Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/3045AC766ECB11EFA91B0884C4F9AE02.roa
File: 3045AC766ECB11EFA91B0884C4F9AE02.roa (raw, json)
Hash identifier: L6oHTZlZD915gJVDu2CooRPRRYDAik9tn78RpS9QF50=
Subject key identifier: 37:60:07:17:43:0B:04:62:71:D6:97:E4:EB:C1:B7:6F:2F:96:7A:E3
Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial: 07A1
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/3045AC766ECB11EFA91B0884C4F9AE02.roa
Signing time: Fri 04 Oct 2024 21:30:47 +0000
ROA not before: Fri 04 Oct 2024 21:30:47 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 142032
IP address blocks: 111.92.240.0/22 maxlen: 24
114.134.188.0/23 maxlen: 23
114.134.188.0/24 maxlen: 24
114.134.189.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1953 (0x7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Validity
Not Before: Oct 4 21:30:47 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67005e87-1450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:29:1e:7a:32:2d:f0:52:66:ce:04:2e:a5:
40:b0:03:b5:45:73:ef:1d:e1:25:a1:5c:ff:0e:db:
4c:2f:cc:ba:a0:33:71:06:f7:5d:b8:f9:ff:7e:06:
ff:64:8c:08:4d:37:f8:d6:d1:ec:45:f7:79:ec:2b:
05:ab:63:56:67:1a:a3:57:f4:ef:da:94:e3:e4:c6:
88:72:cf:91:ec:cc:f3:c6:05:df:19:37:d3:f8:f3:
df:a5:2e:b8:53:8d:7a:86:01:7d:28:c7:69:34:eb:
ed:90:86:c5:52:41:8d:67:53:8d:9e:b3:8d:97:e7:
65:13:6f:be:c0:3e:02:05:36:e7:d7:e7:00:41:a4:
09:9d:80:8d:57:df:bb:22:43:3f:7e:8e:6f:e1:b0:
2b:fb:9e:23:f2:1f:28:5c:91:f6:e4:45:c7:21:86:
19:c4:a9:21:d8:4a:54:a0:de:fe:f4:44:d8:e0:39:
a7:9d:33:9b:1b:e1:5d:30:52:87:ca:cf:fe:33:51:
89:90:8d:31:cb:1f:50:01:14:ac:3a:9a:c2:0a:34:
c0:e6:2c:df:5a:b5:77:5d:83:6f:5e:16:ac:b2:a9:
35:8d:6f:a8:45:7f:90:95:b9:c5:8d:79:18:fa:41:
1f:53:fb:27:0c:ed:e3:3c:af:8d:43:29:20:13:11:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:60:07:17:43:0B:04:62:71:D6:97:E4:EB:C1:B7:6F:2F:96:7A:E3
X509v3 Authority Key Identifier:
keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/3045AC766ECB11EFA91B0884C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.92.240.0/22
114.134.188.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:6a:65:e9:74:67:ea:80:d9:4d:8b:ff:50:9d:78:6b:58:1d:
09:b4:0d:c0:5d:5a:40:97:c5:80:b4:06:a3:32:47:c7:ae:c3:
17:45:17:9f:92:c1:88:33:f4:71:5d:76:7b:fe:39:91:83:32:
af:85:6e:84:2d:54:f3:c4:87:5c:71:32:ec:b5:e1:ce:a4:43:
10:7d:c0:ca:df:ba:53:3d:bf:c5:10:6b:38:72:39:13:e5:80:
09:7e:e1:ac:25:2a:93:24:dc:54:32:aa:45:30:04:4b:3d:5c:
53:2d:0f:1b:9b:aa:43:38:dd:0d:09:dc:ae:4c:48:12:7e:43:
80:e0:d3:21:85:c9:16:71:9a:7c:93:dd:08:0b:8f:6d:e5:e5:
8f:47:ab:47:b8:fc:8e:2a:fa:60:cf:05:9e:17:21:2b:30:82:
d8:ec:e2:35:41:41:28:86:a2:98:cb:2d:ad:bd:65:ed:68:46:
1c:ed:d9:a6:e3:cf:b2:91:f0:8c:81:45:12:68:38:a5:77:6d:
4d:c0:f8:ae:ee:7e:cd:39:dd:b3:12:0f:8c:00:d9:c2:3a:b7:
a2:dc:6b:33:4a:62:18:6c:b5:89:db:c4:00:1a:82:d4:03:1a:
e4:e1:d1:e0:42:3c:d9:3a:4c:2c:a4:78:a1:47:7c:6f:9c:cd:
51:4e:58:eb
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3
MzVGNEU0NzAwHhcNMjQxMDA0MjEzMDQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzAwNWU4Ny0xNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/YpHnoyLfBSZs4ELqVAsAO1RXPvHeEloVz/DttML8y6oDNxBvdduPn/fgb/
ZIwITTf41tHsRfd57CsFq2NWZxqjV/Tv2pTj5MaIcs+R7MzzxgXfGTfT+PPfpS64
U416hgF9KMdpNOvtkIbFUkGNZ1ONnrONl+dlE2++wD4CBTbn1+cAQaQJnYCNV9+7
IkM/fo5v4bAr+54j8h8oXJH25EXHIYYZxKkh2EpUoN7+9ETY4DmnnTObG+FdMFKH
ys/+M1GJkI0xyx9QARSsOprCCjTA5izfWrV3XYNvXhassqk1jW+oRX+QlbnFjXkY
+kEfU/snDO3jPK+NQykgExHB/wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDdgBxdD
CwRicdaX5OvBt28vlnrjMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB
MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzE5MEYvQjNDQTc2QzBGQTMxMTFFQUJEMjQ5RTdBQzRGOUFFMDIvMzA0NUFDNzY2
RUNCMTFFRkE5MUIwODg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJvXPADBAFyhrwwDQYJKoZIhvcNAQELBQADggEBAMFqZel0
Z+qA2U2L/1CdeGtYHQm0DcBdWkCXxYC0BqMyR8euwxdFF5+SwYgz9HFddnv+OZGD
Mq+FboQtVPPEh1xxMuy14c6kQxB9wMrfulM9v8UQazhyORPlgAl+4awlKpMk3FQy
qkUwBEs9XFMtDxubqkM43Q0J3K5MSBJ+Q4Dg0yGFyRZxmnyT3QgLj23l5Y9Hq0e4
/I4q+mDPBZ4XISswgtjs4jVBQSiGopjLLa29Ze1oRhzt2abjz7KR8IyBRRJoOKV3
bU3A+K7ufs053bMSD4wA2cI6t6LcazNKYhhstYnbxAAagtQDGuTh0eBCPNk6TCyk
eKFHfG+czVFOWOs=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:15:54 2025 by rpki-client