Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/C3B860C2DF6411EDB132A551C4F9AE02.roa
File: C3B860C2DF6411EDB132A551C4F9AE02.roa (raw, json)
Hash identifier: +Uy6weH+RnJYPy77kcc5sSC1TVrGOvrU6n7Y24LcaZk=
Subject key identifier: 4F:F2:F5:A9:32:35:97:B6:A5:DB:9D:38:7F:30:6A:2A:F1:63:1B:2A
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0A34
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/C3B860C2DF6411EDB132A551C4F9AE02.roa
Signing time: Thu 20 Apr 2023 10:18:59 +0000
ROA not before: Thu 20 Apr 2023 10:18:59 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 136969
IP address blocks: 223.29.228.0/22 maxlen: 22
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2612 (0xa34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Apr 20 10:18:59 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64411193-9846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:33:08:a4:68:77:32:1b:be:fa:22:9e:a4:
b9:26:29:11:9b:b5:25:8c:fe:8e:f1:af:61:ab:26:
84:77:38:15:86:2c:c5:1a:90:3e:34:c1:2f:3b:c0:
e0:07:5f:4f:d2:fb:bc:81:f3:5f:14:39:ba:83:01:
5f:05:7f:22:28:07:ff:49:4c:e0:da:91:6b:45:a7:
ed:2e:40:6d:f5:a4:a3:78:fe:e4:9c:6b:15:6b:55:
aa:d2:5f:3d:c2:79:f3:63:2b:aa:3c:60:02:8a:e4:
3e:7f:62:8b:87:9f:4e:68:4f:01:cb:89:ce:b6:2d:
2c:9b:f9:11:2d:82:eb:06:df:f7:90:bf:c1:13:d0:
3c:37:14:1c:bb:f7:c1:82:33:1f:57:9c:36:5b:47:
d6:57:69:96:af:f3:5e:4c:cf:c2:e0:9b:3a:53:b5:
8c:e1:1a:6c:be:46:a0:76:3b:d2:d4:74:85:0f:5a:
c7:21:fa:6a:a3:cd:2c:09:00:70:d7:5a:60:21:32:
f9:d3:f7:80:af:78:17:88:e9:5f:94:72:14:d8:de:
df:02:a8:ca:31:a1:a5:3d:6a:4f:82:0b:a1:57:a4:
f6:84:0b:6b:b8:e3:0d:0a:06:f9:f7:a7:86:22:4f:
7b:b0:3b:ff:63:cd:89:3d:ae:64:9a:cf:4d:96:7d:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F2:F5:A9:32:35:97:B6:A5:DB:9D:38:7F:30:6A:2A:F1:63:1B:2A
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/C3B860C2DF6411EDB132A551C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.228.0/22
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3f:53:7c:3c:8c:35:15:ad:88:9f:af:b5:fb:f5:67:c3:4d:
83:56:f9:da:6e:79:cd:f4:0b:b0:be:a3:91:33:c9:63:ba:f8:
3f:f8:67:dd:b0:81:a6:8d:f7:52:d9:2b:32:74:e0:d2:3e:7f:
25:1f:e3:f7:0c:38:63:0a:a9:fd:16:57:1d:81:36:6c:b7:e7:
21:6c:3a:ac:3d:44:eb:cf:57:ad:22:73:65:40:f1:5d:ae:d9:
20:8f:55:28:c2:96:01:d8:cf:26:d9:f5:ae:22:52:39:71:cf:
e0:41:c6:5c:64:81:ca:1a:8c:58:78:cb:65:9f:39:d8:8b:ce:
10:3f:ba:5d:c7:38:a7:ce:f3:b1:fd:09:3e:35:0a:dd:a6:ca:
76:ae:19:0a:41:6d:8c:af:c6:cd:46:cf:24:75:2b:1c:ee:d8:
61:91:11:ab:ec:a8:f2:2b:b0:60:43:92:46:1f:93:ab:b1:14:
fd:6e:86:31:9c:7b:b4:b9:09:5d:88:90:71:85:5e:48:e7:41:
68:84:0d:59:44:3b:bf:7a:b7:f8:6b:79:0f:ab:65:f7:e0:d8:
34:8e:7d:36:0e:7f:cc:df:06:f5:bc:7b:27:45:37:dc:a2:85:
73:5f:41:81:ef:10:d0:97:b2:56:d9:f7:34:1b:d7:8f:13:45:
01:42:05:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org