Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/C40A344CD95011EEBD100C30C4F9AE02.roa
File: C40A344CD95011EEBD100C30C4F9AE02.roa (raw, json)
Hash identifier: 3frzZsCe2cSKeF4zvhR7l2dt+O/9DB/apzghXZSwN0o=
Subject key identifier: D3:C6:40:AB:54:29:EB:98:5C:6F:BE:2A:91:F0:F2:40:8D:C1:09:8B
Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Certificate serial: 090E
Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/C40A344CD95011EEBD100C30C4F9AE02.roa
Signing time: Sun 03 Mar 2024 11:26:51 +0000
ROA not before: Sun 03 Mar 2024 11:26:51 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 134995
IP address blocks: 103.204.223.0/24 maxlen: 24
2402:6640::/32 maxlen: 32
2402:6640:5::/48 maxlen: 48
2402:6640:10::/48 maxlen: 48
2402:6640:11::/48 maxlen: 48
2402:6640:17::/48 maxlen: 48
2402:6640:18::/48 maxlen: 48
2402:6640:19::/48 maxlen: 48
2402:6640:20::/48 maxlen: 48
2402:6640:21::/48 maxlen: 48
2402:6640:22::/48 maxlen: 48
2402:6640:23::/48 maxlen: 48
2402:6640:24::/48 maxlen: 48
2402:6640:25::/48 maxlen: 48
2402:6640:26::/48 maxlen: 48
2402:6640:30::/48 maxlen: 48
2402:6640:fce::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F0C
Validity
Not Before: Mar 3 11:26:51 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65e45e7a-72c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:fe:cb:32:85:9e:a2:f9:7c:ea:65:a5:c1:
d5:85:e0:03:a6:e5:d5:84:86:fe:8e:bc:87:21:d1:
32:bb:3a:f7:c4:0a:ce:f2:4d:2a:25:27:58:1e:f6:
01:b7:f4:df:79:ae:02:b4:ab:e0:d6:aa:9a:ed:c3:
e9:8c:90:4e:f3:b2:ff:4d:83:af:43:f8:4a:25:e6:
be:1e:30:c1:d1:e0:df:61:d6:96:f9:cf:6a:98:0a:
e5:73:22:bd:f7:e5:ff:bf:cf:8c:ba:00:65:30:53:
9a:d4:a1:b1:24:3b:76:a1:09:71:3b:4c:b4:58:9e:
d6:b6:f6:9b:07:85:b3:45:2a:9c:72:ec:e0:30:4d:
53:aa:98:e5:d8:98:52:00:fc:be:cf:55:79:5a:13:
33:fb:f9:90:de:31:2e:2b:9e:1f:21:4b:02:97:d7:
54:a9:35:63:ed:f2:83:6e:b1:da:5a:f8:b8:c7:c4:
d0:e2:e4:c7:59:84:59:65:01:55:f8:89:e5:dc:aa:
50:20:18:9c:70:8c:a0:ad:fd:2f:b4:e7:cd:3f:48:
05:5a:b9:3c:de:5c:83:88:80:73:2f:f2:40:19:4b:
9e:cd:fc:d3:eb:c3:b0:dc:b8:8a:43:d6:1f:7c:e3:
f2:c3:29:d8:2d:d8:fb:04:5e:4f:f5:a0:f3:a1:9b:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:40:AB:54:29:EB:98:5C:6F:BE:2A:91:F0:F2:40:8D:C1:09:8B
X509v3 Authority Key Identifier:
keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/C40A344CD95011EEBD100C30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.223.0/24
IPv6:
2402:6640::/32
Signature Algorithm: sha256WithRSAEncryption
79:52:50:3b:c0:ac:7a:e7:6a:fa:7e:28:ff:aa:1e:b3:46:1a:
aa:22:33:a9:26:01:23:41:4f:4d:f5:50:c7:8c:dc:a0:b4:2f:
a0:61:1e:46:0e:74:e4:18:4d:e7:b6:c4:c1:f0:d3:5a:f3:79:
13:59:94:62:de:03:cc:8c:74:53:25:e5:d0:d0:4b:19:19:48:
90:6a:d5:61:1d:ff:54:ed:f2:f0:29:b9:3b:e9:55:f4:f2:06:
f6:b6:96:e0:9c:0c:5a:4b:b9:49:2c:a3:7f:57:8b:be:6e:1e:
aa:f8:19:a2:36:a8:86:9d:73:64:b4:96:fe:7d:e2:f1:31:73:
14:b9:b6:d3:77:91:c4:98:fe:68:79:3d:6b:f4:bc:d3:9e:2b:
60:d9:31:8d:4d:a9:91:4e:b0:8e:98:84:af:0c:c9:c9:48:a8:
14:f1:d0:bc:fc:68:1c:56:d9:e9:26:e0:4f:51:28:74:16:3c:
8b:d1:b3:4a:1c:53:d1:41:b9:30:6c:56:34:dd:d0:32:22:e0:
b6:be:32:9a:97:d4:86:57:ee:1e:76:f4:10:6b:ae:59:3d:64:
ca:42:bb:9f:c8:53:8b:82:64:5a:26:9f:62:66:7a:04:49:e5:
2b:9b:f7:8c:45:b5:1c:c5:6d:37:35:fb:40:59:1c:a2:82:a7:
b7:0a:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:07 2025 by rpki-client