Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/939F0E5C4BF711EBA8352581C4F9AE02.roa
File: 939F0E5C4BF711EBA8352581C4F9AE02.roa (raw, json)
Hash identifier: VkwWWSpL32kYn5Mvr+gpSKTO4VCBwvIR11VeimwnsGM=
Subject key identifier: 19:C5:70:36:C6:A6:00:A8:F4:20:5E:50:3D:52:6A:FA:BA:3A:5B:A8
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 0573
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/939F0E5C4BF711EBA8352581C4F9AE02.roa
Signing time: Sun 09 Apr 2023 01:01:25 +0000
ROA not before: Sun 09 Apr 2023 01:01:25 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 137508
IP address blocks: 43.255.188.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395 (0x573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Validity
Not Before: Apr 9 01:01:25 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64320e64-a9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:20:db:87:56:ab:97:2a:be:f0:55:20:a4:
7b:c9:a6:ac:00:c9:a4:26:e8:1d:c8:cd:c5:1b:d4:
25:00:be:fa:42:87:83:ac:48:af:97:e7:c8:bc:7f:
c2:06:f3:32:59:44:ab:32:4a:0f:7a:67:4a:74:0a:
d4:b6:2d:13:2f:11:c9:f2:b0:a6:a5:44:e4:96:3a:
35:25:37:b7:97:99:6e:ed:34:af:13:f5:6d:98:86:
94:7b:9c:79:e2:b8:51:b2:8c:b7:cb:9a:b6:15:ae:
57:78:d2:c7:be:42:34:00:27:88:4d:ca:ed:06:75:
2c:1d:72:41:aa:6d:75:67:3c:49:83:a2:05:a5:f6:
f6:2c:e3:eb:25:f6:0a:88:00:6b:d3:29:31:a7:34:
33:9a:8b:50:ea:cb:8f:12:f1:15:47:9e:d5:df:55:
e8:55:2c:c7:01:1d:7e:53:9b:b6:86:7d:d3:3a:6e:
95:38:f6:e9:29:05:e1:ca:29:29:12:e2:89:7e:e9:
b0:8f:1a:2d:43:b0:b3:f0:7c:6b:30:9c:f9:ba:21:
f2:1c:3c:fc:5e:ec:3f:0f:8e:c7:41:86:20:89:bd:
3f:e8:1f:bf:12:57:2f:25:aa:40:e8:2a:47:76:f1:
6b:b7:95:15:ed:36:8d:33:f1:02:28:45:35:4f:d7:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:70:36:C6:A6:00:A8:F4:20:5E:50:3D:52:6A:FA:BA:3A:5B:A8
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/939F0E5C4BF711EBA8352581C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.188.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:a0:f2:b5:32:e4:20:88:f9:a7:0c:2e:22:34:d5:2c:e0:3f:
6c:76:ab:e1:e1:fc:03:49:f7:ec:35:6e:ef:0f:a3:71:66:8f:
a9:bd:4f:2a:09:af:5e:64:d4:20:8d:2b:a0:e2:20:53:aa:a6:
05:d6:09:b9:74:fc:cd:6a:7d:09:ed:64:de:e3:d1:ef:c1:bf:
43:42:37:92:f6:21:2b:13:de:96:db:63:a4:0c:0d:f1:c9:77:
9a:ca:b4:c0:66:df:c3:dd:f4:2b:0d:73:1e:5c:4c:17:35:e0:
32:cf:cb:7b:71:24:9c:47:2f:6b:d6:e5:05:c8:6f:7d:6b:bf:
85:ab:63:e8:26:77:7c:4f:2e:0c:8c:e4:26:01:d0:45:0b:8f:
61:46:59:ba:c6:88:dc:86:d4:b8:94:b0:70:40:e5:bd:f8:a9:
68:ce:11:f5:56:46:d4:c3:19:23:cf:87:ac:ed:c3:af:9a:e4:
1b:54:95:af:6b:0a:0b:40:1c:cd:8c:f7:6f:9b:57:f7:10:a8:
23:4b:bc:f8:7a:0e:80:60:5f:55:1b:27:69:3e:e6:cc:c9:a6:
3d:dd:34:06:c1:97:fe:6d:a6:e1:ea:b1:fa:20:1c:36:1f:c0:
ec:9b:db:68:09:50:07:9f:c6:74:b1:e9:21:6a:90:71:a8:dc:
81:6f:1a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org