Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D1630D4C9BC411ECA4712247C4F9AE02.roa
File: D1630D4C9BC411ECA4712247C4F9AE02.roa (raw, json)
Hash identifier: Ih2safoswQXuGh40Va/J9+uy5u43XwAAdpLAvB7lvh0=
Subject key identifier: 9D:10:FA:BA:DB:30:13:8C:EA:01:01:AC:C4:EF:F2:94:0A:CE:EE:CA
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 069E
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D1630D4C9BC411ECA4712247C4F9AE02.roa
Signing time: Fri 04 Mar 2022 14:10:17 +0000
ROA not before: Fri 04 Mar 2022 14:10:17 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 140499
IP address blocks: 223.29.226.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1694 (0x69e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Mar 4 14:10:17 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=62221dc9-8c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:5a:ae:29:8c:48:22:a4:65:6c:d4:24:84:
8f:b5:e9:37:45:9f:61:78:4f:5c:cc:b0:fe:14:a8:
31:d4:a0:8b:02:69:1c:6f:e3:a8:e4:2b:eb:27:ff:
9e:75:a1:f5:9e:82:fd:39:87:33:d8:70:97:ba:e7:
cf:33:80:a0:50:b4:9c:1e:6a:43:3f:c6:37:57:1f:
68:8d:9b:93:8c:b1:c7:05:1a:d7:19:3e:46:df:10:
25:83:97:0b:23:36:ae:c1:a6:45:fc:fb:09:1c:c8:
07:ce:5c:2f:54:ae:be:61:5d:ac:7b:75:98:49:d9:
b6:9b:0f:1e:d6:a2:81:4c:5b:1f:8e:0e:3a:1b:22:
ae:f3:9d:1b:6a:09:98:0b:d9:2c:56:40:c2:4b:a1:
9c:6a:38:4a:c8:a0:08:29:66:a8:b2:23:c7:e5:29:
40:c6:34:01:fb:ec:86:2a:43:51:d7:84:ad:77:a9:
e6:dd:e7:19:e7:9c:c4:ec:0c:20:66:04:de:26:bc:
0b:ea:35:91:46:a2:94:f1:36:d3:b8:ac:b9:08:42:
26:0c:b5:8f:bc:65:2b:89:37:dc:d4:17:83:bb:ad:
a0:cd:68:cb:5e:3c:2a:63:14:ff:7e:9b:51:f0:15:
28:85:49:8b:6b:e2:8d:f0:95:34:53:f2:97:50:1d:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:FA:BA:DB:30:13:8C:EA:01:01:AC:C4:EF:F2:94:0A:CE:EE:CA
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D1630D4C9BC411ECA4712247C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.226.0/24
Signature Algorithm: sha256WithRSAEncryption
70:85:ab:b2:d9:51:35:8e:57:01:a3:a3:a2:65:18:60:44:85:
4e:30:72:2a:aa:8c:5b:a3:fc:07:3e:9c:21:31:13:59:1a:6b:
ae:03:4e:1f:bb:58:83:86:2d:44:ef:ac:45:0e:d2:37:1a:10:
a0:17:8f:30:d0:8b:c9:5c:28:84:69:71:90:b6:31:e7:ea:1a:
7c:be:86:c0:a7:80:ff:2f:39:7c:9e:71:cd:87:84:a1:eb:f8:
42:d6:44:d2:a2:00:eb:b8:b6:83:45:0a:fd:6f:5e:31:2c:cb:
a3:77:ba:32:8e:e1:9e:d6:fa:6e:3f:d0:18:55:41:44:c2:45:
09:d1:ed:08:4d:b9:6a:21:23:aa:5b:e4:90:01:f6:f9:e6:7d:
9f:90:99:a7:20:0c:24:fe:5c:e9:a9:3b:a4:6e:86:12:ea:54:
de:16:2a:e0:b3:ec:44:25:35:e7:c4:97:b2:e9:e4:69:5e:a3:
bc:2e:9d:6e:1f:fd:2b:af:62:91:07:f6:1f:df:19:2f:c0:5a:
9d:8a:93:e6:09:77:9c:96:db:4f:42:c5:8c:c9:63:63:2e:c2:
cc:cb:5e:c7:88:1c:77:38:32:93:6b:c5:87:28:e6:14:e5:4f:
7b:af:45:76:fe:28:90:1a:80:e6:6b:f6:c3:23:65:c7:56:a1:
dc:3b:43:92
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB
MURFRjcxOTAwHhcNMjIwMzA0MTQxMDE3WhcNMjIxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjIyMWRjOS04YzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1/1arimMSCKkZWzUJISPtek3RZ9heE9czLD+FKgx1KCLAmkcb+Oo5CvrJ/+e
daH1noL9OYcz2HCXuufPM4CgULScHmpDP8Y3Vx9ojZuTjLHHBRrXGT5G3xAlg5cL
IzauwaZF/PsJHMgHzlwvVK6+YV2se3WYSdm2mw8e1qKBTFsfjg46GyKu850bagmY
C9ksVkDCS6GcajhKyKAIKWaosiPH5SlAxjQB++yGKkNR14Std6nm3ecZ55zE7Awg
ZgTeJrwL6jWRRqKU8TbTuKy5CEImDLWPvGUriTfc1BeDu62gzWjLXjwqYxT/fptR
8BUohUmLa+KN8JU0U/KXUB2XdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ0Q+rrb
MBOM6gEBrMTv8pQKzu7KMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw
NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjY5RTcvNDZBQUQ2QjI5MDQwMTFFQUE2ODhCRTQ1QzRGOUFFMDIvRDE2MzBENEM5
QkM0MTFFQ0E0NzEyMjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADfHeIwDQYJKoZIhvcNAQELBQADggEBAHCFq7LZUTWOVwGj
o6JlGGBEhU4wciqqjFuj/Ac+nCExE1kaa64DTh+7WIOGLUTvrEUO0jcaEKAXjzDQ
i8lcKIRpcZC2MefqGny+hsCngP8vOXyecc2HhKHr+ELWRNKiAOu4toNFCv1vXjEs
y6N3ujKO4Z7W+m4/0BhVQUTCRQnR7QhNuWohI6pb5JAB9vnmfZ+QmacgDCT+XOmp
O6RuhhLqVN4WKuCz7EQlNefEl7Lp5Gleo7wunW4f/SuvYpEH9h/fGS/AWp2Kk+YJ
d5yW209CxYzJY2MuwszLXseIHHc4MpNrxYco5hTlT3uvRXb+KJAagOZr9sMjZcdW
odw7Q5I=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org