Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/E4789CB03A6D11ED8266115DC4F9AE02.roa
File: E4789CB03A6D11ED8266115DC4F9AE02.roa (raw, json)
Hash identifier: a2DR+VyaqAVOanu6rDFQLng8mgTka8UKgDfa52KsdIQ=
Subject key identifier: D2:16:82:0A:04:18:56:20:D1:78:E1:D3:C0:82:4D:18:79:DF:F4:C3
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 08AC
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/E4789CB03A6D11ED8266115DC4F9AE02.roa
Signing time: Thu 22 Sep 2022 11:58:38 +0000
ROA not before: Thu 22 Sep 2022 11:58:38 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 210654
IP address blocks: 113.203.222.0/24 maxlen: 24
180.178.158.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Sep 22 11:58:38 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=632c4dee-199f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:a2:54:1f:9f:9f:a6:fa:35:48:8f:e5:c0:
d3:21:3b:dc:5d:48:e7:78:d7:dc:3a:26:73:78:a0:
78:56:4f:63:6a:52:55:4d:cc:b6:14:11:6a:b4:90:
67:aa:b8:e2:fa:2a:95:d9:35:bc:cb:93:c1:4e:39:
82:d5:7b:4f:27:cd:03:55:5a:95:50:57:78:ec:5d:
a4:30:83:1f:fc:bd:1e:c9:40:12:d0:67:14:10:ca:
67:c7:e0:7a:5f:33:9e:3c:39:2f:98:07:ad:77:d8:
cc:9b:fd:8e:2c:a9:04:b2:4b:56:fe:d9:c5:29:00:
a1:e2:0f:1f:32:dc:56:66:9c:c9:1b:a8:b6:12:76:
bc:48:0c:e0:31:b0:dc:e1:f5:11:66:02:e6:01:69:
ac:e5:99:96:f8:7f:83:19:a2:24:5d:c5:79:ae:3c:
70:c9:0f:cd:3c:e1:6f:3b:20:79:0f:ec:97:7f:7a:
fb:9e:d4:5c:0f:70:b9:39:5d:4c:ef:dd:e2:a7:36:
df:5f:c8:89:06:06:5b:51:14:e3:31:2a:c8:99:2e:
4b:c0:5e:a3:2a:a4:db:9a:9c:5d:5c:09:5d:85:08:
22:ae:ef:ba:09:a2:b4:38:5b:eb:32:f5:51:12:a6:
35:69:fd:2a:68:ab:6c:c2:a2:a0:37:d3:65:b8:d8:
7c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:82:0A:04:18:56:20:D1:78:E1:D3:C0:82:4D:18:79:DF:F4:C3
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/E4789CB03A6D11ED8266115DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.222.0/24
180.178.158.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c2:b3:84:47:98:49:a0:b0:25:1f:5a:33:41:56:d1:7a:e3:
bd:55:a4:16:6e:a6:37:d3:d2:b7:65:6e:a6:b5:91:09:e1:86:
e4:8e:39:3e:3d:fb:df:35:84:bc:54:fa:6a:69:82:19:70:9f:
d7:e2:62:e6:b5:a6:1f:ae:f9:a0:1c:ef:c7:07:0e:4d:cb:e0:
4a:d1:42:f3:25:c6:29:01:c0:aa:e5:c6:1f:4c:0a:7f:69:bc:
98:cc:92:dd:7f:4a:ea:7a:36:d5:ea:e6:35:be:b0:35:02:96:
51:c1:1c:95:87:03:8e:aa:e9:2c:9f:67:ed:4b:ea:dc:19:60:
ae:db:8b:8b:cc:37:e3:a8:ae:5b:57:ac:f7:61:00:79:24:8a:
6b:59:f4:9a:fc:7c:8f:44:f5:71:54:9e:87:d4:a3:7a:d8:de:
84:95:dd:22:cc:9f:5e:22:49:6b:b3:f6:2b:8f:1f:9c:a2:2b:
87:70:96:f6:08:19:55:75:e3:94:a5:e7:5e:4a:73:59:e4:ef:
b1:55:e4:06:8f:f9:2f:a0:92:c3:6e:67:34:2f:e2:24:bc:56:
10:9f:e3:0c:48:e3:a9:81:7f:ce:bc:5b:a1:4a:48:14:93:7e:
7d:6a:55:4c:3f:94:95:46:93:bd:54:22:41:4a:27:dd:9d:53:
c7:3b:6d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org