Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/55465F06B2F811EDAD7E7080C4F9AE02.roa
File: 55465F06B2F811EDAD7E7080C4F9AE02.roa (raw, json)
Hash identifier: 8OcH2ChV+hxaM7TXOUT5+ypS50KAIcez/f/grucHr0g=
Subject key identifier: 4E:A3:7B:B9:92:CA:B6:3E:4E:AD:4D:E1:9C:0F:F9:E8:00:45:7A:DB
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 05B2
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/55465F06B2F811EDAD7E7080C4F9AE02.roa
Signing time: Wed 22 Feb 2023 21:50:27 +0000
ROA not before: Wed 22 Feb 2023 21:50:27 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 834
IP address blocks: 202.139.224.0/20 maxlen: 24
202.139.240.0/20 maxlen: 24
202.148.128.0/20 maxlen: 24
202.148.144.0/20 maxlen: 24
203.147.128.0/21 maxlen: 24
203.147.144.0/21 maxlen: 21
203.147.152.0/21 maxlen: 24
203.147.160.0/20 maxlen: 20
203.147.176.0/20 maxlen: 20
203.147.192.0/20 maxlen: 20
203.147.208.0/20 maxlen: 24
203.147.224.0/20 maxlen: 20
203.147.240.0/20 maxlen: 20
210.247.128.0/19 maxlen: 19
210.247.160.0/19 maxlen: 19
210.247.192.0/21 maxlen: 21
210.247.200.0/21 maxlen: 21
210.247.208.0/21 maxlen: 21
210.247.216.0/21 maxlen: 21
210.247.224.0/21 maxlen: 24
210.247.232.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1458 (0x5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Feb 22 21:50:27 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63f68e23-9950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:5c:50:c4:43:21:1c:32:2a:58:1c:cd:88:
01:9c:1e:31:c8:29:77:79:a9:a0:84:8c:eb:42:58:
44:d6:f9:8b:25:53:71:00:5f:d8:a7:da:bc:a2:c2:
cc:91:22:ab:70:0a:56:2c:44:67:2c:6e:4a:d1:12:
b0:05:2b:85:1a:a2:40:53:87:cf:e1:87:e4:15:10:
96:ee:ed:bf:cf:81:7f:17:44:53:ee:9f:cf:7d:2f:
03:a1:86:40:88:2c:5e:9d:95:ce:33:b9:51:2a:dc:
4d:78:ed:6b:9f:55:d8:22:8d:7a:3f:a7:dd:a5:f7:
76:5b:ab:62:db:13:94:5f:9b:1f:67:df:bf:90:ce:
79:0f:b2:9d:ca:3b:41:27:fb:4d:01:09:31:77:d9:
8b:16:3c:71:bc:3d:4e:8f:7b:85:db:8b:cd:91:10:
81:e5:71:6a:5c:47:bc:b3:0f:ec:4a:87:a9:e2:59:
f5:a1:7d:d2:2b:23:62:cc:74:be:d9:cb:e4:d7:a5:
bc:4d:9a:21:c8:45:ee:b8:b5:12:b0:11:ef:3a:90:
60:da:5e:85:78:76:ec:4b:4c:de:77:f6:eb:9a:28:
fa:bc:65:93:59:47:d4:5c:99:e5:8a:8e:cc:6d:25:
74:1e:69:21:ef:68:cf:66:54:4a:0a:b7:52:fe:7c:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A3:7B:B9:92:CA:B6:3E:4E:AD:4D:E1:9C:0F:F9:E8:00:45:7A:DB
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/55465F06B2F811EDAD7E7080C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.224.0/19
202.148.128.0/19
203.147.128.0/21
203.147.144.0-203.147.255.255
