Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/15ABECB27AE311EF9E1B0741C4F9AE02.roa
File: 15ABECB27AE311EF9E1B0741C4F9AE02.roa (raw, json)
Hash identifier: PPxTiu0HuTnV15nJLWxoQRGMwl1+HbVxOpDpDPhTeJw=
Subject key identifier: A4:C3:33:52:EF:91:8E:10:5E:78:DD:59:5F:3E:0A:6A:E5:BE:1F:12
Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial: 2419
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/15ABECB27AE311EF9E1B0741C4F9AE02.roa
Signing time: Wed 25 Sep 2024 02:08:41 +0000
ROA not before: Wed 25 Sep 2024 02:08:41 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 132730
IP address blocks: 103.24.32.0/22 maxlen: 22
103.24.32.0/22 maxlen: 24
103.24.32.0/24 maxlen: 24
103.24.33.0/24 maxlen: 24
103.24.34.0/24 maxlen: 24
103.24.35.0/24 maxlen: 24
103.224.28.0/22 maxlen: 24
150.107.4.0/24 maxlen: 24
150.107.5.0/24 maxlen: 24
150.107.6.0/24 maxlen: 24
150.107.7.0/24 maxlen: 24
160.202.32.0/22 maxlen: 24
163.53.28.0/22 maxlen: 22
163.53.28.0/22 maxlen: 24
163.53.28.0/24 maxlen: 24
163.53.29.0/24 maxlen: 24
163.53.30.0/24 maxlen: 24
163.53.31.0/24 maxlen: 24
2406:b100::/32 maxlen: 32
2406:b100::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9241 (0x2419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CD3
Validity
Not Before: Sep 25 02:08:41 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66f370a9-fe6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:68:b3:d1:af:22:a2:9b:90:b6:0e:e4:63:3a:
9e:2d:f3:b0:24:c3:6f:bb:05:9a:71:38:d7:03:68:
57:f4:82:ef:39:2f:4b:13:a6:8a:7f:c4:a5:3e:a4:
6d:ef:66:8f:c9:86:09:c7:c8:76:20:77:19:67:e0:
a9:65:f0:3c:03:af:be:7d:f5:d6:5d:a1:64:cf:77:
54:aa:46:bf:69:56:0b:c2:05:50:b6:67:e9:62:58:
03:c3:ec:40:c4:ff:8e:7b:96:8c:45:9f:65:e9:a0:
74:09:f1:12:ee:cf:cb:cd:e5:60:35:f4:7e:a6:f3:
09:6e:9c:e4:33:cf:4e:44:23:3d:cf:fe:24:57:7d:
40:f9:00:2b:67:ff:c3:3a:60:c1:32:e2:7e:2f:01:
c8:6f:db:89:48:41:7f:3b:c7:d2:fa:a1:97:f3:f9:
bb:6d:b8:97:86:76:1c:f1:fd:3a:cb:b5:d4:fa:38:
cc:eb:3d:ad:12:c8:89:d4:94:19:e7:aa:35:94:79:
1c:83:c4:d4:f7:4c:fd:b5:6d:f4:43:78:8e:43:ba:
38:85:58:ec:10:38:e1:fa:26:c0:a4:24:8d:66:a8:
1d:8b:0e:78:a5:0b:4e:d6:dc:be:ef:31:89:3a:20:
27:40:9c:db:09:35:3c:c8:7f:16:1b:8d:64:05:13:
8b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C3:33:52:EF:91:8E:10:5E:78:DD:59:5F:3E:0A:6A:E5:BE:1F:12
X509v3 Authority Key Identifier:
keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/15ABECB27AE311EF9E1B0741C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.32.0/22
103.224.28.0/22
150.107.4.0/22
160.202.32.0/22
163.53.28.0/22
IPv6:
2406:b100::/32
Signature Algorithm: sha256WithRSAEncryption
34:d3:1c:21:50:74:9e:0f:e9:2a:7f:ae:c3:cc:c9:98:9b:8f:
c6:0f:70:f0:00:08:af:df:57:3a:35:84:ce:d9:a0:25:2e:da:
3f:9c:be:0c:26:a3:b9:66:6d:8b:4a:00:9d:4d:b7:75:b0:0c:
2f:f3:9d:c3:5a:26:5f:e8:29:de:5c:d3:3c:33:fe:41:94:f6:
13:ed:11:32:45:e2:f0:34:36:1a:5a:2f:06:94:55:40:f2:57:
38:62:ee:d6:13:30:ee:9b:6c:44:50:49:33:7d:3d:33:e2:89:
33:9e:a8:21:5a:e3:35:e9:4e:0a:c3:71:a6:25:88:da:04:12:
ff:61:4d:82:67:56:4d:68:be:15:eb:15:a9:1d:1c:46:4d:c9:
2c:0c:df:7b:6e:3d:38:9e:43:aa:63:79:62:a5:83:aa:73:da:
fd:50:da:13:9a:f4:68:5a:e9:d9:31:0b:a5:12:38:68:f6:ce:
8c:30:40:10:06:3f:1a:f0:ea:99:8a:8b:ba:7d:46:11:1d:02:
78:5d:80:6e:af:cd:0f:f3:a0:e3:0a:b2:4e:9a:6b:89:4b:a0:
c1:8b:b7:9e:e0:50:74:9e:f9:d8:ac:df:e8:75:86:8b:19:63:
25:c8:33:c0:e4:7d:50:91:a4:11:15:a8:fc:f8:c0:ff:24:55:
1b:2e:36:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:59 2025 by rpki-client