28:6a:80:a9:c7:14:72:b2:b3:8a:af:82:58:1d:79:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D7:2D:D9:05:79:60:DD:6F:A7:73:1E:E1:58:0C:3E:8A:EA:EB:F1
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/B49AD84C2E0A11ED8128767CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.230.0/24
113.203.247.0/24
180.178.145.0/24
180.178.176.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e0:8f:0a:c2:77:b0:e7:7c:98:6e:19:9e:35:e5:32:07:87:
af:a0:15:92:5e:d0:a4:01:30:91:6c:2a:63:a8:5f:cc:83:0c:
1a:fd:e5:60:da:31:db:32:14:ce:65:c6:90:8f:fc:84:d0:c8:
93:8f:75:eb:6f:b4:e4:55:3f:1b:66:9f:ac:95:8c:de:88:f3:
f9:19:2b:b6:73:ed:ad:64:98:37:68:ec:e0:f3:dc:60:e4:50:
92:32:cb:cb:45:19:3b:96:8d:88:44:b0:13:6e:bb:ec:10:80:
d9:72:7e:4d:cf:3f:d1:4d:8d:2e:01:7e:0d:a4:09:78:50:51:
e8:15:94:c9:ed:30:a4:7e:49:ba:f3:95:df:aa:af:87:6a:f3:
de:dd:b3:e7:c1:cf:28:8a:f3:9b:18:69:aa:10:4b:b4:9a:ca:
cf:d9:71:b6:86:d9:c6:6e:80:49:81:32:e3:36:83:19:26:44:
e7:7a:7b:e8:39:5b:dd:4a:36:76:9d:b2:99:3d:13:c7:32:40:
08:e9:85:0e:f3:ac:e3:db:bf:a5:81:aa:f1:f8:ee:42:bd:f5:
2e:73:ca:d5:81:f0:76:70:20:f6:16:aa:ab:f7:01:65:cb:80:
19:4d:af:d5:5f:65:5c:11:72:4c:40:7c:68:2c:c4:42:a5:91:
ff:8e:ec:e7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB
MURFRjcxOTAwHhcNMjIwOTA2MTczODIzWhcNMjIxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzE3ODU4Zi1kYWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4jQUgYjoouyPsq2QSLFnlIgS5SffITxGA6+AMorJn2UmJsA0lgJhL8mgwGl
EW9uY+5v2M8j5rz/RpIllzq4753HcNprV2wAKFrq1axAoTfGEcI6T3Sj506T7UCs
bs/5geoSjQpxZn9Pv7VMUJoRyZ/Lf4FMrCtHv6I2S3Am2ojqCaYUYz3IWYff8p06
1aRe/zHybGUvqUqvpEZMzeiX5/32EYl/oSGsocVXuJdEwIzaXNcw5ZAZ9XJhDHWM
b362Al9krMMTtkeMN3r/AH7i/0jYbVlAafSMDC6cvXzpSgFBL78P995TZjUNvirq
ZoMoaoCpxxRysrOKr4JYHXlqPwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFFbXLdkF
eWDdb6dzHuFYDD6K6uvxMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw
NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjY5RTcvNDZBQUQ2QjI5MDQwMTFFQUE2ODhCRTQ1QzRGOUFFMDIvQjQ5QUQ4NEMy
RTBBMTFFRDgxMjg3NjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBABxy+YDBABxy/cDBAC0spEDBAC0srAwDQYJKoZIhvcNAQEL
BQADggEBAB/gjwrCd7DnfJhuGZ415TIHh6+gFZJe0KQBMJFsKmOoX8yDDBr95WDa
MdsyFM5lxpCP/ITQyJOPdetvtORVPxtmn6yVjN6I8/kZK7Zz7a1kmDdo7ODz3GDk
UJIyy8tFGTuWjYhEsBNuu+wQgNlyfk3PP9FNjS4Bfg2kCXhQUegVlMntMKR+Sbrz
ld+qr4dq897ds+fBzyiK85sYaaoQS7Says/ZcbaG2cZugEmBMuM2gxkmROd6e+g5
W91KNnadspk9E8cyQAjphQ7zrOPbv6WBqvH47kK99S5zytWB8HZwIPYWqqv3AWXL
gBlNr9VfZVwRckxAfGgsxEKlkf+O7Oc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org