210.247.128.0-210.247.239.255
Signature Algorithm: sha256WithRSAEncryption
67:9e:29:a5:68:3d:80:df:5f:45:9a:00:46:9a:eb:4c:e7:c1:
e8:1f:6c:8a:32:96:83:eb:0f:13:b3:3d:ec:b1:08:6c:f4:a0:
80:b3:bf:6e:36:37:23:eb:d9:71:f3:d8:cd:de:74:5d:52:6a:
5d:9c:11:27:11:87:b3:3c:5e:2d:63:37:c9:9b:3c:92:34:9b:
84:96:af:b8:c9:3c:6d:7a:b5:74:f9:e1:82:03:de:d1:b7:2d:
58:a9:54:53:9d:3e:88:e6:2d:cf:63:e1:32:82:c1:51:1d:c7:
9b:24:03:9a:18:a7:60:85:0a:ac:43:b6:94:45:61:57:90:58:
07:f9:34:94:ee:69:f0:da:d3:1c:75:e5:99:f5:d1:a7:37:68:
82:91:6f:8e:25:d1:81:78:68:56:ba:97:96:e2:3b:3c:c0:58:
da:21:6a:8e:c7:7c:13:e8:2e:aa:3c:54:73:d1:90:d9:17:75:
92:24:b2:61:80:ef:9a:ad:f0:c2:93:34:57:12:c2:dc:de:2f:
78:cc:4e:95:10:70:6d:63:4e:a2:fc:33:59:36:48:fc:db:2c:
eb:95:7d:e3:c8:48:13:ec:5a:51:3e:61:97:7b:d8:dd:d8:ff:
c9:37:af:18:f1:27:f2:79:b1:27:23:bc:e9:81:79:bf:89:ac:
b2:54:01:c2
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I3QUIxMTAvBgNVBAUTKDNERTlEM0RGRjZFMDQ4RkQ5MDgxNDY1MDJFNEYwOEU0
NTZGM0Q5QkMwHhcNMjMwMjIyMjE1MDI3WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2Y2OGUyMy05OTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1cJcUMRDIRwyKlgczYgBnB4xyCl3eamghIzrQlhE1vmLJVNxAF/Yp9q8osLM
kSKrcApWLERnLG5K0RKwBSuFGqJAU4fP4YfkFRCW7u2/z4F/F0RT7p/PfS8DoYZA
iCxenZXOM7lRKtxNeO1rn1XYIo16P6fdpfd2W6ti2xOUX5sfZ9+/kM55D7KdyjtB
J/tNAQkxd9mLFjxxvD1Oj3uF24vNkRCB5XFqXEe8sw/sSoep4ln1oX3SKyNizHS+
2cvk16W8TZohyEXuuLUSsBHvOpBg2l6FeHbsS0zed/brmij6vGWTWUfUXJnlio7M
bSV0Hmkh72jPZlRKCrdS/ny97wIDAQABo4ICvDCCArgwHQYDVR0OBBYEFE6je7mS
yrY+Tq1N4ZwP+egARXrbMB8GA1UdIwQYMBaAFD3p09/24Ej9kIFGUC5PCORW89m8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjdBQi81Njc4NjU2ODQw
MDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQMlFnVVpRTGs4STVGYnoy
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BlblQzX2JnU1AyUWdVWlFMazhJNUZiejJidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0I3QUIvNTY3ODY1Njg0MDA5MTFFQkEzNzQyMjVCQzRGOUFFMDIvNTU0NjVGMDZC
MkY4MTFFREFEN0U3MDgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E
NzA1MDMEAgABMC0DBAXKi+ADBAXKlIADBAPLk4AwCwMEBMuTkAMDAsuQMAwDBAfS
94ADBATS9+AwDQYJKoZIhvcNAQELBQADggEBAGeeKaVoPYDfX0WaAEaa60znwegf
bIoyloPrDxOzPeyxCGz0oICzv242NyPr2XHz2M3edF1Sal2cEScRh7M8Xi1jN8mb
PJI0m4SWr7jJPG16tXT54YID3tG3LVipVFOdPojmLc9j4TKCwVEdx5skA5oYp2CF
CqxDtpRFYVeQWAf5NJTuafDa0xx15Zn10ac3aIKRb44l0YF4aFa6l5biOzzAWNoh
ao7HfBPoLqo8VHPRkNkXdZIksmGA75qt8MKTNFcSwtzeL3jMTpUQcG1jTqL8M1k2
SPzbLOuVfePISBPsWlE+YZd72N3Y/8k3rxjxJ/J5sScjvOmBeb+JrLJUAcI=
-----END CERTIFICATE-----
Generated at Thu May 15 09:05:43 2025 by rpki-client