Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/9A871CAEF25711EF962CF20CC4F9AE02.roa
File: 9A871CAEF25711EF962CF20CC4F9AE02.roa (raw, json)
Hash identifier: pCmS6W115QDBPK9vFtopDhFZ8Mo85vMAaqxBTYUn930=
Subject key identifier: 0A:47:33:B5:AB:F0:5A:2F:BB:75:10:AA:99:4E:2A:9F:BE:AE:22:8E
Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial: 0184
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/9A871CAEF25711EF962CF20CC4F9AE02.roa
Signing time: Mon 24 Feb 2025 02:58:13 +0000
ROA not before: Mon 24 Feb 2025 02:58:13 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 134710
IP address blocks: 103.197.84.0/22 maxlen: 22
103.197.84.0/24 maxlen: 24
103.197.85.0/24 maxlen: 24
103.197.86.0/24 maxlen: 24
103.197.87.0/24 maxlen: 24
2401:9e0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CDA
Validity
Not Before: Feb 24 02:58:13 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67bbe045-aa5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:62:5e:3e:3d:b4:ac:ae:a9:9f:88:b9:7c:
18:d3:fc:ae:b8:df:a4:e5:7f:6d:7e:08:c2:69:db:
ae:de:94:23:96:47:c5:8b:1b:27:24:0f:51:d3:74:
58:dd:c4:9e:bf:e4:47:c9:64:cf:03:96:2a:65:3e:
31:f4:33:90:3f:4b:3c:31:c5:78:53:24:d2:5c:0a:
90:8f:e6:9b:ed:85:a9:87:22:16:82:23:e3:96:e3:
c7:62:cf:cb:50:10:55:ea:8d:78:7d:93:f6:b9:2d:
71:3c:56:a7:56:2e:23:f2:7c:d6:d6:5e:f3:87:e7:
f7:d0:0e:2c:72:3b:96:08:b4:c1:1c:6e:7f:d4:b9:
51:df:7a:93:9b:11:a0:0b:61:76:e7:c3:9a:3b:89:
90:41:cc:c9:ef:a1:4a:ed:5e:94:e9:8a:19:f3:7d:
17:5d:86:5a:e5:3f:dc:d0:71:45:62:e6:f4:ef:45:
13:9f:4c:8a:50:ce:47:cc:5e:ec:7a:b1:1a:3a:fe:
72:1a:74:f0:08:09:65:61:6c:0c:62:15:37:c5:9e:
03:26:22:95:b3:33:27:1c:6e:46:8c:57:6a:84:04:
ca:f6:dd:67:30:5a:c1:ae:ff:e6:3e:30:31:2c:8f:
2d:64:ee:a8:e3:ee:cc:1c:ff:4a:dc:32:2d:56:84:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:47:33:B5:AB:F0:5A:2F:BB:75:10:AA:99:4E:2A:9F:BE:AE:22:8E
X509v3 Authority Key Identifier:
keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/9A871CAEF25711EF962CF20CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.84.0/22
IPv6:
2401:9e0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:b7:76:0f:57:97:2c:82:75:50:ed:ab:1b:2c:1e:11:e9:26:
c4:6f:50:0d:b5:6a:41:fd:45:f5:56:62:50:d9:57:d9:a7:00:
d5:89:fe:ac:09:38:79:b0:86:15:db:a3:c2:92:a3:9d:6e:65:
c7:7c:1a:30:2b:aa:da:33:92:86:6d:d9:60:aa:2d:c1:39:08:
aa:d0:15:15:ec:09:af:17:9f:70:ce:4c:36:20:d1:49:2c:71:
5d:86:ad:34:79:9c:48:b8:1c:fb:7b:00:22:d6:59:be:b0:5b:
77:d0:b8:fb:bb:da:cf:07:62:8c:7c:2a:c7:be:51:16:63:e8:
58:7d:3c:08:3f:59:5f:a8:69:27:38:d4:3a:50:10:9c:82:61:
16:ba:63:ee:95:0f:f1:6a:e4:c9:15:d5:23:89:da:f9:9c:0c:
2d:89:62:bb:08:d2:08:b7:df:9a:79:53:a1:0e:47:01:66:f6:
56:b7:45:b4:d6:94:19:16:e4:14:1e:f2:1f:5a:7c:92:ca:d5:
0b:c2:e3:b9:2d:ff:17:77:90:6c:ee:7d:7f:f8:c7:c7:d7:d7:
b0:45:a9:33:68:3e:93:6e:96:79:23:b8:01:08:44:1f:a3:dc:
f5:d7:9d:a1:12:b8:77:7f:4c:1c:fb:15:70:57:c4:13:a5:8b:
73:4c:c5:61
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdDREExMTAvBgNVBAUTKEYzREE1MUZFODBCQ0RBOTcwODc1MjVFMjA0NjIxRUE5
RjU1NzQxOTkwHhcNMjUwMjI0MDI1ODEzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2JiZTA0NS1hYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmSZiXj49tKyuqZ+IuXwY0/yuuN+k5X9tfgjCaduu3pQjlkfFixsnJA9R03RY
3cSev+RHyWTPA5YqZT4x9DOQP0s8McV4UyTSXAqQj+ab7YWphyIWgiPjluPHYs/L
UBBV6o14fZP2uS1xPFanVi4j8nzW1l7zh+f30A4scjuWCLTBHG5/1LlR33qTmxGg
C2F258OaO4mQQczJ76FK7V6U6YoZ830XXYZa5T/c0HFFYub070UTn0yKUM5HzF7s
erEaOv5yGnTwCAllYWwMYhU3xZ4DJiKVszMnHG5GjFdqhATK9t1nMFrBrv/mPjAx
LI8tZO6o4+7MHP9K3DItVoQ0PwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFApHM7Wr
8Fovu3UQqplOKp++riKOMB8GA1UdIwQYMBaAFPPaUf6AvNqXCHUl4gRiHqn1V0GZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NEQS80OUIyN0Q4QTA1
NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJwY0lkU1hpQkdJZXFmVlhR
WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5cFJfb0M4MnBjSWRTWGlCR0llcWZWWFFaay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDdDREEvNDlCMjdEOEEwNTREMTFFRTlERkMxNjI0QzRGOUFFMDIvOUE4NzFDQUVG
MjU3MTFFRjk2MkNGMjBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnxVQwDQQCAAIwBwMFACQBCeAwDQYJKoZIhvcNAQELBQAD
ggEBAB+3dg9XlyyCdVDtqxssHhHpJsRvUA21akH9RfVWYlDZV9mnANWJ/qwJOHmw
hhXbo8KSo51uZcd8GjArqtozkoZt2WCqLcE5CKrQFRXsCa8Xn3DOTDYg0UkscV2G
rTR5nEi4HPt7ACLWWb6wW3fQuPu72s8HYox8Kse+URZj6Fh9PAg/WV+oaSc41DpQ
EJyCYRa6Y+6VD/Fq5MkV1SOJ2vmcDC2JYrsI0gi335p5U6EORwFm9la3RbTWlBkW
5BQe8h9afJLK1QvC47kt/xd3kGzufX/4x8fX17BFqTNoPpNulnkjuAEIRB+j3PXX
naESuHd/TBz7FXBXxBOli3NMxWE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:48:42 2025 by rpki-client