Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/C4C0859EDF6411EDB132A551C4F9AE02.roa
File: C4C0859EDF6411EDB132A551C4F9AE02.roa (raw, json)
Hash identifier: 1dywp21oNCja5+Zm46oXWHNHJMwKmSYA+9v2Odd/LWA=
Subject key identifier: 9F:42:B2:8A:D1:90:50:2D:14:0F:A2:29:29:68:39:FE:1B:B2:BB:82
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0A35
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/C4C0859EDF6411EDB132A551C4F9AE02.roa
Signing time: Thu 20 Apr 2023 10:19:01 +0000
ROA not before: Thu 20 Apr 2023 10:19:01 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 142127
IP address blocks: 223.29.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Apr 20 10:19:01 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64411195-6a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:ef:ec:b0:3d:37:ba:fb:3e:9c:80:96:ed:
dd:ae:70:7c:3b:fa:58:a3:f1:33:e3:3f:d5:b0:cb:
dc:0c:3a:e9:0a:a2:a2:39:22:dc:b6:41:ca:19:6b:
90:06:20:66:3f:17:8f:53:50:9b:8d:7d:30:4c:b1:
bb:69:17:b7:e5:b4:d8:85:ed:b2:93:66:a3:8c:d8:
86:e6:7e:3c:fb:de:d7:89:8f:cc:c2:36:33:ed:1a:
72:3b:4c:89:c0:cb:69:35:fd:27:31:d7:11:9e:d9:
89:fd:89:ee:5c:0d:7b:41:29:61:48:ae:3c:1d:88:
67:e4:59:80:03:de:0a:87:07:1d:69:18:55:a0:c0:
6b:f0:32:04:3b:44:73:bc:df:73:ba:33:2b:34:c7:
c4:7c:bf:2b:e7:e6:a2:a8:7e:64:37:59:45:37:46:
e9:5f:08:e4:c8:7b:b2:de:df:3a:c0:2d:83:da:e6:
1f:b8:1c:fb:79:2e:24:8e:f9:b0:89:66:2e:49:f9:
08:48:98:ef:6f:d2:0f:19:b2:ef:af:fa:b5:e0:ba:
d5:25:91:dd:5d:d9:8f:19:96:2f:24:e7:52:c6:b3:
d6:d3:48:81:c5:7a:8f:aa:08:fd:ba:c5:81:58:0e:
bf:24:2d:b0:32:a9:fe:6b:1b:c5:40:4f:10:83:79:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:B2:8A:D1:90:50:2D:14:0F:A2:29:29:68:39:FE:1B:B2:BB:82
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/C4C0859EDF6411EDB132A551C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.224.0/24
Signature Algorithm: sha256WithRSAEncryption
59:61:b7:fa:62:3a:1b:89:23:a2:89:d1:db:10:7b:5c:a6:02:
a9:b0:6a:64:0e:ab:fc:f4:6f:50:67:c8:a6:8c:1c:1f:ad:9e:
45:4f:8e:07:f6:cc:69:5d:b2:23:d7:11:6e:bd:96:c3:2a:40:
84:4c:2f:40:05:ce:be:68:f7:f8:d8:4f:4a:4f:88:c7:ee:fa:
dd:61:79:bc:68:e2:17:6e:53:a3:ba:f4:de:34:0c:45:52:55:
d1:4a:62:ba:71:0b:68:43:1d:59:50:f2:8b:a9:8c:e5:11:13:
93:cd:06:63:ef:3d:b9:10:0f:49:25:38:d7:41:e4:52:e1:c9:
d1:9e:e3:ff:ce:31:e3:59:06:e2:fe:55:6b:f1:3c:33:76:fb:
b5:8d:b6:26:db:f2:87:a8:f2:be:8c:52:5b:48:38:7c:67:6f:
36:2a:86:df:75:ed:6a:8c:3e:47:71:4a:6e:03:5f:37:8e:cf:
1c:54:dd:af:64:8c:ab:85:9e:fb:ab:83:47:4f:0c:f5:f2:33:
bd:bf:84:c9:7c:7a:e7:bb:2d:cc:95:07:e0:31:32:48:03:43:
9f:ee:00:e9:f3:9a:d4:4a:7e:a6:e1:8f:8e:2c:93:3e:8e:72:
94:28:06:47:0a:32:00:1d:ce:31:fc:f2:9c:89:f9:e5:1b:ab:
f7:8b:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org